Edit tour

Windows Analysis Report
http://www.noahsarkademy.com

Overview

General Information

Sample URL:	http://www.noahsarkademy.com
Analysis ID:	1430482
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1892,i,3823041689265804729,4086093224605247983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.noahsarkademy.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.noahsarkademy.com

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: http://www.noahsarkademy.com/favicon.ico	Avira URL Cloud: Label: malware
Source: http://www.noahsarkademy.com/static/js/main.7afe9bd0.js	Avira URL Cloud: Label: malware
Source: http://www.noahsarkademy.com/static/css/main.3ff242b3.css	Avira URL Cloud: Label: malware

Source: http://www.noahsarkademy.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.202.66
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.202.66
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /x1qR9tzv/swipe.png HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.noahsarkademy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x1qR9tzv/swipe.png HTTP/1.1Host: i.postimg.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.noahsarkademy.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.3ff242b3.css HTTP/1.1Host: www.noahsarkademy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.noahsarkademy.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.7afe9bd0.js HTTP/1.1Host: www.noahsarkademy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.noahsarkademy.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.noahsarkademy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.noahsarkademy.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: www.noahsarkademy.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 15:45:11 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@16/11@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1892,i,3823041689265804729,4086093224605247983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.noahsarkademy.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1892,i,3823041689265804729,4086093224605247983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.noahsarkademy.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
http://www.noahsarkademy.com/favicon.ico	100%	Avira URL Cloud	malware
https://i.postimg.cc/x1qR9tzv/swipe.png	0%	Avira URL Cloud	safe
http://www.noahsarkademy.com/static/js/main.7afe9bd0.js	100%	Avira URL Cloud	malware
http://www.noahsarkademy.com/static/css/main.3ff242b3.css	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
noahsarkademy.com	69.49.230.31	true	false	unknown
i.postimg.cc	162.249.168.129	true	false	unknown
www.google.com	74.125.136.106	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
www.noahsarkademy.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.noahsarkademy.com/favicon.ico	false	Avira URL Cloud: malware	unknown
http://www.noahsarkademy.com/	false		unknown
https://i.postimg.cc/x1qR9tzv/swipe.png	false	Avira URL Cloud: safe	unknown
http://www.noahsarkademy.com/static/css/main.3ff242b3.css	false	Avira URL Cloud: malware	unknown
http://www.noahsarkademy.com/static/js/main.7afe9bd0.js	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.249.168.129	i.postimg.cc	United States	26548	PUREVOLTAGE-INCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
74.125.136.106	www.google.com	United States	15169	GOOGLEUS	false
69.49.230.31	noahsarkademy.com	United States	46606	UNIFIEDLAYER-AS-1US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430482
Start date and time:	2024-04-23 17:44:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.noahsarkademy.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@16/11@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 108.177.122.84, 142.250.105.102, 142.250.105.101, 142.250.105.139, 142.250.105.113, 142.250.105.138, 142.250.105.100, 34.104.35.123, 52.165.165.26, 199.232.214.172, 192.229.211.108, 20.3.187.198, 20.166.126.56, 64.233.185.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://www.noahsarkademy.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (523), with no line terminators
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.87785992555525
Encrypted:	false
SSDEEP:	6:qTthqIY0gYkLfAbplGMVzalKXHbGpSaRlk095sDvpO49NVeEeDunN0hB96XW7fOo:qTE0r26VqpSqcBOeNVeHmTG7faKj2a
MD5:	E7A8C73952DADC88CCB2A8C27547575C
SHA1:	0D6BDC59D086C3082436ECA0B9668F4937552061
SHA-256:	4AB0745B2C4AFFB9D165985553435CA42026744FC6E68AF5E20A47B601D77DAD
SHA-512:	C6BBF598FA6F1900805AA2095EE728BCB651792A4F7855CC98599BE112DBD20817C97BDBD7290DEB5F1B0E8A37777BB91D882CF0829F6368BC38F702BC897BCD
Malicious:	false
Reputation:	low
URL:	http://www.noahsarkademy.com/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="Survey" content="USAA Survey"/><link rel="manifest" href="./manifest.json"/><title>Survey</title><script defer="defer" src="./static/js/main.7afe9bd0.js"></script><link href="./static/css/main.3ff242b3.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	318547
Entropy (8bit):	5.482199726604468
Encrypted:	false
SSDEEP:	6144:cZYoWIoUrC27IhkjoQIqP0pM143xT/wX4yTxT/wJ:cOUB4kE/wLZ/wJ
MD5:	754A4EA6A18A30A17D7D5EE7D703B537
SHA1:	3B7591641DCB3F7807236489BB0FBCD11034EC01
SHA-256:	7AD5ED8CA9DA766C526497AC86A987741F3198B231DE2A8FAA078FBC4C062483
SHA-512:	F5D963D92A913A6E4E49C87A60D3CF329435AEA2D5171C4DA00FA4573B4CDDD3F22F9E5F792329C33E9C44F1BC1E875E9742604D63CC8CC1619698F0BE76E13A
Malicious:	false
Reputation:	low
URL:	http://www.noahsarkademy.com/static/js/main.7afe9bd0.js
Preview:	/! For license information please see main.7afe9bd0.js.LICENSE.txt /.!function(){var e={703:function(e,t,n){var r=n(424).default,a=n(704).default,o=n(515).default,i=n(861).default;e.exports=function(){"use strict";var e=Object.entries,t=Object.setPrototypeOf,n=Object.isFrozen,l=Object.getPrototypeOf,s=Object.getOwnPropertyDescriptor,c=Object.freeze,u=Object.seal,d=Object.create,f="undefined"!==typeof Reflect&&Reflect,p=f.apply,h=f.construct;p\|\|(p=function(e,t,n){return e.apply(t,n)}),c\|\|(c=function(e){return e}),u\|\|(u=function(e){return e}),h\|\|(h=function(e,t){return o(e,i(t))});var m=S(Array.prototype.forEach),v=S(Array.prototype.pop),g=S(Array.prototype.push),y=S(String.prototype.toLowerCase),b=S(String.prototype.toString),x=S(String.prototype.match),w=S(String.prototype.replace),k=S(String.prototype.indexOf),_=S(String.prototype.trim),j=S(RegExp.prototype.test),N=E(TypeError);function S(e){return function(t){for(var n=arguments.length,r=new Array(n>1?n-1:0),a=1;a<n;a++)r[a-1]=argu

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://www.noahsarkademy.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	7.666790577305942
Encrypted:	false
SSDEEP:	12:6v/7o/6TS4lGO0GDaY7nrTNV/tfVkzq5tFXFWGgGDR/RFPP/31htLO+YrXLInrMW:p/6HlaiF9k2F7bp/FhFWorB0GSfLc
MD5:	F2BB2F0BC04E3F3EFE355CD25DFBFB76
SHA1:	CEA36D3C24EA3E054DB982E505D9D95DF3F4FD3D
SHA-256:	8DC9D7F2BE71E0F35B358E763545085D4D35476570B64DD10F38E5884D5F3698
SHA-512:	F715DD96330F9C71E868AE38048C5A749DF05B3A4CB1707F55212D174B9B196861FE32BBAED49CB21239D5F095F694977647ABB69A2FAC74D05982C6BA30510D
Malicious:	false
Reputation:	low
URL:	https://i.postimg.cc/x1qR9tzv/swipe.png
Preview:	.PNG........IHDR...2...2......?......pHYs................&IDATx..[k.1........U.VQ.+b[.E....?.+E...,....Ak..E.(.z.b.z..Qk.Z.U.T....a.......j_.L../y&..I2...7......W%s}..H.h6..../$....2.qU.....:..J....{.$.9...-...:....q.....5..j@u...I.'.4.>....L]...6....2.Z.<..3`.K....,.......D..Qi.........c..\|A.~u.K..{.+.(a.M..l........yEy.!W....#"[.4.,...5../.]. . .2.U...]....Z.d0..a[vy...&hoQ..;.0Z....h.......M......ktH......`4n..B4jP....X.o..S.....@.2..... 0.:.....B...r.x...9..2)/.......E=.y>Ah.:H.b2(...k...:.V.........}M.A...".5...+..............E.i.........2....!..z_x..G.b"`.NX{.'....p.}..>....>k..............,.zB`2.2..tQ0...U...w.LfAZ-g...Y........c6UgK..]..~...K..9.MK......... =y.F..4K[..[K......K#.T..Qm}N.x...Rm./...Om.$E...JaZ...nR..s.X....k;q.....m..&<..G.0.)k......C.K.......0.#...c..Nj 3.../".v.kY8yl.<..5...r../..b..Z.L......DN..t....IEND.B`.

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	884
Entropy (8bit):	7.666790577305942
Encrypted:	false
SSDEEP:	12:6v/7o/6TS4lGO0GDaY7nrTNV/tfVkzq5tFXFWGgGDR/RFPP/31htLO+YrXLInrMW:p/6HlaiF9k2F7bp/FhFWorB0GSfLc
MD5:	F2BB2F0BC04E3F3EFE355CD25DFBFB76
SHA1:	CEA36D3C24EA3E054DB982E505D9D95DF3F4FD3D
SHA-256:	8DC9D7F2BE71E0F35B358E763545085D4D35476570B64DD10F38E5884D5F3698
SHA-512:	F715DD96330F9C71E868AE38048C5A749DF05B3A4CB1707F55212D174B9B196861FE32BBAED49CB21239D5F095F694977647ABB69A2FAC74D05982C6BA30510D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......pHYs................&IDATx..[k.1........U.VQ.+b[.E....?.+E...,....Ak..E.(.z.b.z..Qk.Z.U.T....a.......j_.L../y&..I2...7......W%s}..H.h6..../$....2.qU.....:..J....{.$.9...-...:....q.....5..j@u...I.'.4.>....L]...6....2.Z.<..3`.K....,.......D..Qi.........c..\|A.~u.K..{.+.(a.M..l........yEy.!W....#"[.4.,...5../.]. . .2.U...]....Z.d0..a[vy...&hoQ..;.0Z....h.......M......ktH......`4n..B4jP....X.o..S.....@.2..... 0.:.....B...r.x...9..2)/.......E=.y>Ah.:H.b2(...k...:.V.........}M.A...".5...+..............E.i.........2....!..z_x..G.b"`.NX{.'....p.}..>....>k..............,.zB`2.2..tQ0...U...w.LfAZ-g...Y........c6UgK..]..~...K..9.MK......... =y.F..4K[..[K......K#.T..Qm}N.x...Rm./...Om.$E...JaZ...nR..s.X....k;q.....m..&<..G.0.)k......C.K.......0.#...c..Nj 3.../".v.kY8yl.<..5...r../..b..Z.L......DN..t....IEND.B`.

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	316111
Entropy (8bit):	5.201660362961356
Encrypted:	false
SSDEEP:	6144:zTO8ip0mVLhslEr1vepxC4W3QqJH9o3nwKMBaETNvu/sjNHGVXaIW9EY/Rb6N1wj:srvj9qcpGk
MD5:	72FFBBC07EC06F03140D9554D93541BA
SHA1:	84B31AA1CA2BF518184A91CEBC6EF0EBC1464780
SHA-256:	215EBDC8B8180A6721978D3426934BE45992742FF7E66881E43BD31031C08895
SHA-512:	B6C4EA6E6ACC59594630BE83629B58F4C8DF97009CD605786887DD7C9FE5016DB3EEFB7C06C2D6AB1346A35E7C70F0A6DA8E7CF7E7C2E4E46096E2F57B4C70F4
Malicious:	false
Reputation:	low
URL:	http://www.noahsarkademy.com/static/css/main.3ff242b3.css
Preview:	body{margin:0}h1{font-size:2em;margin:.67em 0}hr{box-sizing:initial;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:initial}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:initial}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-mo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 17:45:00.882296085 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 17:45:10.490572929 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 23, 2024 17:45:10.829474926 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.829672098 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.882765055 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.935720921 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:10.935781956 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:10.935817957 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.935847998 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.936084986 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:10.989207029 CEST	80	49737	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:10.989448071 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.042336941 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.044050932 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.066545010 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.066555023 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.172663927 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174887896 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174904108 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174916029 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174928904 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174941063 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174952984 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174964905 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174969912 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.174977064 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.174988985 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175003052 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175017118 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175023079 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175028086 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175040007 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175043106 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175066948 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175079107 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175091028 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175093889 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175102949 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175116062 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175128937 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175134897 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175134897 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175142050 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.175163031 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.175179958 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281233072 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281256914 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281270027 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281280994 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281291962 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281377077 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281388998 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281399965 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281411886 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281424046 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281435013 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281435966 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281435013 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281447887 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281461000 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281462908 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281462908 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281462908 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281471968 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281482935 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281492949 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281493902 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281513929 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281514883 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281527042 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281538963 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281550884 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281563997 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281570911 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281577110 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281589031 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281599045 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281610966 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281621933 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281634092 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281639099 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281645060 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281656027 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281666994 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281677961 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281689882 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281691074 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281702042 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281713963 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281725883 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281738997 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281738997 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281748056 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281760931 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281764030 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281771898 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281784058 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281795979 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.281797886 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281824112 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.281847000 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.387870073 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.387891054 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.387983084 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388001919 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388015032 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388025999 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388037920 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388053894 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388066053 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388077974 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388079882 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388089895 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388109922 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388122082 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388128042 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388128042 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388133049 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388144970 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388155937 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388168097 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388173103 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388180017 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388191938 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388202906 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388215065 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388216019 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388216019 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388226986 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388238907 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388246059 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388250113 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388257027 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388262033 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388273001 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388286114 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388288021 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388298035 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388310909 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388312101 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388324022 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388333082 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388335943 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388346910 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388360023 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388361931 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388372898 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388381004 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388392925 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388401031 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388406992 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388417959 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388430119 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388442039 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388451099 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388453960 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388464928 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388472080 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388478041 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388489008 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388492107 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388499975 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388510942 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388521910 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388523102 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388534069 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388545990 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388559103 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388564110 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388564110 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388570070 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388582945 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388595104 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388600111 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388600111 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388607025 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388618946 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388631105 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388643026 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388653994 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388654947 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388668060 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388679981 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388691902 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388700008 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388700008 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388705015 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388760090 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388765097 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388775110 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388782024 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388788939 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388796091 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388807058 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388813972 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388816118 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388825893 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388838053 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388849974 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388853073 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388861895 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388875008 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388885975 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388896942 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388907909 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388912916 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388912916 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388921022 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388933897 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388940096 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388947010 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388958931 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.388958931 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.388972044 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.389014006 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.389035940 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495047092 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495073080 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495085955 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495098114 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495109081 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495121002 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495131969 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495145082 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495151043 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495157957 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495170116 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495181084 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495199919 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495217085 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495282888 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495296001 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495307922 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495320082 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495331049 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495336056 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495342970 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495354891 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495356083 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495368958 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495374918 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495382071 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495388031 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495397091 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495398998 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495412111 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495417118 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495423079 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495434999 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495446920 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495450974 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495459080 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495465040 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495471954 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495484114 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495484114 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495495081 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495507002 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495508909 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495517015 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495528936 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495541096 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495547056 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495549917 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495560884 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495579958 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495590925 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495592117 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495603085 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495615959 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495620012 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495629072 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495640039 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495644093 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495651960 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495662928 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495671034 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495673895 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495688915 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495696068 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495702028 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495708942 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495709896 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495719910 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495731115 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495742083 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495750904 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495750904 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495753050 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495764971 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495775938 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495788097 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495795012 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495800018 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495810986 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495812893 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495826006 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495837927 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495846987 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495851994 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495852947 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495860100 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495881081 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495891094 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495893955 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495906115 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495918036 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495929003 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495942116 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495944977 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495953083 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495961905 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495965958 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495978117 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.495985985 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.495990038 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496001005 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496009111 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496012926 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496020079 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496031046 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496032000 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496042013 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496054888 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496058941 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496067047 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496078968 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496078968 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496090889 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496097088 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496117115 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496129990 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496141911 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496153116 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496159077 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496166945 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496174097 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496181011 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496181965 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496181965 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496187925 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496213913 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496228933 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496239901 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496246099 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496258974 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496263027 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496263027 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496273041 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496287107 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496309042 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496313095 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496336937 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496351957 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496357918 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496365070 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496378899 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496380091 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496395111 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496404886 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496409893 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496423960 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496437073 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496448994 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496460915 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496474028 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496476889 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496476889 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496486902 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496500969 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496500969 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496509075 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496519089 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496525049 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496537924 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496550083 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496562004 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496563911 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496579885 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496579885 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496592999 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496598005 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496607065 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496618986 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496628046 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496630907 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496645927 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496651888 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496659994 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496666908 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496670008 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496675014 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496681929 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496694088 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496706009 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496717930 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496726990 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496731043 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496742964 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496743917 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496756077 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496766090 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496771097 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496783018 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496786118 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496798992 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496812105 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496823072 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496829033 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496835947 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496850014 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496850014 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496865988 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496870995 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496880054 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496893883 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496906042 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496906042 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496920109 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496927977 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496937037 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496948004 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496951103 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496963978 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496977091 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.496984005 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.496989012 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497003078 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497004032 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497018099 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497030020 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497041941 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497052908 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497055054 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497055054 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497067928 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497080088 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497081041 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497096062 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497108936 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497109890 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497122049 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497134924 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497144938 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497148037 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.497163057 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497190952 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.497628927 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601322889 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601345062 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601356983 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601368904 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601380110 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601381063 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601392984 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601404905 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601409912 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601418972 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601430893 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601437092 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601457119 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601475954 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601489067 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601500988 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601512909 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601516008 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601525068 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601537943 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601541042 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601547956 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601560116 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601569891 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601572990 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601583958 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601593971 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601596117 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601604939 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601617098 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601629019 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601639032 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601650000 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601663113 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601675034 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601680040 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601680040 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601680040 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601689100 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601696014 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601736069 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601758003 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601768970 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601772070 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601779938 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601794004 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601807117 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601824999 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601829052 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601838112 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601876974 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601898909 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601911068 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601922035 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601933002 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601943016 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601950884 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601954937 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.601974010 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.601998091 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.602607965 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.602654934 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.602669001 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.602679968 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.602706909 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.602732897 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603115082 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603127956 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603168011 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603319883 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603384018 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603396893 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603408098 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603420019 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603421926 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603446007 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603502035 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603514910 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603526115 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603538036 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603538036 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603549957 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603560925 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603565931 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603571892 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603584051 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603594065 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603595018 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603605986 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603614092 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603616953 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603627920 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603634119 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603640079 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603662968 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603684902 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.603904009 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603916883 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603929043 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.603966951 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604111910 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604130983 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604144096 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604155064 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604155064 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604166985 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604178905 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604190111 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604193926 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604202032 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604212999 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604213953 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604224920 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604233027 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604235888 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604249001 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604249001 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604259968 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604271889 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604276896 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604284048 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604298115 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604305029 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604310989 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604322910 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604334116 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604342937 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604345083 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604355097 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604357004 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604362011 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604368925 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604379892 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604392052 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604394913 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604403019 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604414940 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604420900 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604427099 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604438066 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604439974 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604451895 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604465008 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604473114 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604475021 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604486942 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604487896 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604497910 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604510069 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604521036 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604532957 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604543924 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604542017 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604557037 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604569912 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604581118 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604593039 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604592085 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604592085 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604592085 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604604959 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604618073 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604620934 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604640007 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604645967 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604654074 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604665995 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604666948 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604679108 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604690075 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604702950 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604708910 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604713917 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604727030 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604727983 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604739904 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604751110 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604753017 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604765892 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604768991 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604778051 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604789972 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604794025 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604806900 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604820013 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604830027 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604831934 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604846001 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604851007 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604859114 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604871035 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604882002 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604892969 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604898930 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604898930 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604907036 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604919910 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604922056 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604931116 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604943037 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604954958 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604959965 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604968071 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604978085 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.604980946 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.604994059 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605007887 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605010033 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605021954 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605027914 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605035067 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605051041 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605058908 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605062962 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605076075 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605083942 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605088949 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605101109 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605104923 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605113983 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605125904 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605137110 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605139017 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605151892 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605156898 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605165005 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605176926 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605189085 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605192900 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605201006 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605214119 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605215073 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605227947 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605232954 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605240107 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605254889 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605268002 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605271101 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605278969 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605288982 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605293036 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605305910 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605314016 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605318069 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605330944 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605343103 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605343103 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605357885 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605365992 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605370998 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605386019 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605396986 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605397940 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605412960 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605417013 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605426073 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605437994 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605448961 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605453014 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605463028 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605473995 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605485916 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605488062 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605488062 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605504036 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605516911 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605526924 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605531931 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605545044 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605545998 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605557919 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605570078 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605581999 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605581999 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605597973 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605603933 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605611086 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605623007 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605633974 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605644941 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605655909 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605658054 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605668068 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605674982 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605680943 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605694056 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605693102 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605705976 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:11.605730057 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605748892 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.605791092 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:11.781769991 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:11.781810045 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:11.781874895 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:11.782157898 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:11.782171965 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.046463966 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.046911955 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.046937943 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.048065901 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.048131943 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.049304008 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.049379110 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.049525023 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.049535990 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.100256920 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.297311068 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.297401905 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.297486067 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.298347950 CEST	49740	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.298367977 CEST	443	49740	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.313180923 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:12.419949055 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:12.425185919 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.425223112 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.425303936 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.425592899 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.425611019 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.461249113 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:12.687236071 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.693393946 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.693435907 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.694505930 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.694570065 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.695626974 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.695698977 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.696285009 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.696305990 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.741172075 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.862062931 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:12.862112999 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:12.862732887 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:12.862927914 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:12.862940073 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:12.940648079 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.940740108 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:12.940812111 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.943692923 CEST	49741	443	192.168.2.4	162.249.168.129
Apr 23, 2024 17:45:12.943723917 CEST	443	49741	162.249.168.129	192.168.2.4
Apr 23, 2024 17:45:13.087004900 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:13.087306023 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:13.087328911 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:13.088979959 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:13.089051008 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:13.589819908 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:13.590089083 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:13.631084919 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:13.631114006 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:13.678070068 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:13.987059116 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:13.987104893 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:13.987304926 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.012742043 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.012768030 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.263562918 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.263720036 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.274801970 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.274852991 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.275096893 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.318592072 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.431329966 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.476115942 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.582030058 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.582161903 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.582235098 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.582295895 CEST	49745	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.582314014 CEST	443	49745	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.663923979 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.663964033 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.664123058 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.664863110 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.664879084 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.910212040 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.910337925 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.915065050 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.915076971 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.915745974 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:14.917794943 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:14.960135937 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:15.164885998 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:15.164974928 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:15.165055037 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:15.166167974 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:15.166167974 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 23, 2024 17:45:15.166186094 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:15.166189909 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 23, 2024 17:45:16.606950998 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:16.607007980 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:17.424266100 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:17.424345016 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:18.179079056 CEST	49736	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:18.179177999 CEST	49735	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:18.285197973 CEST	80	49736	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:18.285387993 CEST	80	49735	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:23.079586983 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:23.079665899 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:23.079899073 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:25.259418964 CEST	49742	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:45:25.259452105 CEST	443	49742	74.125.136.106	192.168.2.4
Apr 23, 2024 17:45:42.428138018 CEST	80	49737	69.49.230.31	192.168.2.4
Apr 23, 2024 17:45:42.428222895 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:55.991116047 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:45:56.097389936 CEST	80	49737	69.49.230.31	192.168.2.4
Apr 23, 2024 17:46:11.265703917 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:46:11.371813059 CEST	80	49737	69.49.230.31	192.168.2.4
Apr 23, 2024 17:46:11.371891022 CEST	49737	80	192.168.2.4	69.49.230.31
Apr 23, 2024 17:46:12.805463076 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:12.805537939 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:12.805608034 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:12.805903912 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:12.805921078 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:13.030467987 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:13.030879021 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:13.030915022 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:13.032202959 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:13.032555103 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:13.032747030 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:13.084947109 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:17.323472023 CEST	49723	80	192.168.2.4	23.207.202.66
Apr 23, 2024 17:46:17.323499918 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 23, 2024 17:46:17.429064989 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 23, 2024 17:46:17.429090977 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 23, 2024 17:46:17.429143906 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 23, 2024 17:46:17.444117069 CEST	80	49723	23.207.202.66	192.168.2.4
Apr 23, 2024 17:46:17.444264889 CEST	49723	80	192.168.2.4	23.207.202.66
Apr 23, 2024 17:46:23.039649963 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:23.039819956 CEST	443	49755	74.125.136.106	192.168.2.4
Apr 23, 2024 17:46:23.039877892 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:25.011117935 CEST	49755	443	192.168.2.4	74.125.136.106
Apr 23, 2024 17:46:25.011141062 CEST	443	49755	74.125.136.106	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 17:45:08.884597063 CEST	53	64083	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:08.916718960 CEST	53	62357	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:09.556206942 CEST	53	58900	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:10.608153105 CEST	50317	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:10.608782053 CEST	65533	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:10.780323982 CEST	53	65533	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:10.828480005 CEST	53	50317	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:11.672065020 CEST	50321	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:11.672395945 CEST	56602	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:11.779598951 CEST	53	56602	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:11.781143904 CEST	53	50321	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:12.317235947 CEST	59778	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:12.317574978 CEST	61726	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:12.424051046 CEST	53	59778	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:12.424505949 CEST	53	61726	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:12.753662109 CEST	63641	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:12.754127979 CEST	59716	53	192.168.2.4	1.1.1.1
Apr 23, 2024 17:45:12.860630989 CEST	53	59716	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:12.860748053 CEST	53	63641	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:26.964169025 CEST	53	53573	1.1.1.1	192.168.2.4
Apr 23, 2024 17:45:28.824918985 CEST	138	138	192.168.2.4	192.168.2.255
Apr 23, 2024 17:45:46.101023912 CEST	53	63198	1.1.1.1	192.168.2.4
Apr 23, 2024 17:46:08.473104954 CEST	53	58279	1.1.1.1	192.168.2.4
Apr 23, 2024 17:46:08.781805038 CEST	53	63727	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 17:45:10.608153105 CEST	192.168.2.4	1.1.1.1	0xce2c	Standard query (0)	www.noahsarkademy.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:10.608782053 CEST	192.168.2.4	1.1.1.1	0xa0f0	Standard query (0)	www.noahsarkademy.com	65	IN (0x0001)	false
Apr 23, 2024 17:45:11.672065020 CEST	192.168.2.4	1.1.1.1	0xe8e9	Standard query (0)	i.postimg.cc	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:11.672395945 CEST	192.168.2.4	1.1.1.1	0xcfbc	Standard query (0)	i.postimg.cc	65	IN (0x0001)	false
Apr 23, 2024 17:45:12.317235947 CEST	192.168.2.4	1.1.1.1	0xc23b	Standard query (0)	i.postimg.cc	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.317574978 CEST	192.168.2.4	1.1.1.1	0x7d3f	Standard query (0)	i.postimg.cc	65	IN (0x0001)	false
Apr 23, 2024 17:45:12.753662109 CEST	192.168.2.4	1.1.1.1	0xc07a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.754127979 CEST	192.168.2.4	1.1.1.1	0xd6a5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 17:45:10.780323982 CEST	1.1.1.1	192.168.2.4	0xa0f0	No error (0)	www.noahsarkademy.com	noahsarkademy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:45:10.828480005 CEST	1.1.1.1	192.168.2.4	0xce2c	No error (0)	www.noahsarkademy.com	noahsarkademy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:45:10.828480005 CEST	1.1.1.1	192.168.2.4	0xce2c	No error (0)	noahsarkademy.com		69.49.230.31	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:11.781143904 CEST	1.1.1.1	192.168.2.4	0xe8e9	No error (0)	i.postimg.cc		162.249.168.129	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.424051046 CEST	1.1.1.1	192.168.2.4	0xc23b	No error (0)	i.postimg.cc		162.249.168.129	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860630989 CEST	1.1.1.1	192.168.2.4	0xd6a5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:12.860748053 CEST	1.1.1.1	192.168.2.4	0xc07a	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:24.249430895 CEST	1.1.1.1	192.168.2.4	0x714e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:24.249430895 CEST	1.1.1.1	192.168.2.4	0x714e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:25.278961897 CEST	1.1.1.1	192.168.2.4	0x9b97	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:45:25.278961897 CEST	1.1.1.1	192.168.2.4	0x9b97	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:45:37.916152000 CEST	1.1.1.1	192.168.2.4	0x6149	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:45:37.916152000 CEST	1.1.1.1	192.168.2.4	0x6149	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:46:01.209300995 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:46:01.209300995 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 17:46:21.207724094 CEST	1.1.1.1	192.168.2.4	0xe43d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 17:46:21.207724094 CEST	1.1.1.1	192.168.2.4	0xe43d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.noahsarkademy.com

i.postimg.cc

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	69.49.230.31	80	5080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 17:45:10.936084986 CEST	436	OUT	GET / HTTP/1.1 Host: www.noahsarkademy.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 17:45:11.044050932 CEST	765	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 15:45:09 GMT Server: Apache Last-Modified: Wed, 24 Jan 2024 15:53:18 GMT Accept-Ranges: bytes Content-Length: 523 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 53 75 72 76 65 79 22 20 63 6f 6e 74 65 6e 74 3d 22 55 53 41 41 20 53 75 72 76 65 79 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2e 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 2e 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 61 69 6e 2e 37 61 66 65 39 62 64 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2e 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 33 66 66 32 34 32 62 33 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 6e 6f 73 63 72 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="Survey" content="USAA Survey"/><link rel="manifest" href="./manifest.json"/><title>Survey</title><script defer="defer" src="./static/js/main.7afe9bd0.js"></script><link href="./static/css/main.3ff242b3.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Apr 23, 2024 17:45:11.066555023 CEST	340	OUT	GET /static/js/main.7afe9bd0.js HTTP/1.1 Host: www.noahsarkademy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.noahsarkademy.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 17:45:11.175017118 CEST	1289	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 15:45:09 GMT Server: Apache Last-Modified: Wed, 24 Jan 2024 15:53:18 GMT Accept-Ranges: bytes Content-Length: 318547 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/javascript Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 37 61 66 65 39 62 64 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 37 30 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 32 34 29 2e 64 65 66 61 75 6c 74 2c 61 3d 6e 28 37 30 34 29 2e 64 65 66 61 75 6c 74 2c 6f 3d 6e 28 35 31 35 29 2e 64 65 66 61 75 6c 74 2c 69 3d 6e 28 38 36 31 29 2e 64 65 66 61 75 6c 74 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 2c 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6e 3d 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 63 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 2c 75 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 2c 64 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2c 70 3d 66 2e 61 70 70 6c 79 2c 68 3d 66 2e 63 6f 6e 73 74 72 75 63 74 3b 70 7c 7c 28 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 6e 29 7d 29 2c 63 7c 7c 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 75 7c 7c 28 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 68 7c 7c 28 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 65 2c 69 28 74 29 29 7d 29 3b 76 61 72 20 6d 3d 53 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 29 2c 76 3d 53 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 70 29 2c 67 3d 53 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 29 2c 79 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 29 2c 62 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 29 2c 78 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 29 2c 77 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 29 2c 6b 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 29 2c 5f 3d 53 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 29 2c 6a 3d 53 28 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 73 74 29 2c 4e 3d 45 28 54 79 70 65 45 72 72 6f 72 29 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 3e 31 3f 6e 2d 31 3a 30 29 2c 61 3d 31 3b 61 3c 6e 3b 61 2b 2b 29 72 5b 61 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 70 28 65 2c 74 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 Data Ascii: /! For license information please see main.7afe9bd0.js.LICENSE.txt /!function(){var e={703:function(e,t,n){var r=n(424).default,a=n(704).default,o=n(515).default,i=n(861).default;e.exports=function(){"use strict";var e=Object.entries,t=Object.setPrototypeOf,n=Object.isFrozen,l=Object.getPrototypeOf,s=Object.getOwnPropertyDescriptor,c=Object.freeze,u=Object.seal,d=Object.create,f="undefined"!==typeof Reflect&&Reflect,p=f.apply,h=f.construct;p\|\|(p=function(e,t,n){return e.apply(t,n)}),c\|\|(c=function(e){return e}),u\|\|(u=function(e){return e}),h\|\|(h=function(e,t){return o(e,i(t))});var m=S(Array.prototype.forEach),v=S(Array.prototype.pop),g=S(Array.prototype.push),y=S(String.prototype.toLowerCase),b=S(String.prototype.toString),x=S(String.prototype.match),w=S(String.prototype.replace),k=S(String.prototype.indexOf),_=S(String.prototype.trim),j=S(RegExp.prototype.test),N=E(TypeError);function S(e){return function(t){for(var n=arguments.length,r=new Array(n>1?n-1:0),a=1;a<n;a++)r[a-1]=arguments[a];return p(e,t,r)}}function E(e)
Apr 23, 2024 17:45:11.175028086 CEST	1289	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 Data Ascii: {return function(){for(var t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return h(e,n)}}function C(e,r,a){var o;a=null!==(o=a)&&void 0!==o?o:y,t&&t(e,null);for(var i=r.length;i--;){var l=r[i];if("string"===typeof l){var s=a(l
Apr 23, 2024 17:45:11.175040007 CEST	1289	IN	Data Raw: 22 73 61 6d 70 22 2c 22 73 65 63 74 69 6f 6e 22 2c 22 73 65 6c 65 63 74 22 2c 22 73 68 61 64 6f 77 22 2c 22 73 6d 61 6c 6c 22 2c 22 73 6f 75 72 63 65 22 2c 22 73 70 61 63 65 72 22 2c 22 73 70 61 6e 22 2c 22 73 74 72 69 6b 65 22 2c 22 73 74 72 6f Data Ascii: "samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),O=c(["s
Apr 23, 2024 17:45:11.175066948 CEST	1289	IN	Data Raw: 5b 22 6d 61 74 68 22 2c 22 6d 65 6e 63 6c 6f 73 65 22 2c 22 6d 65 72 72 6f 72 22 2c 22 6d 66 65 6e 63 65 64 22 2c 22 6d 66 72 61 63 22 2c 22 6d 67 6c 79 70 68 22 2c 22 6d 69 22 2c 22 6d 6c 61 62 65 6c 65 64 74 72 22 2c 22 6d 6d 75 6c 74 69 73 63 Data Ascii: ["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munder
Apr 23, 2024 17:45:11.175079107 CEST	1289	IN	Data Raw: 72 65 76 65 72 73 65 64 22 2c 22 72 6f 6c 65 22 2c 22 72 6f 77 73 22 2c 22 72 6f 77 73 70 61 6e 22 2c 22 73 70 65 6c 6c 63 68 65 63 6b 22 2c 22 73 63 6f 70 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 68 61 70 65 22 2c 22 73 69 7a 65 22 2c 22 Data Ascii: reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),
Apr 23, 2024 17:45:11.175091028 CEST	1289	IN	Data Raw: 64 69 61 22 2c 22 6d 65 74 68 6f 64 22 2c 22 6d 6f 64 65 22 2c 22 6d 69 6e 22 2c 22 6e 61 6d 65 22 2c 22 6e 75 6d 6f 63 74 61 76 65 73 22 2c 22 6f 66 66 73 65 74 22 2c 22 6f 70 65 72 61 74 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 6f 72 64 65 Data Ascii: dia","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha",
Apr 23, 2024 17:45:11.175102949 CEST	1289	IN	Data Raw: 6c 65 6e 67 74 68 22 2c 22 6c 69 6e 65 74 68 69 63 6b 6e 65 73 73 22 2c 22 6c 73 70 61 63 65 22 2c 22 6c 71 75 6f 74 65 22 2c 22 6d 61 74 68 62 61 63 6b 67 72 6f 75 6e 64 22 2c 22 6d 61 74 68 63 6f 6c 6f 72 22 2c 22 6d 61 74 68 73 69 7a 65 22 2c Data Ascii: length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scri
Apr 23, 2024 17:45:11.175116062 CEST	1289	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 29 7d 63 61 74 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 Data Ascii: on(e){return e},createScriptURL:function(e){return e}})}catch(o){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function ee(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:Z(),n=function(e){return
Apr 23, 2024 17:45:11.175128937 CEST	1289	IN	Data Raw: 28 44 29 2c 69 28 49 29 2c 69 28 48 29 2c 69 28 55 29 29 29 2c 6a 65 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 2c 7b 74 61 67 4e 61 6d 65 43 68 65 63 6b 3a 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c Data Ascii: (D),i(I),i(H),i(U))),je=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,c
Apr 23, 2024 17:45:11.175142050 CEST	1289	IN	Data Raw: 54 59 50 45 2c 64 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 75 65 3f 62 3a 79 2c 78 65 3d 22 41 4c 4c 4f 57 45 44 5f 54 41 47 53 22 69 6e 20 65 3f 43 28 7b 7d 2c 65 2e 41 4c 4c 4f 57 45 44 5f 54 41 47 53 Data Ascii: TYPE,de="application/xhtml+xml"===ue?b:y,xe="ALLOWED_TAGS"in e?C({},e.ALLOWED_TAGS,de):we,ke="ALLOWED_ATTR"in e?C({},e.ALLOWED_ATTR,de):_e,tt="ALLOWED_NAMESPACES"in e?C({},e.ALLOWED_NAMESPACES,b):nt,Ge="ADD_URI_SAFE_ATTR"in e?C(L(Ye),e.ADD_URI
Apr 23, 2024 17:45:11.281563997 CEST	1289	IN	Data Raw: 5f 48 41 4e 44 4c 49 4e 47 2e 61 6c 6c 6f 77 43 75 73 74 6f 6d 69 7a 65 64 42 75 69 6c 74 49 6e 45 6c 65 6d 65 6e 74 73 26 26 28 6a 65 2e 61 6c 6c 6f 77 43 75 73 74 6f 6d 69 7a 65 64 42 75 69 6c 74 49 6e 45 6c 65 6d 65 6e 74 73 3d 65 2e 43 55 53 Data Ascii: _HANDLING.allowCustomizedBuiltInElements&&(je.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),ze&&(Ce=!1),Me&&(Pe=!0),Ve&&(xe=C({},i(F)),ke=[],!0===Ve.html&&(C(xe,z),C(ke,D)),!0===Ve.svg&&(C(xe,O),C(ke,
Apr 23, 2024 17:45:12.313180923 CEST	386	OUT	GET /favicon.ico HTTP/1.1 Host: www.noahsarkademy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.noahsarkademy.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 17:45:12.419949055 CEST	515	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 15:45:11 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	69.49.230.31	80	5080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 17:45:11.066545010 CEST	357	OUT	GET /static/css/main.3ff242b3.css HTTP/1.1 Host: www.noahsarkademy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.noahsarkademy.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 23, 2024 17:45:11.174887896 CEST	1289	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 15:45:09 GMT Server: Apache Last-Modified: Wed, 24 Jan 2024 15:53:18 GMT Accept-Ranges: bytes Content-Length: 316111 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 69 74 69 61 6c 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 Data Ascii: body{margin:0}h1{font-size:2em;margin:.67em 0}hr{box-sizing:initial;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:initial}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:initial}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px
Apr 23, 2024 17:45:11.174904108 CEST	1289	IN	Data Raw: 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f Data Ascii: dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{vertical-align:initial}textarea{overflow:auto}[type=checkbox],[type=radio]{box
Apr 23, 2024 17:45:11.174916029 CEST	1289	IN	Data Raw: 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 2d 77 65 Data Ascii: ex;flex-wrap:wrap}.row:after{clear:both;content:"";display:table}[class*=col-]{-webkit-box-flex:1;-ms-flex:1 1;flex-basis:100%;max-width:100%}.col-stretch{flex:1 1;min-width:1px}.col-1-12,.layout-xs .col-xs-1-12,.layout-xs.layout-sm .col-sm-1-
Apr 23, 2024 17:45:11.174928904 CEST	1289	IN	Data Raw: 79 6f 75 74 2d 6c 67 2e 6c 61 79 6f 75 74 2d 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 6c 20 2e 63 6f 6c 2d 78 78 6c 2d 31 2d 36 2c 2e 6c 61 79 6f 75 74 2d 78 73 2e 6c 61 79 6f 75 74 2d 73 6d 2e 6c 61 79 6f 75 74 2d 6d 64 2e 6c 61 79 6f 75 74 2d 6c 67 Data Ascii: yout-lg.layout-xl.layout-xxl .col-xxl-1-6,.layout-xs.layout-sm.layout-md.layout-lg.layout-xl.layout-xxl.layout-xxxl .col-xxxl-1-6{flex-basis:16.66667%;max-width:16.66667%}.col-1-5,.layout-xs .col-xs-1-5,.layout-xs.layout-sm .col-sm-1-5,.layout
Apr 23, 2024 17:45:11.174941063 CEST	1289	IN	Data Raw: 2e 63 6f 6c 2d 78 78 6c 2d 31 2d 33 2c 2e 6c 61 79 6f 75 74 2d 78 73 2e 6c 61 79 6f 75 74 2d 73 6d 2e 6c 61 79 6f 75 74 2d 6d 64 2e 6c 61 79 6f 75 74 2d 6c 67 2e 6c 61 79 6f 75 74 2d 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 6c 2e 6c 61 79 6f 75 74 2d Data Ascii: .col-xxl-1-3,.layout-xs.layout-sm.layout-md.layout-lg.layout-xl.layout-xxl.layout-xxxl .col-xxxl-1-3{flex-basis:33.33333%;max-width:33.33333%}.col-3-8,.layout-xs .col-xs-3-8,.layout-xs.layout-sm .col-sm-3-8,.layout-xs.layout-sm.layout-md .col-
Apr 23, 2024 17:45:11.174952984 CEST	1289	IN	Data Raw: 75 74 2d 78 73 2e 6c 61 79 6f 75 74 2d 73 6d 2e 6c 61 79 6f 75 74 2d 6d 64 2e 6c 61 79 6f 75 74 2d 6c 67 2e 6c 61 79 6f 75 74 2d 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 78 6c 20 2e 63 6f 6c 2d 78 78 78 6c 2d 35 2d 31 Data Ascii: ut-xs.layout-sm.layout-md.layout-lg.layout-xl.layout-xxl.layout-xxxl .col-xxxl-5-12{flex-basis:41.66667%;max-width:41.66667%}.col-1-2,.layout-xs .col-xs-1-2,.layout-xs.layout-sm .col-sm-1-2,.layout-xs.layout-sm.layout-md .col-md-1-2,.layout-xs
Apr 23, 2024 17:45:11.174964905 CEST	1289	IN	Data Raw: 79 6f 75 74 2d 73 6d 2e 6c 61 79 6f 75 74 2d 6d 64 2e 6c 61 79 6f 75 74 2d 6c 67 2e 6c 61 79 6f 75 74 2d 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 78 6c 20 2e 63 6f 6c 2d 78 78 78 6c 2d 33 2d 35 7b 66 6c 65 78 2d 62 61 Data Ascii: yout-sm.layout-md.layout-lg.layout-xl.layout-xxl.layout-xxxl .col-xxxl-3-5{flex-basis:60%;max-width:60%}.col-5-8,.layout-xs .col-xs-5-8,.layout-xs.layout-sm .col-sm-5-8,.layout-xs.layout-sm.layout-md .col-md-5-8,.layout-xs.layout-sm.layout-md.
Apr 23, 2024 17:45:11.174977064 CEST	1289	IN	Data Raw: 6c 67 2e 6c 61 79 6f 75 74 2d 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 6c 2e 6c 61 79 6f 75 74 2d 78 78 78 6c 20 2e 63 6f 6c 2d 78 78 78 6c 2d 33 2d 34 7b 66 6c 65 78 2d 62 61 73 69 73 3a 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f Data Ascii: lg.layout-xl.layout-xxl.layout-xxxl .col-xxxl-3-4{flex-basis:75%;max-width:75%}.col-4-5,.layout-xs .col-xs-4-5,.layout-xs.layout-sm .col-sm-4-5,.layout-xs.layout-sm.layout-md .col-md-4-5,.layout-xs.layout-sm.layout-md.layout-lg .col-lg-4-5,.la
Apr 23, 2024 17:45:11.174988985 CEST	1289	IN	Data Raw: 74 2d 78 78 78 6c 20 2e 63 6f 6c 2d 78 78 78 6c 2d 37 2d 38 7b 66 6c 65 78 2d 62 61 73 69 73 3a 38 37 2e 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 37 2e 35 25 7d 2e 63 6f 6c 2d 31 31 2d 31 32 2c 2e 6c 61 79 6f 75 74 2d 78 73 20 2e 63 6f 6c 2d 78 Data Ascii: t-xxxl .col-xxxl-7-8{flex-basis:87.5%;max-width:87.5%}.col-11-12,.layout-xs .col-xs-11-12,.layout-xs.layout-sm .col-sm-11-12,.layout-xs.layout-sm.layout-md .col-md-11-12,.layout-xs.layout-sm.layout-md.layout-lg .col-lg-11-12,.layout-xs.layout-
Apr 23, 2024 17:45:11.175003052 CEST	1289	IN	Data Raw: 6f 66 66 73 65 74 2d 78 78 78 6c 2d 31 2d 31 32 2c 2e 6f 66 66 73 65 74 2d 31 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 6c 61 79 6f 75 74 2d 78 73 20 2e 6f 66 66 73 65 74 2d 78 73 2d 31 2d 38 2c 2e 6c 61 79 6f Data Ascii: offset-xxxl-1-12,.offset-1-12{margin-left:8.33333%}.layout-xs .offset-xs-1-8,.layout-xs.layout-sm .offset-sm-1-8,.layout-xs.layout-sm.layout-md .offset-md-1-8,.layout-xs.layout-sm.layout-md.layout-lg .offset-lg-1-8,.layout-xs.layout-sm.layout-
Apr 23, 2024 17:45:11.281233072 CEST	1289	IN	Data Raw: 2d 78 78 78 6c 20 2e 6f 66 66 73 65 74 2d 78 78 78 6c 2d 31 2d 35 2c 2e 6f 66 66 73 65 74 2d 31 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 2e 6c 61 79 6f 75 74 2d 78 73 20 2e 6f 66 66 73 65 74 2d 78 73 2d 31 2d 34 2c 2e 6c 61 79 6f Data Ascii: -xxxl .offset-xxxl-1-5,.offset-1-5{margin-left:20%}.layout-xs .offset-xs-1-4,.layout-xs.layout-sm .offset-sm-1-4,.layout-xs.layout-sm.layout-md .offset-md-1-4,.layout-xs.layout-sm.layout-md.layout-lg .offset-lg-1-4,.layout-xs.layout-sm.layout-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	69.49.230.31	80	5080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 23, 2024 17:45:55.991116047 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	162.249.168.129	443	5080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 15:45:12 UTC	594	OUT	GET /x1qR9tzv/swipe.png HTTP/1.1 Host: i.postimg.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.noahsarkademy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 15:45:12 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 15:45:12 GMT Content-Type: image/png Content-Length: 884 Connection: close Last-Modified: Thu, 20 Jul 2023 23:45:04 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-04-23 15:45:12 UTC	884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 26 49 44 41 54 78 9c ed 9a 5b 6b 14 31 18 86 1f a9 87 0b b5 a2 55 ac 56 51 14 2b 2a 62 5b b1 45 bd d2 1f e1 bd 3f c4 2b 45 f1 00 ab 2c 14 11 bc 10 41 6b 17 e9 45 a5 28 2a 88 7a e1 a1 62 91 7a c4 0b 51 6b a1 5a ab 55 f0 54 19 09 bc 03 61 9d 99 9d 9d cd ec ce 6a 5f 08 4c b2 93 2f 79 26 f9 be 49 32 0b d3 fa 37 b5 09 c8 01 c3 c0 57 25 73 7d 02 d8 48 1d 68 36 90 07 a6 00 2f 24 fd 16 d0 1c 32 0c 71 55 9d fd 06 1c 07 3a 81 b9 4a 9d 02 f8 ae 7b ae 24 84 39 05 0c 02 2d a4 a4 bc 3a f8 1a d8 1c 71 df 16 e0 8d ee 35 b0 e5 6a 40 75 9f 03 cb 49 c1 27 a6 34 12 3e c4 0a a0 00 4c 2a 5d 04 d6 e9 b7 36 e0 Data Ascii: PNGIHDR22?pHYs&IDATx[k1UVQ+b[E?+E,AkE(zbzQkZUTaj_L/y&I27W%s}Hh6/$2qU:J{$9-:q5j@uI'4>L*]6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	162.249.168.129	443	5080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 15:45:12 UTC	354	OUT	GET /x1qR9tzv/swipe.png HTTP/1.1 Host: i.postimg.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 15:45:12 UTC	377	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 15:45:12 GMT Content-Type: image/png Content-Length: 884 Connection: close Last-Modified: Thu, 20 Jul 2023 23:45:04 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-04-23 15:45:12 UTC	884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 26 49 44 41 54 78 9c ed 9a 5b 6b 14 31 18 86 1f a9 87 0b b5 a2 55 ac 56 51 14 2b 2a 62 5b b1 45 bd d2 1f e1 bd 3f c4 2b 45 f1 00 ab 2c 14 11 bc 10 41 6b 17 e9 45 a5 28 2a 88 7a e1 a1 62 91 7a c4 0b 51 6b a1 5a ab 55 f0 54 19 09 bc 03 61 9d 99 9d 9d cd ec ce 6a 5f 08 4c b2 93 2f 79 26 f9 be 49 32 0b d3 fa 37 b5 09 c8 01 c3 c0 57 25 73 7d 02 d8 48 1d 68 36 90 07 a6 00 2f 24 fd 16 d0 1c 32 0c 71 55 9d fd 06 1c 07 3a 81 b9 4a 9d 02 f8 ae 7b ae 24 84 39 05 0c 02 2d a4 a4 bc 3a f8 1a d8 1c 71 df 16 e0 8d ee 35 b0 e5 6a 40 75 9f 03 cb 49 c1 27 a6 34 12 3e c4 0a a0 00 4c 2a 5d 04 d6 e9 b7 36 e0 Data Ascii: PNGIHDR22?pHYs&IDATx[k1UVQ+b[E?+E,AkE(zbzQkZUTaj_L/y&I27W%s}Hh6/$2qU:J{$9-:q5j@uI'4>L*]6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 15:45:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 15:45:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=55144 Date: Tue, 23 Apr 2024 15:45:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 15:45:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 15:45:15 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=37107 Date: Tue, 23 Apr 2024 15:45:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 15:45:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Target ID:	0
Start time:	17:45:03
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:45:07
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1892,i,3823041689265804729,4086093224605247983,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:45:09
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.noahsarkademy.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.noahsarkademy.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5580, Parent PID: 1596

General

Chronological Activities

Analysis Process: chrome.exePID: 5080, Parent PID: 5580

General

Chronological Activities

Analysis Process: chrome.exePID: 6404, Parent PID: 1596

General

Windows Analysis Report
http://www.noahsarkademy.com