Edit tour

Windows Analysis Report
https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUb

Overview

General Information

Sample URL:	https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi
Analysis ID:	1432269
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1888 --field-trial-handle=2032,i,1493493240830737483,1153212126501728940,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://www.aptracking1.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_82.2.dr

String found in binary or memory: https://assets.apollo.io/js/unsubscribe-ui.js

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49719 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/24@20/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1888 --field-trial-handle=2032,i,1493493240830737483,1153212126501728940,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1888 --field-trial-handle=2032,i,1493493240830737483,1153212126501728940,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://assets.apollo.io/js/bundle-app-production-7012-50c34dca8b7ca494c30f.js	0%	Avira URL Cloud	safe
https://disarming-individualist-2448d018e760.herokuapp.com/u?mid=662111e2b41b5c000793ac46	0%	Avira URL Cloud	safe
https://www.aptracking1.com/favicon.ico	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-7977-78bb72fada7e81315467.js	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=24893&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/unsubscribe-ui.js	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js	0%	Avira URL Cloud	safe
https://www.aptracking1.com/favicon.ico	0%	Virustotal		Browse
https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js	0%	Virustotal		Browse
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=54900&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js	0%	Virustotal		Browse
https://assets.apollo.io/js/unsubscribe-ui.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.aptracking1.com	34.149.61.18	true	false	unknown
assets.apollo.io	34.102.205.190	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	high
www.google.com	142.250.217.164	true	false	high
u43140843.ct.sendgrid.net	167.89.118.118	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
disarming-individualist-2448d018e760.herokuapp.com	18.211.231.38	true	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets.apollo.io/js/bundle-app-production-7012-50c34dca8b7ca494c30f.js	false	Avira URL Cloud: safe	unknown
https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D	false		high
https://disarming-individualist-2448d018e760.herokuapp.com/u?mid=662111e2b41b5c000793ac46	false	Avira URL Cloud: safe	unknown
https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46	false		unknown
https://bam.nr-data.net/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057	false	Avira URL Cloud: safe	unknown
https://www.aptracking1.com/favicon.ico	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-7977-78bb72fada7e81315467.js	false	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/nr-spa-1.257.0.min.js	false		high
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=24893&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u	false	Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/unsubscribe-ui.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=54900&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
167.89.118.118	u43140843.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
34.149.61.18	www.aptracking1.com	United States	2686	ATGS-MMD-ASUS	false
18.211.231.38	disarming-individualist-2448d018e760.herokuapp.com	United States	14618	AMAZON-AESUS	false
34.102.205.190	assets.apollo.io	United States	15169	GOOGLEUS	false
142.250.217.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
192.168.2.15

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432269
Start date and time:	2024-04-26 18:47:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/24@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.165.195, 142.250.217.174, 173.194.212.84, 34.104.35.123, 40.127.169.103, 23.45.182.102, 23.45.182.101, 23.45.182.108, 23.45.182.112, 23.45.182.77, 23.45.182.66, 23.45.182.75, 23.45.182.106, 23.45.182.72, 192.229.211.108, 20.3.187.198, 20.166.126.56, 172.217.2.195, 199.232.210.172
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 15:48:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982164403375918
Encrypted:	false
SSDEEP:	48:8z3dNTVp6HiidAKZdA19ehwiZUklqehEJy+3:8zLj//y
MD5:	E4D1F680F54417CCCEC4A16635438AD8
SHA1:	000FC0F9E08604E334C07180C8825DF8CE575817
SHA-256:	A350A22F56E3F3B45AA4EC09D7E8C7CC2B4AC068DF07C7F64E1E641AAC0D1AA4
SHA-512:	4EC4F4F105800FC04F0575993A42BD88229F566A7DCCCAD21191CCC4420CA5E69203C8D7F340017D83C1AEB688D7FC930B4D62BD86F46750F06432F38A4827B5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 15:48:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9996264555103656
Encrypted:	false
SSDEEP:	48:8fC3dNTVp6HiidAKZdA1weh/iZUkAQkqeh1Jy+2:86LjF9QKy
MD5:	8E7EED0B173D85DED044759723996D5B
SHA1:	CCE287C53AA73C2C630A22DC2FFD3FC4E2A40FFB
SHA-256:	882D86938DC92E866ED112563BC5315058AD74145EE218EC7A1801CCA0D4363D
SHA-512:	7F2AC6C683A1A4C9B174172606E8294A861BF7FC171D9F01D24DF430730446DDCA6712D17AFC84DDE2279582A0075BF097FDC63CC73ABAD4D0A3094FA28B06E0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......9.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006136121606893
Encrypted:	false
SSDEEP:	48:8x6dNTVpsHiidAKZdA14tseh7sFiZUkmgqeh7s/Jy+BX:8xsj7nDy
MD5:	46AFD344C2C6614AA6D77B288C1DC602
SHA1:	B2BE112568E23784E41A584242E8E10F81BF37B2
SHA-256:	6B2EDADBA021ECA3DB23BBB0A30D09A048C148B2B78263780CF06EE4B9B70B62
SHA-512:	287C2301BB18CB6F18D92C225E4BC1CAD481C195BFF66B306C4E2F1DCE937476A8CB363B4DB3FB6BE9BF592F015C7E807641BDBBA72B12C428E18FB93920ADB5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 15:48:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9960554499257457
Encrypted:	false
SSDEEP:	48:8Ud3dNTVp6HiidAKZdA1vehDiZUkwqeh5Jy+R:8UdLjGZy
MD5:	412455E42902B0F6093201C04D33C886
SHA1:	BACD865EE4F839E32FC260E742012F6E7D60F868
SHA-256:	B8A878ABC4F4EFC43807F4FDD582145B6CA33F78AA5716CEF584CF53D200D9A2
SHA-512:	AF361F308A5AD2B1053DE9138CD3D6A7BA6F7DE57C9E5DD7858B693068013D0AD18B3F826A6B9827E192D100B1C9921699CA3149B77CEFE052CAA4E0B1E15E95
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......1.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 15:48:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987762359649267
Encrypted:	false
SSDEEP:	48:8L3dNTVp6HiidAKZdA1hehBiZUk1W1qehbJy+C:8LLjG91y
MD5:	E3DCB55367BB263780E9150DC1BE70E5
SHA1:	1758C376104632D5730B6AC9F539D565769B5ECE
SHA-256:	D2FA2B44BBC4B339A51491EBCB0AC3C0492A9910B9B734BDA09C6994594FA0F9
SHA-512:	CF765BA8E038ECE6396CABE8E921ECACF0F1A37FD819B13D038A6AAF2582578DC8CB9E2D78799F41D7C0BA1357D67C764DE1A8EF30751D2C3DCDE2E9765E5E32
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......>.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 15:48:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9974268417226453
Encrypted:	false
SSDEEP:	48:8c3dNTVp6HiidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbhJy+yT+:8cLjYT/TbxWOvTbDy7T
MD5:	9B7B093DFC669D4419B4E19B3FF065D1
SHA1:	82EA8268CB7420EEE5ED498DA782DCCFF4A1D702
SHA-256:	257C4A6CE5E8F119A2F065FEBF114232F60940C3A2B000C90744603050C77DFC
SHA-512:	904596FF65D8B060518DB4DBABEAF1BECE24F663747BE7BB27A60AB05E5FA7827421D8A65467BCB2EA473C860076EC5A74CDBB2C4F76472644BACB752F7BA7C4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........3h~X.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.673701612429055
Encrypted:	false
SSDEEP:	6:H0cUayCV/I1EiPsMpcAK+jU+kX1RVU692fLqrrOjfmGkjc2iO:H0ctyCVkFgVXXVU3OOjfqjc2
MD5:	1F5103571DCB6984D79EFD6E129D5C48
SHA1:	ADE1688FDA202178126ECB7A56E851D482C50FB4
SHA-256:	0AFB297FCAF9AC134966020C8CF37AD63121529F28A509A57B3C4EE502F14E13
SHA-512:	AB103067DE4E6F9735F22AD58C52D9CEA47BC111E60568B23964D321BD26942D1EF701E1DA68C1C4A7F917BDF1342F0C51D4EC6029143CA04371AB0D20234D3E
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ................................bw........... ..'0.<...@....N`..[p. h.......!(.6....HX.>...4...8...<...2...6... h... (.4....Th..ax."n....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp2ne1zt4s", last modified: Fri Apr 26 16:19:19 2024, max compression, original size modulo 2^32 10118
Category:	downloaded
Size (bytes):	4951
Entropy (8bit):	7.904323002652108
Encrypted:	false
SSDEEP:	96:jYvfQKHxumhWl7ACUNKqVZpI34n5oKtvxq2+hSv4UPZX0UcTCbcPzuRhH0F9Gcvw:MvfQK7a7ACyKEjnvtw2+ElZX3qPQ4Tvw
MD5:	9D30501CBE5392B7E39C3010ED180795
SHA1:	DFD815516DA80FF84A5CAF764648F68114175ADD
SHA-256:	C375D982F112C5B46E8542DF71994A5BCF0756F6EF318E754867F884C096B66D
SHA-512:	83A7AAF5EED64F5EE9202A61030F4114E7ABD6670A3A632B2CCD3D584B08E9B2E9AE42608CFE5E17D82195460956976912FF09EC12F9F90E8D9FEAE951027A75
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js
Preview:	......+f..tmp2ne1zt4s..Zms.H..~...VmA=.+.Hl.)....G.....R[X..../.........g..[u.v+....t.9}zHy..J..<.....E4......a.vnW.t..Gq4M..._}....j.~.......;..W.n....p.......U..6.x..(...&..^.........T..5...U....w.}.j.\|..}.\|W5.Vy4\....a...x.....\|....w............:f......'..Io...k.q...d22?=D...o.>og.i'......z.k>\.....vy}..?....N..~..0j....0?....=.[.6.....x..\|9...,....0../W.........}.g.....NFw..k.,..).=/.....r....U?....c....q{.W....s....V. V.p.7..p\|{..q.=6N.\|:.......R.y..g.r.t.9.wc.w......^..{...].ub.c.N_.....p.3.#./.7...,..k..7.......s<.....a..nx.Y.~.T.>......e...Xx....}x........hW..wl.b.~...i.a}.'....J.;>..>.....yo.9*s.E.Y.%.5.7....s.-?...M.........`....Av............8...q....'.........q...3_do.....6......v<}.q.~p. .l%...1s+.{...=..O...{..w\.........8C.m.........w.+..&m..?...}K.}>w.g..X.W.n...E.{]ev...&r.vta.......m.m#V..(.u..8Sc.6c..w.u...R.=f.1..U..E~..a...y..)..b..........K.r..xy.{\|..\|}K.a>n.!&.a.,W.s.S.V....l...^.......7.y{...6\..Y..._..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.673701612429055
Encrypted:	false
SSDEEP:	6:H0cUayCV/I1EiPsMpcAK+jU+kX1RVU692fLqrrOjfmGkjc2iO:H0ctyCVkFgVXXVU3OOjfqjc2
MD5:	1F5103571DCB6984D79EFD6E129D5C48
SHA1:	ADE1688FDA202178126ECB7A56E851D482C50FB4
SHA-256:	0AFB297FCAF9AC134966020C8CF37AD63121529F28A509A57B3C4EE502F14E13
SHA-512:	AB103067DE4E6F9735F22AD58C52D9CEA47BC111E60568B23964D321BD26942D1EF701E1DA68C1C4A7F917BDF1342F0C51D4EC6029143CA04371AB0D20234D3E
Malicious:	false
Reputation:	low
URL:	https://www.aptracking1.com/favicon.ico
Preview:	..............h.......(....... ................................bw........... ..'0.<...@....N`..[p. h.......!(.6....HX.>...4...8...<...2...6... h... (.4....Th..ax."n....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmplrdegmtp", last modified: Fri Apr 26 16:19:16 2024, max compression, original size modulo 2^32 108698
Category:	downloaded
Size (bytes):	33086
Entropy (8bit):	7.9934039646830986
Encrypted:	true
SSDEEP:	768:G1U5VXN94XuUdZOtr6JFNvKIY+s2Kxvn6V+jEH3G4jsC4gY:7Vo1Ar6JFJKIYbFn4oEH3vIC4gY
MD5:	8F3B1BECCA1517347E59A7628A832B8D
SHA1:	94680D35530E2F3CB3FA89D08CAC6A8DD8702E4F
SHA-256:	7DF752D41BC3EA149EDCD0791252894A310D84A1251F3E6935DC5413C3FB88FA
SHA-512:	D008822487511B0C3F32B1344A2B5ACC8F2206D6217A5A0DD9592576BA62D5A4BF8483B9099BE2F36E3EE672DBC7733E499498256326A3B36DB34F10AD26307D
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js
Preview:	......+f..tmplrdegmtp...v.F.0..<.....H..%;``.,..w\|Q\|..0.7D.E.$@.".!.....%...w]P...{z..f...@..k.k....}......4.?.?..a.......i/.dj..O:..![}wrtt...,t..++Kx#I.`.Z.I... ....U..,...o.v...k..UZ..N...-......f..&l..~sm.5.8....s..aM...k.<..Vo.p.....5........d......k.qV7~.H!-..y\|...9...(m6...O.l......ZT.Q..z.....d[.e....../...?.C.qz...m1.N>...+:lwX.......}. LR?..h.H.....U..U........W......0....t....>L..(J..u{.^...<.f.t.?9\|.m....@;,.G.l.d.3...H.{o....2..6..N..$./...VeU..K..r....... .O..WY...^^...`...[...l...g..?I....E.0@fv-.........K...1.G7.T....P)O.........KK\.#.z.E.X...$.ln....@..2]/.OR..X,...;... .G..8.n....D3..\|.....V.]m6....Of[tEM.\|u.Z./dFfj...Z.}.u....;.........U..b......./........kn...X.q6.F.,.1. .z.......h...... ...gE...G......M...[.@.`u..........W3>v.:l.c..q.+.&..0>.@...`.%.b...k...P..`...{..q....<.......H...+?......X....>..G..`Yj....+.....4...t\|.$5=.S_.,..=.7..}...8..htQ.C.^...u`........q..DAh[..Hi..\|.&..i..?l..7....d.2....v.M.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	108525
Entropy (8bit):	5.288741258643159
Encrypted:	false
SSDEEP:	1536:mKRkGgtQqxi2/BWn2iWXFj9CWbmD2Yg/bcg/qeb4YO9fwUPOq:mKmGg7xFBPTCWS4/qeywUPp
MD5:	34409E01359EE8C8DB0C50EB0D12E36C
SHA1:	4F4288E65305020586B0FAB8A372A2A3DD1B5883
SHA-256:	949DD8B079CA0AB786C81D7C167DA40FEA9CD0C89B43B185BC9E58442F6B46B8
SHA-512:	00D98690747C0BF680F78D696CA2F8141A17B6B47ED537857E5B88C69510E77E543A3487F91ED648057122CB53A72129D3BDE4E1BAEFC0D3545F6735D2B62B20
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.257.0.min.js
Preview:	/! For license information please see nr-spa-1.257.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let r;i.d(t,{m:()=>s});const n=new Promise((e=>{r=e})),s=Object.freeze({onReplayReady:r,sessionReplayInitialized:n})},1199:(e,t,i)=>{i.d(t,{R:()=>s,z:()=>n});var r=[];function n(e){if(0===r.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<r.length;t++){var i=r[t];if("*"===i.hostname)return!1;if(a(i.hostname,e.hostname)&&o(i.pathname,e.pathname))return!1}return!0}function s(e){if(r=[],e&&e.length)for(var t=0;t<e.length;t++){let i=e[t];if(!i)continue;0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));const n=i.indexOf("/");let s,a;n>0?(s=i.substring(0,n),a=i.substring(n)):(s=i,a="");let[o]=s.split(":");r.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.in

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpal41mhu_", last modified: Fri Apr 26 14:50:44 2024, max compression, original size modulo 2^32 24244
Category:	downloaded
Size (bytes):	9934
Entropy (8bit):	7.962274402674331
Encrypted:	false
SSDEEP:	192:9XZid/spVsNmbSNci/MipKk/ujIqE2PKDM7KKL6OG8tomQfGKIXv/:9J6/szReKi/MS1222IOm8Omacv/
MD5:	C8368AA6ED4CF444972C0579346217FC
SHA1:	0FC4A464055855A7DB24321722047852BD31D1D2
SHA-256:	DA438FB56BD7F776232DE1A49181B06AAFDBAC595230EBD3116B68FBCDF85446
SHA-512:	53D74C5B6B215C527F768C2E81D92E37904EF4530B11A5A493580F3BBCB029AEF4DA002ED42F79947245D30FF732CE94C557475319404C760609522411BAFEDF
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-7977-78bb72fada7e81315467.js
Preview:	....D.+f..tmpal41mhu_..\|is.F....Wp..;R,...C.......M.l.r8&@..x..y4.....\|2..(......vwe.3+.'.Js.L..M2x.....z6.&a.&.Qr{.........z.\|...f..[.k.a4....W......}=[/..r..E....jq._.\|....s...ZC.......\|\|Q.c.0k.}Q-xp~q~q._\..j'.j.W...z......2\|.O....v.X'.U.7.."9.Z.......K8.]T........_^..e..zy.....r=....X..g_.."V+.I:O=.Zy...y....g.u.r..V.".N......p..V....e.........?&./.j...Jk1...V..y.n>./..xtV.....e0...\.9MF...\|..\.....,...F+.....h._...K._\|..4.......%\.v]...94...4....G..f..............a.f..[.dX;..@.......:...n...L3..Y..../...>L.G."ac.'.!QD..atd%.h..8...YH3...}Hd).x`...D%f.4..D%.i..q....a.H..D.s.E..~H4ee.~..,.n..qHd9.Y3k.D.s`....Y....#.4D}...)>...\|..sh$....2.KRni"d8h4....8l.K2ni,b2......$..%..4%.i....D>..\|.$...G..6......'.q.....oT%g.%G.....-...e..aS...i.zI.7...(.;K.E8.T.y0.Z...&:...8.....~..........X.....ZM.....%...9...z.....u.J.....Ql..#.....K.DfAC.....e.'.P.../.....k.R..,.a N.#K....v..l8....0.'.8L....R.Q\J.LP.w...c.Kf.a.$..T.m.%...b......Q..d.d.sS..C.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpvrxozzka", last modified: Fri Apr 26 14:50:40 2024, max compression, original size modulo 2^32 163781
Category:	downloaded
Size (bytes):	35912
Entropy (8bit):	7.989158883179976
Encrypted:	false
SSDEEP:	768:ngU2WULAyNlBikBkfrDJzvGmO43zuUFy+ISHpnFABP4V82i:mWU0yN2kSPdGmzaa9z7RXi
MD5:	2E9D34B555A774952838851A44C9A8C6
SHA1:	0BBC50189641D439D901EAAA6FD98D43EC96061B
SHA-256:	5771B0D5475EE7228BE3BBD0B44CB7EDC6DA4A4C24BDF6D01A95699386AC9A40
SHA-512:	A1CA210F6226840D824D9A137F3BD2422D02888DAC35CD696E0F315A73DCD8E32E1098FC24BAD8E37F35DCC3FAE7E4BDFEA03DF038C8015D099B1039FC980AE1
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-7012-50c34dca8b7ca494c30f.js
Preview:	....@.+f..tmpvrxozzka...w..0.W...%..H..".%W#.x..x...8~> ......ZF...jk.A. .....$......Z...'y<..n..2.......gq4...I\|.....?.,.....\|...=x.o...I.[....<t.y..WY2Zu..Av.8=.....">.\|..O{..x.8..."....9.i/#`t..aB..<H..pt.[^,...._..'.m;.}.........0<AL.......i/.H.qy.......D.H.......g..V.I4.;..\t:.:Of.g.n.Lg.....E.=/..$_."H..FK.....f'.......)$....{.N&...?...o..).......6Jgi...P.S._..O..z.:..7..c....A...Q.2/...c.V ...J..Qa..m2^M.k;...-...`..(.E..T.:...:.u....R.....<../...w..u......&.....B~..?..U2.......u..qF.h.\/..*.....Vg...4n..$(..Yg.c`...r.w.6u..sy.!>.$.i.%+..E\.....U\|..C.....>.D.Uz^ VY..q.b=....a.O`.Si.4]M.v.J.Q.<.S..y....w[......w.o..j.h<..>..,.W.6).....NL..r.U....d.Fh5...,O...h....,.,.U..m.N-.,.V.a<k...L:J..,n#...A.G..vr....j..j..y......:m. l.`.mTK....M...wm..z.,..a.-.^.3.R-...s.....k.L:.'....;k<i...w.2.h.o#4....<.[K... ......6..y<....t.i..h..t..?M....Em3.tw..F^;.Q...]\|.M.mD..y.....2nm...r.e.....q.}.J..W...2..gp._f.x=j..f.4.fI<.;....Y<\......:.wh.3...n....n.c

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphzxt6b3r", last modified: Fri Apr 26 14:50:44 2024, max compression, original size modulo 2^32 347588
Category:	downloaded
Size (bytes):	104339
Entropy (8bit):	7.997044271441385
Encrypted:	true
SSDEEP:	3072:gdT4XOWdU3vd3+o8rxdjS61p56mVoM//h:gW+dVOo8rxdjSK76uoWh
MD5:	87058C94A5DB1E4109E877CC33E8C079
SHA1:	BB742906EBA4365E54D472EA61862D6977D7FF2C
SHA-256:	7E5E06004586F5349EA485883B17367B35FDDADA79ED038BDB7610C1BAC79A07
SHA-512:	7A38034C9A232DDDB65822F29E85F73DBF807B5D57EC9174E7FD21BFD25964BD5E7FB875FD062991EEAA953650A45FC97EABFB78B34A7AE4573A73ED19D6C4AF
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/unsubscribe-ui.js
Preview:	....D.+f..tmphzxt6b3r....6.(...WH.+...T.KI.K......v..{...H(..T.T^,....3o.<.1k.e~`~a"p!..R.L.y..v.....@ .....j......../:=C%z....l"R...ce.@...^..niz...>..B.=3PCUy...Us..q..I...r..B.1i..u.....v..>..}3..z=..!.7.....4.Q...gg..).vE{.hO........1.......#_.....`8..5..V.g?...a....M.h..$..k....bS.a[.......,<b..^oi.]H..ni.M.~..G(.,\....k...\_P..x.\Y..z..T[....n..b):...........K.h[..7../k.m.(R..../.....VM.......7$......H.u.!....G.%k.......I.#.U.l...Hik.r.....6m. vK....[M...Q....^3.L&n...^{..\..?~......&X...2..0k.V{T..qj.Xq.......k.?...h4..$.....k.hz-"...m..k.....a...x..7...YQ.[+.....u...M..K+.....0N..@.E....Ngzl...T....._I.4....,.Kz.&....Lo.S..jNB....z.-..x@.....]../dP-.y..;t%&{.u....=;.\m.....<.....fK..{C.D..Y=.L.T....m.....b.....!3.B[........].C.B.V..k..{..=...Z..z...s.$....JM...5Q.....@O{].....Z...jQ.......5.jn..^..z.u1.t.,....XK..Ek.....k.j.].;....a......(\...L..?o.......u.u.h.Yw..{`..s/.?..A.".FH<*....Kc.[.....{.C.@.+#......h.."

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59546)
Category:	downloaded
Size (bytes):	60948
Entropy (8bit):	5.384366781131279
Encrypted:	false
SSDEEP:	1536:fke8do5FAdk057yYqEq6Fdo94XRSXJKhRcscc0acCUz77Qf4jYjzf9e25y2b4xsV:fkvo5F4yYqEq+e94hOJGRNcc0acLX7QR
MD5:	529C8C4AF8386CA4F784C040F01EE7E0
SHA1:	EC4D56F04FD9DBAD0E55BFC1B64576FADE39F522
SHA-256:	CAB44741D13C16B26BAF0BEB335A1A2667EE52AFBF0D3382A30BAE73543D4836
SHA-512:	FDE29B09E404C81501836EE743F038B26999E5122B17FEC4932DC335D062BE1C0485BA56FE6306903816497B981359C36DF2F7C6CCC99C0C5095B00CBF7BE3D6
Malicious:	false
Reputation:	low
URL:	https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46
Preview:	<html lang="en">.<head>.<meta charset="UTF-8">.<script type="text/javascript">window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"f318cdbaae","applicationID":"127348941","transactionName":"dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c=","queueTime":0,"applicationTime":10,"agent":""}</script>.<script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["bam.nr-data.net"]},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"127348975",accountID:"1009232",trustKey:"1009232",xpid:"VQYHWFRQChABVlZRAwkOUlU=",licenseKey:"f318cdbaae",applicationID:"127348941"};;/! For license information please see nr-loader-spa-1.257.0.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>m,Mt:()=>b,C5:()=>s,DL:()=>E,OP:()=>N,lF:()=>D,Yu:()=>_,Dg:()=>v,CX:()=>c,GE:()=>w,sU:()=>O});var n=r(8632),i=r(9

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 18:48:16.551285028 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:16.551342010 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:16.676336050 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:26.152139902 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:26.219911098 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.219955921 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.220026970 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.223138094 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.223200083 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.223268986 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.223372936 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.223386049 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.223937035 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.223963022 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.233494043 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:26.340466022 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:26.945653915 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.946780920 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.946819067 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.947840929 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.947922945 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.953654051 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.953725100 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.954447985 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.954457998 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.960413933 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.960736036 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.960747004 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.962222099 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:26.962291002 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.963419914 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:26.963507891 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:27.111200094 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.111227989 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:27.121563911 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.244786024 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.757514954 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:27.758265972 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:27.904896021 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:27.905004025 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:27.905052900 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.905495882 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.905519962 CEST	443	49711	167.89.118.118	192.168.2.5
Apr 26, 2024 18:48:27.905533075 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:27.905569077 CEST	49711	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:48:28.065406084 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:28.065463066 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:28.065527916 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:28.065757990 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:28.065773010 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:28.482485056 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:28.620414972 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.531203032 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.531256914 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:29.531480074 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.531512976 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:29.531548977 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.532224894 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.532274961 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:29.532396078 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.532634020 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.532665014 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:29.532748938 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:29.532763958 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:29.532766104 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:29.532782078 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:29.532840014 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.636220932 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.636404037 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:29.726161957 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.726182938 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:29.828479052 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:29.999077082 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.000128984 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.042081118 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.052846909 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.052870989 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.052963972 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.052997112 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.054194927 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.054219007 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.054327011 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.054331064 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.054392099 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.138375998 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.138559103 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.139242887 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.139385939 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.139586926 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.139610052 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.227920055 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.229788065 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.229816914 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.297626019 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.297722101 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.297801018 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.338866949 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.381865978 CEST	49714	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:48:30.381906986 CEST	443	49714	18.211.231.38	192.168.2.5
Apr 26, 2024 18:48:30.615340948 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:30.615382910 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:30.615485907 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:30.615956068 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:30.615967035 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.016135931 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.016488075 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.016508102 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.017577887 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.017697096 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.142333984 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.142448902 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.142606974 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.147403955 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.147439957 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.408082008 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.408190012 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.432157993 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.432204962 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.433218956 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.509406090 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.530718088 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.530885935 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.530905008 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.530937910 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.556118011 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.653846025 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.654123068 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:31.654192924 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:31.725291014 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.725316048 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.738754034 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.738792896 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.738864899 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.738883018 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.738946915 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.746735096 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.759607077 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.759757042 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.759784937 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.770690918 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.770812988 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.770828962 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.802575111 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.803127050 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.803149939 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.929368973 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.929414988 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.929496050 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.929512978 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.929575920 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.934381962 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.943535089 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.943571091 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.943789005 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.943804026 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.943959951 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.953428030 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.961642981 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.961674929 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.961726904 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.961752892 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.961858988 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.974987030 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.988177061 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.988224983 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.988394022 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.988409042 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:31.988481045 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:31.999306917 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.011504889 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.011548996 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.011588097 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.011615038 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.011667967 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.023643017 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.045648098 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.045701981 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.045818090 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.045835972 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.045877934 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.078423023 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.085325956 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.085371017 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.085421085 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.085539103 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.085539103 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.085563898 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.089037895 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.089071989 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.089107990 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.089138985 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.089154959 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.089205027 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.105973005 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.106044054 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.106059074 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.111757040 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.111833096 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.111850023 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.121726036 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.121819973 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.121838093 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.131561041 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.132400990 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:32.132415056 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.140659094 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:32.144293070 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:33.687824965 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:33.687906981 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:33.687969923 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:33.687989950 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:33.718744993 CEST	49716	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:33.718769073 CEST	443	49716	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:33.931816101 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:33.931878090 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:33.931940079 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:33.936016083 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:33.936032057 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:33.989031076 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:33.989084005 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:33.989151001 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:33.990016937 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:33.990029097 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:34.244961023 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:34.245146036 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:34.261666059 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.325428963 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.326647043 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.326677084 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.327920914 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.327938080 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.327990055 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.332405090 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.332494020 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.332809925 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.332839966 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.427994013 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.607336998 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.607393026 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.607424021 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.607474089 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.607500076 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.607548952 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.609030962 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.616355896 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.616391897 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.616440058 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.616457939 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.616499901 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.627119064 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.638216972 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.638254881 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.638302088 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.638314009 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.638354063 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.649286985 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.763787985 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.763839006 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.763902903 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.763928890 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.763972998 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.769052029 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.780275106 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.780303001 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.780349016 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.780368090 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.780404091 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.791165113 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.802159071 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.802364111 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.802406073 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.802418947 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.802454948 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.813175917 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.824229002 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.824254036 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.824302912 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.824312925 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.824347019 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.835216045 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.845736027 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.845769882 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.845812082 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.845832109 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.845868111 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.857501030 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.867633104 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.868563890 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.868572950 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.872391939 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.872806072 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.872812986 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.883246899 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.884533882 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.884542942 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.893670082 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.897330999 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.897339106 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.904396057 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.904570103 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.904577971 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.922265053 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.924843073 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.924854994 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.925929070 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.928731918 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.928740025 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.933731079 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.936564922 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.936573982 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.941503048 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.942668915 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.942691088 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.948618889 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.948801994 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.948826075 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.955809116 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.956909895 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.956932068 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.963015079 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.964647055 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.964668036 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.970252037 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.972589970 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.972604990 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.980967045 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.980997086 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.981062889 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.981077909 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.981137037 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.988248110 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.995311022 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.995336056 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.995392084 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:34.995408058 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:34.995467901 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.002592087 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.009744883 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.009795904 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.009852886 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.009867907 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.009917974 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.016969919 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.024292946 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.024326086 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.024383068 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.024413109 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.024451017 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.031475067 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.038357019 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.038383961 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.038429022 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.038449049 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.038486004 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.045645952 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.052020073 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.053545952 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.053558111 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.058763027 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.058819056 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.058861971 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.058868885 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.058903933 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.058917046 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:35.058957100 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:35.715607882 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.057441950 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:36.057476997 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.057831049 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.060219049 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:36.108110905 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.128635883 CEST	49718	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.128678083 CEST	443	49718	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.186311007 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.186397076 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.186444044 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:36.253421068 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:36.253421068 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 18:48:36.253451109 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.253463030 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 18:48:36.835145950 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.835191011 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.835248947 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.836570024 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.836599112 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.844139099 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.844177961 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.844614983 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.846184015 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.846201897 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.866416931 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.866477966 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:36.866560936 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.867074966 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:36.867108107 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.160934925 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.193510056 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.203773975 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.253079891 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.253099918 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.253297091 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.253343105 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.253582954 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.253609896 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.254369974 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.254385948 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.254441977 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.254798889 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.254817009 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.254971981 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.254973888 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.255043030 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.255394936 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.255475044 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.255568027 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.255578995 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.255619049 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.255640984 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.257355928 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.257391930 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.257435083 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.257787943 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.257896900 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.257910013 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.257970095 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.339694977 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.342170954 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.342195988 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.424910069 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.484074116 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.484131098 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.484158993 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.484203100 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.484224081 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.486548901 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.494930983 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.506277084 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.506298065 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.506333113 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.506386995 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.506402969 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.506447077 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.513871908 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.514034033 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.514106989 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.514142036 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.514215946 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.514305115 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.514322996 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.517198086 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.527856112 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.527967930 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.528327942 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.528347015 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.528372049 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.528386116 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.528455019 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.540337086 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.553263903 CEST	49723	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.553307056 CEST	443	49723	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.564290047 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.564348936 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.564385891 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.564390898 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.564404011 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.564450026 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.564460993 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.577450991 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.577502012 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.577512026 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.588637114 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.588696957 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.588705063 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.601109982 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.601169109 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.601176977 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.613552094 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.613620043 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.613637924 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.625566006 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.625634909 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.625644922 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.634176016 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.634206057 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.641073942 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.641127110 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.641148090 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.646703959 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.646749020 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.646764994 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.657999039 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.658046961 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.658061028 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.668939114 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.668978930 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.668992996 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.680180073 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.680238008 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.680253029 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.691159010 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.691215038 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.691230059 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.702361107 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.702405930 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.702418089 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.713562965 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.713614941 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.713628054 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.713710070 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.713754892 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.716082096 CEST	49721	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.716109037 CEST	443	49721	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.739753962 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.739814043 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.739824057 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.745749950 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.745807886 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.745820045 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.758029938 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.758079052 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.758088112 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.770617008 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.770668983 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.770675898 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.782840967 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.782906055 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.782915115 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.795238018 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.795291901 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.795300961 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.807409048 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.807461977 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.810072899 CEST	49722	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:37.810084105 CEST	443	49722	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:37.891324997 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:37.891397953 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:37.891478062 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:37.891804934 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:37.891838074 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:37.979418993 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:37.979470015 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:37.979537010 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:37.979959011 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:37.979969978 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:38.221131086 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:38.238603115 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:38.431919098 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:38.432126999 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:38.432168961 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:38.432199001 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:38.456285000 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:38.456439972 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:38.456496954 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:39.471487045 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.471565962 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.471750975 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.471771002 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.472966909 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.473517895 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.473543882 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.473644972 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.543327093 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.562117100 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.562485933 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.563642025 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.563836098 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.564152956 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.564291000 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.564306974 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.608119011 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.621577978 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.690058947 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.690713882 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.690766096 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.690777063 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.690790892 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.690845966 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.690856934 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.694963932 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.695010900 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.695023060 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.695028067 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.695061922 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.698869944 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.703075886 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.703141928 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.703150034 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.707231998 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.707288980 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.707294941 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.711432934 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.711489916 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.711496115 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.715764999 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.715878963 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.715888977 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.719749928 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.719861984 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.719866991 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.723975897 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.724059105 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.724065065 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.728288889 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.728359938 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.728364944 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.736387014 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.736439943 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.736458063 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.736465931 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.736510992 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.740645885 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.740690947 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.740809917 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.740864038 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.740875006 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.740923882 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.777858019 CEST	49724	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:39.777895927 CEST	443	49724	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:39.815670013 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.815749884 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.815761089 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.817337990 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.817388058 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.817399979 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.821193933 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.821302891 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.821310997 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.828206062 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.828236103 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.828291893 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.828299999 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.828336000 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.831407070 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.834412098 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.834469080 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.834476948 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.837352991 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.837424040 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.837434053 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.837440968 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.837544918 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.840291023 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.843168020 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.843189955 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.843231916 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.843241930 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.843339920 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.859117985 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.859124899 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.859181881 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.859215975 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.859257936 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.859307051 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.859335899 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.859335899 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.859350920 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.874241114 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.874255896 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.874341011 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.874351025 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.874362946 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.874401093 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.946095943 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.946158886 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.946166992 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.946214914 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.946223974 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:39.946249008 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.946280003 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.954411030 CEST	49727	443	192.168.2.5	162.247.243.39
Apr 26, 2024 18:48:39.954431057 CEST	443	49727	162.247.243.39	192.168.2.5
Apr 26, 2024 18:48:40.011399031 CEST	49713	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:48:40.011424065 CEST	443	49713	142.250.217.164	192.168.2.5
Apr 26, 2024 18:48:40.138652086 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.138699055 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.138761997 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.139246941 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.139266968 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.212419987 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.212496042 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.212572098 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.212985039 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.213020086 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.405375957 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.405728102 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.405740976 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.406769991 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.406847000 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.407224894 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:40.408042908 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.408111095 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.408257008 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.408263922 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.408376932 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:40.408770084 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:40.408843994 CEST	443	49734	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:40.408922911 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:40.409261942 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:40.409292936 CEST	443	49734	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:40.613658905 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:40.613667965 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.614042997 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.614089012 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.614556074 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:40.615551949 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.615644932 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.616039991 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.616127014 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.616142988 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.616199970 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.616288900 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.616305113 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:40.728107929 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.728235006 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.728374958 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.729108095 CEST	49731	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:40.729121923 CEST	443	49731	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:40.744118929 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:40.813738108 CEST	443	49734	23.1.237.91	192.168.2.5
Apr 26, 2024 18:48:40.813812971 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:41.035893917 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:41.036310911 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:41.036372900 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:41.036381006 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:41.036520958 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:41.972656965 CEST	49732	443	192.168.2.5	34.149.61.18
Apr 26, 2024 18:48:41.972685099 CEST	443	49732	34.149.61.18	192.168.2.5
Apr 26, 2024 18:48:43.692890882 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.692991972 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.693069935 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.693576097 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.693614006 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.948344946 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.950555086 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.950596094 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.951641083 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.951711893 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.956976891 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.957125902 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:43.960052967 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:43.960072041 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:44.009504080 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:44.009551048 CEST	49734	443	192.168.2.5	23.1.237.91
Apr 26, 2024 18:48:44.115888119 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:44.344069004 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:44.344238043 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:44.344295979 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:44.397326946 CEST	49735	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:44.397377014 CEST	443	49735	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.741297007 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:50.741353035 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.741425991 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:50.742099047 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:50.742110968 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.996134996 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.996438980 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:50.996453047 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.996783018 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.997121096 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:50.997173071 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:50.997359037 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:51.040116072 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:51.041907072 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:51.324167967 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:51.324294090 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:51.324366093 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:51.324786901 CEST	49737	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:48:51.324800014 CEST	443	49737	162.247.243.29	192.168.2.5
Apr 26, 2024 18:48:52.019033909 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:52.019078016 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:52.019248962 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:52.019785881 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:52.019799948 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:52.418448925 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:52.470227003 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.341270924 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.341310024 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.341849089 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.364870071 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.365075111 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.365855932 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.408118963 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.562566042 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.562623024 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.562654018 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.562748909 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.562777996 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.562825918 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.575768948 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.590164900 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.590210915 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.590255022 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.590276957 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.590327024 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.603203058 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.603301048 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:48:54.603348017 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.603765965 CEST	49738	443	192.168.2.5	34.102.205.190
Apr 26, 2024 18:48:54.603785992 CEST	443	49738	34.102.205.190	192.168.2.5
Apr 26, 2024 18:49:12.118432045 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:49:12.118463993 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:49:15.243321896 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:49:15.243352890 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:49:20.749150038 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:20.749211073 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:20.749294043 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:20.749664068 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:20.749675035 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.003338099 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.003758907 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:21.003774881 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.004143000 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.004827976 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:21.004903078 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.005223036 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:21.052114964 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.330768108 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.330920935 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:21.330974102 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:21.332190990 CEST	49740	443	192.168.2.5	162.247.243.29
Apr 26, 2024 18:49:21.332209110 CEST	443	49740	162.247.243.29	192.168.2.5
Apr 26, 2024 18:49:26.709697008 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:49:26.709781885 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:49:26.709851980 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:49:27.434473991 CEST	49710	443	192.168.2.5	167.89.118.118
Apr 26, 2024 18:49:27.434510946 CEST	443	49710	167.89.118.118	192.168.2.5
Apr 26, 2024 18:49:27.586148024 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:27.586206913 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:27.586337090 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:27.586944103 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:27.586960077 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:27.977478027 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:27.977819920 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:27.977849960 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:27.978209019 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:27.978663921 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:27.978735924 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:28.025446892 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:29.995358944 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:49:29.995572090 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:49:29.995650053 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:49:31.437206030 CEST	49715	443	192.168.2.5	18.211.231.38
Apr 26, 2024 18:49:31.437308073 CEST	443	49715	18.211.231.38	192.168.2.5
Apr 26, 2024 18:49:37.969214916 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:37.969396114 CEST	443	49742	142.250.217.164	192.168.2.5
Apr 26, 2024 18:49:37.969458103 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:39.433556080 CEST	49742	443	192.168.2.5	142.250.217.164
Apr 26, 2024 18:49:39.433587074 CEST	443	49742	142.250.217.164	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 18:48:23.288723946 CEST	53	50254	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:23.339483023 CEST	53	56055	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:24.327755928 CEST	53	60576	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:26.087387085 CEST	60614	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:26.087593079 CEST	50021	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:26.214741945 CEST	53	60614	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:26.216773033 CEST	53	50021	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:27.535461903 CEST	50304	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:27.536089897 CEST	52674	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:27.661550045 CEST	53	52674	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:27.661578894 CEST	53	50304	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:28.066617012 CEST	58299	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:28.066855907 CEST	62173	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:28.196423054 CEST	53	58299	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:28.198479891 CEST	53	62173	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:30.430753946 CEST	61497	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:30.431487083 CEST	65230	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:30.581499100 CEST	53	61497	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:30.592859030 CEST	53	65230	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:33.801117897 CEST	53157	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:33.801552057 CEST	60461	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:33.929177999 CEST	53	60461	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:33.930166960 CEST	53	53157	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:37.844670057 CEST	60142	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:37.844799995 CEST	63089	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:37.976991892 CEST	53	60142	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:37.977046013 CEST	53	63089	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:40.011867046 CEST	51314	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:40.012111902 CEST	54812	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:40.032262087 CEST	57056	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:40.032694101 CEST	51157	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:40.137609005 CEST	53	51314	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:40.137897015 CEST	53	54812	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:40.182071924 CEST	53	51157	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:40.202100992 CEST	53	57056	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:40.742281914 CEST	59480	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:40.742439985 CEST	56655	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:43.566056013 CEST	61072	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:43.566345930 CEST	59703	53	192.168.2.5	1.1.1.1
Apr 26, 2024 18:48:43.691622972 CEST	53	59703	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:43.691951036 CEST	53	61072	1.1.1.1	192.168.2.5
Apr 26, 2024 18:48:46.190996885 CEST	53	64775	1.1.1.1	192.168.2.5
Apr 26, 2024 18:49:08.192169905 CEST	53	59621	1.1.1.1	192.168.2.5
Apr 26, 2024 18:49:22.873711109 CEST	53	60047	1.1.1.1	192.168.2.5
Apr 26, 2024 18:49:32.215034962 CEST	53	64543	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 18:48:26.087387085 CEST	192.168.2.5	1.1.1.1	0x5f77	Standard query (0)	u43140843.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.087593079 CEST	192.168.2.5	1.1.1.1	0x5864	Standard query (0)	u43140843.ct.sendgrid.net	65	IN (0x0001)	false
Apr 26, 2024 18:48:27.535461903 CEST	192.168.2.5	1.1.1.1	0x755e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:27.536089897 CEST	192.168.2.5	1.1.1.1	0x640b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 18:48:28.066617012 CEST	192.168.2.5	1.1.1.1	0x87af	Standard query (0)	disarming-individualist-2448d018e760.herokuapp.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:28.066855907 CEST	192.168.2.5	1.1.1.1	0x3204	Standard query (0)	disarming-individualist-2448d018e760.herokuapp.com	65	IN (0x0001)	false
Apr 26, 2024 18:48:30.430753946 CEST	192.168.2.5	1.1.1.1	0x3713	Standard query (0)	www.aptracking1.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:30.431487083 CEST	192.168.2.5	1.1.1.1	0x4a94	Standard query (0)	www.aptracking1.com	65	IN (0x0001)	false
Apr 26, 2024 18:48:33.801117897 CEST	192.168.2.5	1.1.1.1	0x977e	Standard query (0)	assets.apollo.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:33.801552057 CEST	192.168.2.5	1.1.1.1	0x289b	Standard query (0)	assets.apollo.io	65	IN (0x0001)	false
Apr 26, 2024 18:48:37.844670057 CEST	192.168.2.5	1.1.1.1	0xbdf4	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:37.844799995 CEST	192.168.2.5	1.1.1.1	0x8d70	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 26, 2024 18:48:40.011867046 CEST	192.168.2.5	1.1.1.1	0x1843	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:40.012111902 CEST	192.168.2.5	1.1.1.1	0x41d5	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 26, 2024 18:48:40.032262087 CEST	192.168.2.5	1.1.1.1	0x66b4	Standard query (0)	www.aptracking1.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:40.032694101 CEST	192.168.2.5	1.1.1.1	0x5ac5	Standard query (0)	www.aptracking1.com	65	IN (0x0001)	false
Apr 26, 2024 18:48:40.742281914 CEST	192.168.2.5	1.1.1.1	0xb9fc	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:40.742439985 CEST	192.168.2.5	1.1.1.1	0xb98c	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 26, 2024 18:48:43.566056013 CEST	192.168.2.5	1.1.1.1	0x11cf	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:43.566345930 CEST	192.168.2.5	1.1.1.1	0xeca9	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.118.118	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.118.28	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:26.214741945 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	u43140843.ct.sendgrid.net		167.89.118.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:27.661550045 CEST	1.1.1.1	192.168.2.5	0x640b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 18:48:27.661578894 CEST	1.1.1.1	192.168.2.5	0x755e	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:28.196423054 CEST	1.1.1.1	192.168.2.5	0x87af	No error (0)	disarming-individualist-2448d018e760.herokuapp.com		18.211.231.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:28.196423054 CEST	1.1.1.1	192.168.2.5	0x87af	No error (0)	disarming-individualist-2448d018e760.herokuapp.com		54.205.8.205	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:28.196423054 CEST	1.1.1.1	192.168.2.5	0x87af	No error (0)	disarming-individualist-2448d018e760.herokuapp.com		54.235.77.118	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:28.196423054 CEST	1.1.1.1	192.168.2.5	0x87af	No error (0)	disarming-individualist-2448d018e760.herokuapp.com		174.129.128.48	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:30.581499100 CEST	1.1.1.1	192.168.2.5	0x3713	No error (0)	www.aptracking1.com		34.149.61.18	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:33.930166960 CEST	1.1.1.1	192.168.2.5	0x977e	No error (0)	assets.apollo.io		34.102.205.190	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:37.976991892 CEST	1.1.1.1	192.168.2.5	0xbdf4	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:39.746093988 CEST	1.1.1.1	192.168.2.5	0xcd17	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:39.746093988 CEST	1.1.1.1	192.168.2.5	0xcd17	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:40.137609005 CEST	1.1.1.1	192.168.2.5	0x1843	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:40.137609005 CEST	1.1.1.1	192.168.2.5	0x1843	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:40.137609005 CEST	1.1.1.1	192.168.2.5	0x1843	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:40.137897015 CEST	1.1.1.1	192.168.2.5	0x41d5	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:40.137897015 CEST	1.1.1.1	192.168.2.5	0x41d5	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:40.202100992 CEST	1.1.1.1	192.168.2.5	0x66b4	No error (0)	www.aptracking1.com		34.149.61.18	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:43.691622972 CEST	1.1.1.1	192.168.2.5	0xeca9	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:43.691622972 CEST	1.1.1.1	192.168.2.5	0xeca9	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:43.691951036 CEST	1.1.1.1	192.168.2.5	0x11cf	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:43.691951036 CEST	1.1.1.1	192.168.2.5	0x11cf	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:43.691951036 CEST	1.1.1.1	192.168.2.5	0x11cf	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:48:54.198235035 CEST	1.1.1.1	192.168.2.5	0x29b7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:48:54.198235035 CEST	1.1.1.1	192.168.2.5	0x29b7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:49:24.850826979 CEST	1.1.1.1	192.168.2.5	0xbc08	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 18:49:24.850826979 CEST	1.1.1.1	192.168.2.5	0xbc08	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:49:41.246599913 CEST	1.1.1.1	192.168.2.5	0x735a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 18:49:41.246599913 CEST	1.1.1.1	192.168.2.5	0x735a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

u43140843.ct.sendgrid.net

disarming-individualist-2448d018e760.herokuapp.com

www.aptracking1.com

https:

assets.apollo.io

js-agent.newrelic.com

bam.nr-data.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	167.89.118.118	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:26 UTC	1295	OUT	GET /ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D HTTP/1.1 Host: u43140843.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:27 UTC	288	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 26 Apr 2024 16:48:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Location: https://disarming-individualist-2448d018e760.herokuapp.com/u?mid=662111e2b41b5c000793ac46 X-Robots-Tag: noindex, nofollow
2024-04-26 16:48:27 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 61 72 6d 69 6e 67 2d 69 6e 64 69 76 69 64 75 61 6c 69 73 74 2d 32 34 34 38 64 30 31 38 65 37 36 30 2e 68 65 72 6f 6b 75 61 70 70 2e 63 6f 6d 2f 75 3f 6d 69 64 3d 36 36 32 31 31 31 65 32 62 34 31 62 35 63 30 30 30 37 39 33 61 63 34 36 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://disarming-individualist-2448d018e760.herokuapp.com/u?mid=662111e2b41b5c000793ac46">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	18.211.231.38	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:30 UTC	723	OUT	GET /u?mid=662111e2b41b5c000793ac46 HTTP/1.1 Host: disarming-individualist-2448d018e760.herokuapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:30 UTC	807	IN	HTTP/1.1 307 Temporary Redirect Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1714150110&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&s=sL28bSxr3nqJ%2BKUQQGkwxjbRW7L3gs7nMoo46zGWw9U%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1714150110&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&s=sL28bSxr3nqJ%2BKUQQGkwxjbRW7L3gs7nMoo46zGWw9U%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Content-Type: text/html; charset=utf-8 Location: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46 Date: Fri, 26 Apr 2024 16:48:30 GMT Content-Length: 150 Via: 1.1 vegur
2024-04-26 16:48:30 UTC	150	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 70 74 72 61 63 6b 69 6e 67 31 2e 63 6f 6d 2f 75 3f 61 63 74 69 6f 6e 3d 72 65 6e 64 65 72 5f 75 6e 73 75 62 73 63 72 69 62 65 26 61 6d 70 3b 63 6f 6e 74 72 6f 6c 6c 65 72 3d 72 65 64 69 72 65 63 74 6f 72 26 61 6d 70 3b 6d 69 64 3d 36 36 32 31 31 31 65 32 62 34 31 62 35 63 30 30 30 37 39 33 61 63 34 36 22 3e 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46">Temporary Redirect</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 16:48:31 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=51314 Date: Fri, 26 Apr 2024 16:48:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	34.149.61.18	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:31 UTC	740	OUT	GET /u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46 HTTP/1.1 Host: www.aptracking1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:31 UTC	1391	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Vary: Accept-Encoding Status: 200 OK x-transaction-id: befc9468f480e02e19078051a29f4ac4 Cache-Control: max-age=0, private, must-revalidate Vary: Origin Strict-Transport-Security: max-age=3600 ETag: W/"cab44741d13c16b26baf0beb335a1a26" X-Frame-Options: ALLOWALL X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'self' chrome-extension://alhgpfoeiimagjlnfekdhkjlkiomcapa chrome-extension://ececkagaccnfmkopaiemklekhoimmgpn .salesforce.com .lightning.force.com Date: Fri, 26 Apr 2024 16:48:31 GMT Set-Cookie: X-CSRF-TOKEN=1h9shJy777CHhK2A75DCKsNmt0SWOlaGhRd1ApubX5ZOJIytvCRz5omD5qT7zYgpmehtYv_8RfBj2GHOR_ATWQ; path=/; secure; SameSite=Lax Set-Cookie: _leadgenie_session=B8IMTGOG1Ta6c%2FswNvPH4hKmnRIkUfr8PNYQQKupgSmxALH3P4HIqhxuXPdniKbhvz006D9KBMTdCIUb2uAgQZd4YD8u%2Fzf9CxPsi9atLHT9Y2v67aMZyzagQKssLVfCABmEZM58kCYGEtID8AqQfPzMusmOyaruiHogFXrAUaccY2uXYNwdKCdyE9F%2B8aD8xIi5Iu4UyBK87B%2B5Dyf4TRi7YYwQaB7ycxVmvmyUIM7yQ8a4p8WmAIlRLrYqV0kkhbHpo7nhvAoyyu30wZo9zIsOUwBiIvNtnqk%3D--%2BBEeuWFajZHj73PE--BDN9LBeka9E%2FL04sqw2xNw%3D%3D; path=/; secure; HttpOnly; SameSite=None Server: nginx Via: 1.1 google Set-Cookie: GCLB=COrOzJmyp7Kb7wEQAw; path=/; HttpOnly; expires=Fri, 26-Apr-2024 16:58:31 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:31 UTC	1391	IN	Data Raw: 32 61 63 32 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 3b 4e 52 45 55 4d 2e 69 6e 66 6f 3d 7b 22 62 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 65 72 72 6f 72 42 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 6c 69 63 65 6e 73 65 4b 65 79 22 3a 22 66 33 31 38 63 64 62 61 61 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 22 3a 22 31 32 37 33 34 38 39 34 31 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 22 3a 22 64 77 Data Ascii: 2ac2<html lang="en"><head><meta charset="UTF-8"><script type="text/javascript">window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"f318cdbaae","applicationID":"127348941","transactionName":"dw
2024-04-26 16:48:31 UTC	1391	IN	Data Raw: 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 61 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 61 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 61 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6f 29 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 6e 2e 65 6b 29 28 65 29 3b 72 26 26 28 72 2e 69 6e 66 6f 3d 61 5b 65 5d 29 7d 63 6f 6e 73 74 20 75 3d 65 3d 3e 7b 69 66 28 21 65 7c 7c Data Ascii: nt identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function c(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.D)(t,o);const r=(0,n.ek)(e);r&&(r.info=a[e])}const u=e=>{if(!e\|\|
2024-04-26 16:48:31 UTC	86	IN	Data Raw: 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 3a 7b 61 75 74 6f 53 74 61 72 74 3a 21 30 2c 65 6e 61 62 6c 65 Data Ascii: 10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_replay:{autoStart:!0,enable
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 64 3a 21 31 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 36 30 2c 70 72 65 6c 6f 61 64 3a 21 31 2c 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 31 30 2c 65 72 72 6f 72 5f 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 31 30 30 2c 63 6f 6c 6c 65 63 74 5f 66 6f 6e 74 73 3a 21 31 2c 69 6e 6c 69 6e 65 5f 69 6d 61 67 65 73 3a 21 31 2c 69 6e 6c 69 6e 65 5f 73 74 79 6c 65 73 68 65 65 74 3a 21 30 2c 6d 61 73 6b 5f 61 6c 6c 5f 69 6e 70 75 74 73 3a 21 30 2c 67 65 74 20 6d 61 73 6b 5f 74 65 78 74 5f 73 65 6c 65 63 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 7d 2c 73 65 74 20 6d 61 73 6b 5f 74 65 78 74 5f 73 65 6c 65 63 74 6f 72 28 74 29 7b 75 28 74 29 3f 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3d 22 22 2e 63 6f 6e Data Ascii: d:!1,harvestTimeSeconds:60,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,inline_stylesheet:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_selector},set mask_text_selector(t){u(t)?e.mask_selector="".con
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 67 29 3b 70 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 68 28 29 29 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 6e 2e 65 6b 29 28 65 29 3b 72 26 26 28 72 2e 69 6e 69 74 3d 70 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 67 29 3b 76 61 72 20 72 3d 6d 28 65 29 3b 69 66 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 2d 31 3b 69 2b 2b 29 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 28 72 3d 72 5b 6e 5b 69 5d 5d 29 29 72 65 74 75 72 6e 3b 72 3d 72 5b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d Data Ascii: function v(e,t){if(!e)throw new Error(g);p[e]=(0,i.D)(t,h());const r=(0,n.ek)(e);r&&(r.init=p[e])}function b(e,t){if(!e)throw new Error(g);var r=m(e);if(r){for(var n=t.split("."),i=0;i<n.length-1;i++)if("object"!=typeof(r=r[n[i]]))return;r=r[n[n.length-1]
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 53 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 53 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 53 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 Data Ascii: !e)throw new Error("All runtime objects require an agent identifier!");if(!S[e])throw new Error("Runtime for ".concat(e," was never set"));return S[e]}function O(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");S[e]=(0,i.D)(t
2024-04-26 16:48:31 UTC	331	IN	Data Raw: 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 22 31 2e 32 35 37 2e 30 22 2c 69 3d 22 50 52 4f 44 22 2c 6f 3d 22 43 44 4e 22 2c 61 3d 22 32 2e 30 2e 30 2d 61 6c 70 68 61 2e 31 32 22 7d 2c 33 38 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 46 4e 3a 28 29 3d 3e 63 2c 49 46 3a 28 29 3d 3e 6c 2c 4c 57 3a 28 29 3d 3e 61 2c 4e 6b 3a 28 29 3d 3e 68 2c 54 74 3a 28 29 3d 3e 75 2c 5f 41 3a 28 29 3d 3e 6f 2c 63 76 3a 28 29 3d 3e 70 2c 69 53 3a 28 29 3d 3e 73 2c 69 6c 3a 28 29 3d 3e 6e 2c 75 78 3a 28 29 3d 3e 64 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 66 7d 29 3b 63 6f 6e 73 74 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d Data Ascii: =>n});const n="1.257.0",i="PROD",o="CDN",a="2.0.0-alpha.12"},385:(e,t,r)=>{"use strict";r.d(t,{FN:()=>c,IF:()=>l,LW:()=>a,Nk:()=>h,Tt:()=>u,_A:()=>o,cv:()=>p,iS:()=>s,il:()=>n,ux:()=>d,v6:()=>i,w1:()=>f});const n="undefined"!=typeof window&&!!window.docum
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 29 2c 6f 3d 6e 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e Data Ascii: instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceof WorkerNavigator),o=n?window:"undefined"!=typeof WorkerGlobalScope&&("undefin
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 4c 50 3a 28 29 3d 3e 6c 2c 52 50 3a 28 29 3d 3e 63 2c 6f 35 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 72 28 38 33 32 35 29 2c 69 3d 72 28 31 32 38 34 29 2c 6f 3d 72 28 34 33 32 32 29 2c 61 3d 72 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 61 2e 70 5b 74 5d 7c 7c 30 7d 3b 64 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 64 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 26 26 73 5b 65 5d 2e 64 65 Data Ascii: ",e)}}}},8e3:(e,t,r)=>{"use strict";r.d(t,{LP:()=>l,RP:()=>c,o5:()=>u});var n=r(8325),i=r(1284),o=r(4322),a=r(3325);const s={};function c(e,t){const r={staged:!1,priority:a.p[t]\|\|0};d(e),s[e].get(t)\|\|s[e].set(t,r)}function u(e,t){d(e),s[e].get(t)&&s[e].de
2024-04-26 16:48:31 UTC	1255	IN	Data Raw: 7b 41 3a 28 29 3d 3e 63 2c 65 65 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6e 3d 72 28 38 36 33 32 29 2c 69 3d 72 28 32 32 31 30 29 2c 6f 3d 72 28 32 33 34 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 49 64 3d 65 7d 7d 76 61 72 20 73 3d 72 28 33 31 31 37 29 3b 63 6f 6e 73 74 20 63 3d 22 6e 72 40 63 6f 6e 74 65 78 74 3a 22 2e 63 6f 6e 63 61 74 28 73 2e 61 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 29 7b 76 61 72 20 6e 3d 7b 7d 2c 73 3d 7b 7d 2c 64 3d 7b 7d 2c 6c 3d 21 31 3b 74 72 79 7b 6c 3d 31 36 3d 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 28 30 2c 6f 2e 4f 50 29 28 72 29 2e 69 73 6f 6c 61 74 65 64 42 61 63 6b 6c 6f 67 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 66 3d 7b 6f 6e 3a 70 2c Data Ascii: {A:()=>c,ee:()=>u});var n=r(8632),i=r(2210),o=r(234);class a{constructor(e){this.contextId=e}}var s=r(3117);const c="nr@context:".concat(s.a),u=function e(t,r){var n={},s={},d={},l=!1;try{l=16===r.length&&(0,o.OP)(r).isolatedBacklog}catch(e){}var f={on:p,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	34.102.205.190	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:34 UTC	573	OUT	GET /js/unsubscribe-ui.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aptracking1.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:34 UTC	922	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqJv3kCRfAqOK2VFl2LbexlH0H7ZiBylyZYfyAxue5dt8UqKg3CSSr97hwuVs89JTx8-qI x-goog-generation: 1714143044930214 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 104339 Content-Encoding: gzip x-goog-hash: crc32c=f80gIg== x-goog-hash: md5=hwWMlKXbHkEJ6HfMM+jAeQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 104339 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Fri, 26 Apr 2024 16:13:57 GMT Age: 2077 Last-Modified: Fri, 26 Apr 2024 14:50:45 GMT ETag: "87058c94a5db1e4109e877cc33e8c079" Content-Type: application/javascript Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:34 UTC	333	IN	Data Raw: 1f 8b 08 08 44 bf 2b 66 02 ff 74 6d 70 68 7a 78 74 36 62 33 72 00 ec bd db 96 e3 36 b2 28 f8 bc f7 57 48 b4 2b 8b ac a4 54 ba 4b 49 15 4b db 2e 97 bb dd db b7 76 b9 db 7b 1f a5 ec a6 48 28 c5 2a 8a 54 91 54 5e 2c a9 d7 f9 84 33 6f f3 3c ff 31 6b fe 65 7e 60 7e 61 22 70 21 c1 9b 52 ca 4c f7 79 a9 ae 76 8a 04 02 81 88 40 20 10 00 02 a0 aa 6a e6 eb ed b5 15 d6 88 b9 bd e8 b4 2f 3a 3d 43 25 7a ac fb 98 ae 6c 22 52 8b e2 d0 b5 63 65 8c 40 a1 e9 ab dd 5e ab d3 6e 69 7a 00 cf ed 3e fc ef 42 d3 3d 33 50 43 55 79 07 a0 fe 55 73 1d 06 71 10 df ad 49 d3 f5 1d 72 fb c3 42 d1 b4 31 69 92 db 75 10 c6 91 b9 d8 f8 76 ec 06 3e d6 a3 d1 ba 7d 33 84 97 7a 3d d6 c6 21 89 37 a1 af 08 18 c5 34 11 51 b0 a8 f9 67 67 1e 00 29 12 76 45 7b dd 68 4f 02 d5 d7 0c 7f bf d7 19 31 f7 91 Data Ascii: D+ftmphzxt6b3r6(WH+TKIK.v{H(*TT^,3o<1ke~`~a"p!RLyv@ j/:=C%zl"Rce@^niz>B=3PCUyUsqIrB1iuv>}3z=!74Qgg)vE{hO1
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 7e 98 bf 47 28 87 2c 5c 9f fc 18 06 6b 12 c6 1c 5c 5f 50 88 ef ac 78 d9 5c 59 b7 80 7a ec 2e 54 5b 8b c3 bb ad ad 6e f7 ba 62 29 3a c8 d4 db 10 a3 bd d7 f6 b6 15 db 4b 95 68 5b db f4 37 9e b7 2f 6b 05 6d 0b 28 52 89 d7 85 c4 89 16 2f c3 e0 a6 e6 93 9b 9a ab 2a 56 4d 80 d4 dc a8 16 92 8f 1b 37 24 0e 10 80 92 8d cd 48 0d 75 e0 21 bc da ac 88 1f 47 a2 25 6b 9e 1a eb ed f3 85 da d2 49 d3 23 fe 55 bc 6c a8 09 94 48 69 6b 1a 72 b7 a7 b8 9c 94 36 6d cb b1 20 76 4b c2 be 1f db 13 5b 4d b8 01 b6 51 a4 09 eb ce 5e 33 92 4c 26 6e d3 d9 eb 9d 8b 5e 7b c4 14 5c a8 bd 3f 7e f9 a2 fe ef ff f6 26 58 df 85 ee d5 32 ae 81 30 6b 9d 56 7b 54 fb 0b 71 6a bf 58 71 04 ed f9 ef ff f6 ad 6b 13 3f 82 94 0d 68 34 b0 bb 24 b5 ef be f9 b9 c6 93 6b 2a bc 68 7a 2d 22 e4 df ff 6d 19 c7 Data Ascii: ~G(,\k\_Px\Yz.T[nb):Kh[7/km(R/VM7$Hu!G%kI#UlHikr6m vK[MQ^3L&n^{\?~&X20kV{TqjXqk?h4$khz-"m
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 9a fe 03 7d 58 6a fa ef f4 61 a5 e9 df d2 87 2b 4d ff 89 3e dc 69 fa 57 f4 01 2a f9 8e 3e 5c 6b fa 37 f4 e1 56 d3 bf a6 0f 37 9a fe 37 fa f0 51 d3 bf a4 0f 1f 34 fd cf f4 e1 9d a6 ff 42 1f de 6a fa df e9 c3 1b 6d fc 3e e3 95 2c e3 95 37 75 ac d8 6a 58 eb c0 f3 02 37 30 e3 70 43 66 ba 71 b3 24 21 51 9b d1 bc 11 2d 83 9b c6 ca 72 7d 4d 6f 0a a8 86 1d 45 0d d0 fc a8 11 92 88 c4 5b 70 2c ee a2 98 ac 1a 1b d7 a8 25 8f e0 53 a0 fb 45 78 a6 5e 7b 47 ae 02 52 fb db 37 7a ed a7 60 0e 3e a8 5e fb db 7c e3 c7 1b bd f6 c6 f2 63 0b 7c 1f 4f af 7d 0f 19 b5 77 d0 df 61 12 00 7f 1b 11 09 dd 85 5e 53 44 61 25 2d fd 67 e2 5d 93 d8 b5 2d bd f6 45 e8 5a 5e ae c4 17 58 79 ed 0d 8e c9 b5 b7 ab e0 bd ab 48 68 4a 52 de dd ad e6 81 a7 8c 1b 37 64 fe c1 8d 1b 0b 70 3a 1a d1 2a 08 Data Ascii: }Xja+M>iW>\k7V77Q4Bjm>,7ujX70pCfq$!Q-r}MoE[p,%SEx^{GR7z`>^\|c\|O}wa^SDa%-g]-EZ^XyHhJR7dp:
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 87 0d db 1a 2c e6 03 39 b5 8f a9 17 17 6d 69 84 84 d4 01 d2 77 61 8d 48 86 86 21 72 e4 d8 6d 69 94 83 d4 11 8a b1 ed 58 b2 22 af 1a 17 d8 38 e0 54 2c 24 cb 82 e2 6c a4 8b db 0d be 0c 96 63 96 4e 6c 33 53 52 67 40 5a 92 67 93 01 a0 e3 8e d5 9d cf 17 fd 72 00 e6 35 f4 2f 46 8b 56 39 00 9b a1 8e 86 b2 93 90 01 60 d3 d4 e1 a0 e3 74 cb 01 98 37 d1 e9 39 56 05 0d cc ab 70 ba 50 49 39 00 f3 2e 46 9d 4e ef 22 0b 90 9f 0a c0 64 c7 69 57 81 74 b8 4f 3f 1c cc ab 40 f8 fc ce be e8 8e aa 40 f8 cc 60 6e b7 fa 55 20 6c ae 07 6a d3 6a 55 81 50 99 5c 10 5c 40 ab 02 a1 52 19 cc 7b a4 1a 84 79 23 a3 4e a1 a2 ac eb e5 d8 0b 59 29 b3 10 54 2a f3 01 69 93 61 05 04 9b dc 2f d0 c5 ad 80 a0 32 19 c0 8c d9 26 15 10 4c 49 46 30 1c 5a 15 10 4c 4b ba c3 c5 68 50 01 c1 d4 64 31 18 0c Data Ascii: ,9miwaH!rmiX"8T,$lcNl3SRg@Zgr5/FV9`t79VpPI9.FN"diWtO?@@`nU ljjUP\\@R{y#NY)T*ia/2&LIF0ZLKhPd1
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 46 48 48 f9 bc 9a 7f 71 58 48 c8 4b 2f d3 b0 10 eb e9 c2 42 a8 83 b2 15 b1 21 6c 3d dd fd 9d 34 2c e7 fd 26 8a 0d bc c4 67 dc 58 05 bf 57 64 55 14 28 0f 35 01 b6 81 6e d7 8a 70 d7 0c 71 06 d1 6d 1e e6 2a b4 ee e8 65 46 7b dc 01 d9 ae ac 10 af 27 6a ed 0d 43 20 4d 1a 69 cb 1a a9 dd 92 ee ff 41 97 ab 04 b4 11 2f 37 ab f9 96 69 0c 5e 22 54 8b 02 cf 75 b2 9a 20 dd 01 74 58 81 32 80 9e bb 36 d6 96 03 73 94 2b 54 c5 dc ed 43 a3 83 04 19 74 65 76 7b 54 bd c3 96 b6 6f 2e 3c 72 db c0 3b 93 c0 59 c4 75 7d 6f e3 3a 5c 46 0d da 7f 0c 6b 03 36 99 a7 d0 8b 92 68 82 20 90 c1 74 42 b2 4a 92 d8 6d 4a 90 b2 6f 86 c1 4d 79 ff 4a ae 66 c2 fa f3 ef 63 fc 63 b4 6a ed 1a ad ea be 37 30 3a 21 b1 d9 9d 58 c1 cd 29 49 37 a1 b5 36 f0 cf 3d af 19 79 34 da c8 ac 2c 10 9a 42 99 6d f2 Data Ascii: FHHqXHK/B!l=4,&gXWdU(5npqm*eF{'jC MiA/7i^"Tu tX26s+TCtev{To.<r;Yu}o:\Fk6h tBJmJoMyJfccj70:!X)I76=y4,Bm
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: ca e8 2d f8 43 25 ac 8b f4 07 fa 43 50 f2 61 fe 50 ae e0 fd fe 50 59 4d f7 fa 43 25 8c 3d c0 1f aa c4 72 92 3f 04 58 aa fc a1 24 eb 34 7f 68 d8 4f fc a1 27 77 81 38 ee 52 17 68 98 ba 06 de 55 52 65 3b 79 ea 24 4f dd e4 a9 97 3c f5 93 a7 41 f2 34 4c 9e 46 c9 d3 45 8a b9 95 3e a6 b5 fc 4b 5d 20 ef ea 89 5c 20 24 fc 11 2e 10 4a f7 71 2e 10 b6 ca e9 2e 10 b6 e0 e3 5c 20 6c f9 c7 b9 40 a8 31 a7 bb 40 a8 5d 8f 73 81 50 2b 1f e7 02 a1 36 9f ee 02 51 cd 7f 9c 0b 44 7b cc e3 5c 20 d6 d3 1e e2 02 41 c9 7b 5d a0 14 e6 80 0b 94 02 55 b8 40 29 c0 01 17 28 05 3a e0 02 a5 40 15 2e 50 0a 70 c0 05 4a 81 0e b8 40 29 50 85 0b 24 c9 ef 80 0b 24 41 1d ed 02 81 35 3b c2 05 ca 42 65 5c 20 c8 7a 9c 0b 54 82 e0 d1 2e 50 19 bd 05 17 a8 84 75 91 fe 40 17 08 4a 3e cc 05 ca 15 bc df Data Ascii: -C%CPaPPYMC%=r?X$4hO'w8RhURe;y$O<A4LFE>K] \ $.Jq..\ l@1@]sP+6QD{\ A{]U@)(:@.PpJ@)P$$A5;Be\ zT.Pu@J>
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 71 a8 23 fb 50 ed a8 3e 04 50 0f eb a2 58 f0 29 cd cd 58 20 73 7d 3b 24 2b 6c 40 9a e1 6f 8e a4 a6 d0 fe 1c a1 2a d0 e8 35 87 d8 2e f8 93 5a 4d 69 d6 94 e3 b0 e2 bb eb c3 b0 89 6b cc 15 24 b6 c7 25 82 f8 43 0c 6e 8e a0 c3 2c b7 f5 1a 8c fb 78 a3 9f b7 5e 5a 0f 64 ba 53 c5 74 a7 8c e9 3f 92 db ce 61 6e 3b 82 db 30 80 99 cd 03 b9 ed 56 71 db 2d e3 f6 0f 61 b3 7b 98 cd ee 63 b5 b8 57 c5 62 af 8c c5 a7 e5 ad 77 98 b7 de 53 28 6c bf 8a bf 7e 19 7f 4f c4 58 ff 30 63 fd a7 d0 cd 41 15 63 83 32 c6 1e cb d1 e0 30 47 83 c7 aa e1 b0 8a 9b 61 19 37 0f 66 63 78 98 8d e1 53 68 dc a8 8a 95 51 19 2b a7 f3 30 3a cc c3 e8 29 94 eb a2 8a 87 d3 c9 bd 38 4c ee c5 a9 9a 93 19 f0 ca 1d a5 dc 02 ed 51 3e d7 c9 68 7b 47 39 46 32 da 02 46 4c 60 5b 69 6c 0f 28 b7 21 70 32 dd 27 56 Data Ascii: q#P>PX)X s};$+l@o*5.ZMik$%Cn,x^ZdSt?an;0Vq-a{cWbwS(l~OX0cAc20Ga7fcxShQ+0:)8LQ>h{G9F2FL`[il(!p2'V
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 4e 94 86 96 8f 1f 83 5b 19 f4 c9 b3 62 82 df a9 ed af 6f b5 e3 f1 d6 ac 6d 6e 05 95 6e 30 38 c4 0e 42 fa a5 4d b6 ca ca b7 9b f1 53 b0 d7 f8 19 74 db e2 bb 12 06 bb 06 e7 f8 0a a9 57 e5 01 43 65 e4 37 f0 63 65 7a ad 71 24 0f ec 7b 7c 51 fe 50 19 de 9e 23 7f c2 ee c0 a5 09 47 57 41 6f e4 a1 17 bf 84 90 c3 4f a0 95 5c fc 73 65 d1 3b 24 8e c7 5c 73 9b 2b c7 cd 37 42 76 8f e6 08 6c ac 77 31 57 95 b6 98 e8 6e bd 5e 8f 3f e3 87 a3 89 0d f4 b1 2b 83 a4 c4 f7 50 6b 36 95 5f 1c 77 74 c5 bc 8f 1f ac 9e 82 78 2e fc 18 ed d6 e9 15 1d e9 e3 97 fa ee 40 c5 11 35 90 d5 3a be 4b 79 38 a6 c4 35 58 0e 2c d0 08 37 1e 31 f0 35 70 9c 63 3a c3 d2 f5 4f 62 06 0b 6c 33 32 6b 1f 53 0d f6 ac b5 15 82 6e 6e 83 b5 65 a3 e5 69 1e 23 8a 64 fb 14 77 2f 0c 76 fb d1 d2 f5 9c 53 cd 64 82 Data Ascii: N[bomnn08BMStWCe7cezq${\|QP#GWAoO\se;$\s+7Bvlw1Wn^?+Pk6_wtx.@5:Ky85X,715pc:Obl32kSnnei#dw/vSd
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 68 b5 56 ad c3 f6 e8 1e 52 fd e1 8d 30 ae 03 d5 a1 06 dd 87 31 7d df 6e d3 d3 d7 7b 68 49 ff b8 53 93 a7 62 e5 07 a3 33 ac 9c d4 19 cf 0b 1f 29 e1 5d 94 22 a4 1f ae 3a 21 f6 b3 7c 07 b8 a0 74 15 c2 ce c5 93 30 a8 4c 5a a3 97 d1 51 bc 52 08 c3 40 3e 73 1c 67 2c 05 0a 3c 68 d3 58 c4 99 d2 a3 de ec 84 37 c6 ff 64 4f 78 1f cf 8b 34 8c 74 d3 73 fd 1d 69 9b 26 fd 68 4a 6e 03 69 78 dc 08 27 84 2e 6f dc 1f 39 92 08 5e a9 36 85 e4 da 25 37 fa 69 a5 42 b2 02 cd 2b 8f 24 e0 9b 6e d2 b7 67 f8 f5 1c d8 40 39 83 93 2a 4c 48 d6 c4 8a 41 ca fc 49 ce 4b 36 98 b8 65 97 b2 a8 88 6d ec 05 0f e3 9b 9f 95 3f de 57 2a 4a 21 8b a2 5c 26 a5 41 c4 1d 16 44 dc c3 71 46 56 98 ce 3d b7 9d d0 cd 3e e9 7e 89 cf 3a bd 8e d3 3d 74 77 09 88 ba 80 20 1f 7c 91 ed 7d fd 87 2a 92 6c 04 e8 6d Data Ascii: hVR01}n{hISb3)]":!\|t0LZQR@>sg,<hX7dOx4tsi&hJnix'.o9^6%7iB+$ng@9LHAIK6em?WJ!\&ADqFV=>~:=tw \|}*lm
2024-04-26 16:48:34 UTC	1255	IN	Data Raw: 2d cf 56 c1 59 b9 5e d6 1a b5 fb 26 4f 8d 23 66 4e e9 92 e0 55 e8 3a 63 fc 03 1c ae d6 38 69 35 14 de a9 d8 8f 52 43 42 38 9a 9a c2 89 af 61 7f 50 6a ed 45 58 53 b8 ed 60 3f 19 f0 97 72 51 80 4d dc 11 66 23 a3 38 24 b1 bd cc f2 0e 6e 68 bc 7c 47 d6 56 08 b4 bc 63 b5 51 79 e4 88 14 84 1c 4b a5 48 3a 82 cc 2c 41 45 fb 44 29 b1 42 62 19 2c a1 12 5e b4 74 5a 80 a7 e4 4e 18 26 e7 68 a9 af cc e7 0d 6d 3a c8 57 60 a6 e6 28 45 8b af 59 2c 95 25 b9 0d 4a cb b2 04 d4 cf 5a 33 39 ce 9e 1d 4d e9 98 e4 58 d1 92 94 0e 4a a2 ab 67 a7 59 a8 ff dc 54 2c 89 b7 de 4f 1d 37 34 15 98 21 28 b3 1a ad 2c 76 d7 eb 3b 5c 7b 60 cb 77 f1 92 ac 88 a9 f0 25 bd 46 bb d9 42 40 06 24 7c 7a e9 06 79 1c ea 38 ce 30 f6 9e 06 27 bf 95 fe 81 88 0e 86 2b 30 3f 13 3f 44 cf ad 60 c6 d5 e4 49 b9 Data Ascii: -VY^&O#fNU:c8i5RCB8aPjEXS`?rQMf#8$nh\|GVcQyKH:,AED)Bb,^tZN&hm:W`(EY,%JZ39MXJgYT,O74!(,v;\{`w%FB@$\|zy80'+0??D`I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 16:48:36 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=51303 Date: Fri, 26 Apr 2024 16:48:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 16:48:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	34.102.205.190	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:37 UTC	572	OUT	GET /js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:37 UTC	840	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqEQHjNbD58THQScK6wp4EyzV4ijIA25DWSMxZGSayqIdPcbhTL29rIVgVOB_8KyA3qAjBpbWJfSw x-goog-generation: 1714148357160116 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 33086 Content-Encoding: gzip x-goog-hash: crc32c=w4PH3w== x-goog-hash: md5=jzsb7MoVFzR+WadiioMrjQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 33086 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Fri, 26 Apr 2024 16:19:54 GMT Last-Modified: Fri, 26 Apr 2024 16:19:17 GMT ETag: "8f3b1becca1517347e59a7628a832b8d" Content-Type: application/javascript Age: 1723 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:37 UTC	415	IN	Data Raw: 1f 8b 08 08 04 d4 2b 66 02 ff 74 6d 70 6c 72 64 65 67 6d 74 70 00 ec bd eb 76 db 46 96 30 fa ff 3c 05 85 ce b0 81 a8 48 91 92 25 3b 60 60 8e 2c c9 1d 77 7c 51 7c 89 93 30 1c 37 44 16 45 c4 24 40 e3 22 89 21 b9 d6 f7 02 e7 25 cf 93 9c bd 77 5d 50 b8 90 92 7b 7a ce fa 66 ce 97 15 8b 40 a1 ee b5 6b df 6b 97 9d f0 d9 a4 7d cb af 16 fe e8 f3 d9 34 0b 3f cf b8 3f be e6 61 c0 bd ed 9f d6 eb c1 d0 69 2f b2 64 6a 0f 06 4f 3a dd e3 21 5b 7d 77 72 74 74 e4 da 9c a5 2c 74 bc a7 2b 2b 4b 78 23 49 e3 60 94 5a bd 49 16 8e d2 20 0a 1b b1 cd 9d 55 cc d3 2c 0e 1b bc 6f f3 76 18 8d f9 6b 7f 0e 55 5a 96 d3 4e a3 97 d1 2d 8f cf fc 84 db 8e 1b 66 b3 d9 26 6c 8f ed 94 ad 7e 73 6d a8 35 de 38 1b f6 f8 e4 b0 73 fc f8 61 4d 05 13 1b 6b f1 3c ee c8 56 6f 83 70 1c dd f6 e0 83 35 88 Data Ascii: +ftmplrdegmtpvF0<H%;``,w\|Q\|07DE$@"!%w]P{zf@kk}4??ai/djO:![}wrtt,t++Kx#I`ZI U,ovkUZN-f&l~sm58saMk<Vop5
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: d8 f2 bc 74 b9 c0 02 ef a6 3e 4c e3 db 28 4a e5 9a ed 75 7b 95 5e e4 99 1e d4 89 3c fb 66 c3 9e 74 1f 3f 39 7c b4 6d 15 d4 0c 13 40 3b 2c 82 47 b1 6c c6 64 1b 33 c3 db d0 48 ca 7b 6f 08 96 da 9f f9 32 b1 d3 36 17 03 4e 9c f6 24 8a 2f fc d1 d4 56 65 55 c9 d0 4b a1 e4 72 c6 93 01 1f ae d7 ab 0d 0b 20 c5 4f a1 17 57 59 9a a7 fa 5e 5e 1b a4 f5 60 0e a2 f6 5b ee d8 be d3 6c aa 09 a1 67 d9 03 3f 49 82 eb d0 f6 45 ed 30 40 66 76 2d d8 de a3 d4 0b b0 81 bd ae 07 4b d1 f7 db 31 9f 47 37 fc 54 f5 08 b2 b9 50 29 4f 8d 14 b6 d7 a1 cc 96 e5 a6 ce c6 81 ff 4b 4b 5c 98 23 16 7a ab 45 b4 58 f0 d8 85 df 24 c0 6c 6e da 8e 16 f8 90 40 9e 18 32 5d 2f d9 8c 4f 52 d7 ea 58 2c 8d 16 f4 3b f7 e3 eb 20 c4 47 98 8f 38 8e 6e 8d f2 96 7f 95 44 33 e8 0d 7c 8b f9 84 c7 1c 56 dc 5d 6d Data Ascii: t>L(Ju{^<ft?9\|m@;,Gld3H{o26N$/VeUKr OWY^^`[lg?IE0@fv-K1G7TP)OKK\#zEX$ln@2]/ORX,; G8nD3\|V]m
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 17 f4 7a e0 96 86 7a 04 17 02 9b 68 16 21 fb 0f 38 0a 78 c1 f4 35 08 98 eb b5 d8 ff bf 7d 91 fb 7f 1a 25 29 89 97 b0 92 37 85 fd f6 26 6f 67 20 1a 62 62 fd 99 f5 17 85 09 ac 61 1b 90 04 bf 7b 33 b1 f3 2e 38 4f bd 4e 19 b3 b4 b1 a4 5b a0 62 d7 a2 b7 6f 6c 1c 90 d1 ee 99 60 c0 4a 24 14 c4 6c 02 fa 10 96 06 7b 06 7b 3c c6 81 0b 99 d6 0e cb b2 a9 d3 17 15 b8 21 35 2d f7 07 21 9a 18 37 46 d4 1f 04 c3 f6 28 0a 47 7e 0a ec 5a 91 92 a1 54 cf ae 21 63 3f 76 a1 61 37 86 7d 93 aa cc be a2 0f 8d a8 3f 72 47 2a f9 0c c6 81 50 9b 0f e4 c2 9c c0 14 f9 35 98 ba 74 8c 7f a6 5b 27 2e 2f 7e 59 40 91 f9 bc 59 93 e0 0e 84 44 d8 85 88 06 db 8a fd ef 2b f0 b9 a4 c5 16 2a 03 5d d9 db 1c de 0f 26 c0 11 4e a2 3b 93 85 41 25 c0 c1 fb 38 00 64 98 9a e9 25 c6 43 36 ed 95 9a 76 0c 76 Data Ascii: zzh!8x5}%)7&og bba{3.8ON[bol`J$l{{<!5-!7F(G~ZT!c?va7}?rGP5t['./~Y@YD+]&N;A%8d%C6vv
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: ee 75 c3 de 04 35 53 2a c1 ab 8c c1 cf 3f b2 11 e6 14 02 9a 24 e3 9e 31 06 53 11 71 86 3a 0c c2 b4 29 bf 53 0a 06 4c 2d 25 39 38 7f 72 e8 67 80 07 36 34 f5 0b ef 67 fb 57 db a0 32 79 1f da 7a 3a 81 37 57 0b 0a 5f 4b cb e2 2d 76 22 77 a9 6e dd d0 c8 4b 45 77 58 11 24 11 25 e1 44 4e 09 0a 96 42 3d 4b 2c 6c 75 be 63 45 db 62 5b af 19 29 80 53 a6 ac 38 6e a2 41 c8 80 ea d5 c6 05 da d3 cb 24 f9 cb 29 32 ec e9 0d 51 c6 a4 9d 2d 00 bd 02 7d d8 30 e8 f4 88 7f a0 57 d7 c8 88 44 76 a4 b4 b3 81 d6 bb 33 41 34 e4 ca d1 80 c4 22 e0 20 7e b1 71 57 08 35 f6 a8 b8 c4 a7 f0 e9 0f 00 2f 96 4b 0e 41 c5 ca e1 a8 05 bd 85 9c 1b 86 d5 00 90 22 d8 06 6d bd a3 8c 72 3a ed a1 8b a1 57 bd b0 b5 06 5c 92 b5 0a 08 73 45 84 7a 0a 17 c6 80 ed e2 ef 6b 9a 13 88 b1 17 03 16 a4 b9 23 dc Data Ascii: u5S*?$1Sq:)SL-%98rg64gW2yz:7W_K-v"wnKEwX$%DNB=K,lucEb[)S8nA$)2Q-}0WDv3A4" ~qW5/KA"mr:W\sEzk#
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 04 1e ef 01 d2 26 4e 55 23 f4 99 d9 20 13 83 c4 31 38 1b 7a 77 7d ab 03 78 12 28 e8 e0 cd d0 bb d5 6f b9 c2 de eb 3e f5 ec 8b ba cd ea f4 85 5e 7e 86 dc 99 b5 3f df b7 16 77 ac 61 ed 5f e1 83 03 f5 e8 af 47 e3 ca 77 d6 e8 38 16 4a 25 6e 6d 07 d3 bc 83 94 9d 7a 95 8a 3e ce f3 04 a3 9b f8 ea 88 d9 e4 13 85 8e 8b 3e 35 35 e8 b8 a0 b6 bd 17 2b e7 32 62 58 c1 0d 91 17 e6 b8 21 80 97 02 6e 30 35 17 00 56 40 b5 0d 5d 04 47 f7 2c fd ea 30 8d 9d 5c a0 f3 85 2f 4a a7 50 66 15 59 8e ed ca a8 bf d4 cf 5c 20 05 64 1a 33 89 af dc 5c fc ab 3a b9 6d 7a 82 ce 96 c8 51 bb 40 eb d0 06 a8 7c ba c4 87 aa d8 56 ca c0 00 7f 57 f2 64 6c 25 d1 b1 bb b3 3d b6 cb 2b 4f ad 83 5b 64 c3 cd 15 71 fd 8d 83 26 ec fa a1 49 17 ba 7c 48 94 b0 63 44 f4 fd 6b 07 24 0a d5 b8 07 e6 03 40 c9 b4 Data Ascii: &NU# 18zw}x(o>^~?wa_Gw8J%nmz>>55+2bX!n05V@]G,0\/JPfY\ d3\:mzQ@\|VWdl%=+O[dq&I\|HcDk$@
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 69 b5 c2 6c 7e c5 63 00 7e c9 2b cf fb 80 f5 fe b0 e7 ec 33 6c d0 6b d2 1c 1b 42 de 55 ae 3c 4e 06 a2 3e d8 36 e3 66 73 dc 07 8a eb 7d e8 7f e3 7e 70 67 43 76 ea c1 8e d1 9b ed ca e9 5f b9 57 25 03 2e 79 99 56 4d 11 ba 93 a3 fe 33 a0 47 fa 35 e9 bf 70 13 3c 46 73 8b e8 36 2f a7 55 92 a8 87 2a 6a 2d 6f b5 96 f2 fa 1e c5 64 b0 41 6d 15 20 ae 0a 6c 5d b3 3b 98 87 33 4f 8c ee 0d d4 79 21 74 95 a7 08 d7 ad 33 42 d1 4b 82 71 09 be 67 6a 3b 9c ca 07 f8 2c 37 20 c1 f5 29 ed 0d 28 49 f8 7b 29 76 8a d8 02 67 72 87 9d 8a 5f f8 48 bf 1b 76 09 d3 5e e4 86 05 e3 84 94 95 7a d6 6c 5e 0a d4 f1 d6 bb 1c 04 c3 c2 c9 bb 8b 5d c7 db 06 2f d9 a7 b2 31 01 d5 45 88 9b df 55 3f 59 4b cb b5 ee ac de 05 b0 9c fb de 5b d8 3a df 22 5d 94 5b e9 c2 d8 3e 9f ee dd 3e 71 61 fb 44 26 f0 Data Ascii: il~c~+3lkBU<N>6fs}~pgCv_W%.yVM3G5p<Fs6/U*j-odAm l];3Oy!t3BKqgj;,7 )(I{)vgr_Hv^zl^]/1EU?YK[:"][>>qaD&
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: fd cd bb a2 a1 1c 1c b6 3e b6 7e 69 fd d8 7a ab f7 a4 fb 43 29 81 fd 1d 32 b7 44 ee fd 8f fb bf ec ff b4 6f e4 fe b9 94 80 2e 6e d5 d0 0e 7f 54 c2 39 38 e8 fb c6 09 af d1 c2 70 43 a9 b5 5e 77 5c 6e aa b2 30 01 d0 bd 50 c8 ee 79 f6 6b a9 99 7d a5 f4 b0 af 60 0d 9d fe 6b cc e4 c3 4a fe ad c5 83 16 6c 76 9e c1 cb df e1 85 f1 11 ce c1 b8 1f d8 5f 20 8b e3 7e 61 df b0 71 3f b2 9f 43 1e c7 7d ee f4 10 0a 3c 3e 62 9f c5 6f eb 9b 8d 06 34 a0 01 40 1f 33 e9 c3 0a 23 9c 78 02 2b 0b 50 e3 0b fd 8a b0 c6 67 00 51 77 43 c6 c7 12 e8 ee aa 40 c7 a7 1e 9f 01 bc f1 09 e4 bb 81 67 00 39 be 80 e7 b9 27 ce 8f bd 63 e7 86 fa 0a e6 6a a9 86 8e b1 33 ca 63 bf 83 b1 73 dc 7d 1c d0 cf bc cf a7 2e d4 78 36 e0 e3 21 00 27 fe e5 4b 58 21 85 67 f9 15 65 9a ed 53 8e 7d 95 a3 a5 73 b8 Data Ascii: >~izC)2Do.nT98pC^w\n0Pyk}`kJlv_ ~aq?C}<>bo4@3#x+PgQwC@g9'cj3cs}.x6!'KX!geS}s
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 83 df 93 fd 03 47 69 da 9f 45 11 f4 3a 74 6a a3 9e e4 d6 d5 52 b8 12 ec 6b 0b 63 f6 f1 7c da d1 e0 2b 74 65 69 31 c6 88 d1 83 b2 7a 3f 2d 28 45 f3 aa c4 e9 ee da 00 1f db 0f 7d 5c 16 3a 4e ca 30 05 3f a5 f0 1c 35 6a 7b ee ec b4 19 68 89 07 fd b6 90 6b 20 1b 02 19 9c cb 86 cd 3f 6a 36 d5 28 e6 40 ca a4 61 ce b6 c6 c1 8d 65 94 78 67 1e 43 91 99 2c 66 3d 8f fd 6b 19 fa 65 1b 4d 16 3b c7 6c fd 93 31 3e fc 6a a1 53 07 9e b3 31 1b 7c 59 ce f4 2a 02 14 4c 47 72 cc 6c e7 c6 31 62 3a 47 cc db 9f 08 cd e4 4f 39 29 46 60 30 ca 1a aa 3a 1a 5f 1f a3 00 62 e7 fa b8 4c 6e 19 95 c0 4e ba b4 f5 74 15 18 b8 53 5a 41 a3 ea cf 02 fe ea 63 25 d0 29 65 e1 cc 29 7c 8a c9 b9 e1 3c 13 4e b3 1e 20 87 79 62 15 66 ec fd 3d d5 f1 62 fc 49 41 12 89 35 b1 4a 73 ff da 14 77 70 1b 01 78 Data Ascii: GiE:tjRkc\|+tei1z?-(E}\:N0?5j{hk ?j6(@aexgC,f=keM;l1>jS1\|Y*LGrl1b:GO9)F`0:_bLnNtSZAc%)e)\|<N ybf=bIA5Jswpx
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 1d fc 07 12 cf 2f 85 90 d4 3f a1 1d c7 64 78 4a 7c 7e 1d ed fd 09 a3 4f 73 e1 98 93 63 bc bf 1b 31 6b d1 e3 90 96 41 c4 cd da ea 5b 1a 93 a7 15 29 ac 50 a9 ad 82 f5 fb b3 8c eb 68 86 24 40 44 43 cf 90 2a a2 61 1f ff b8 92 3d 8c bd 9f e0 0d a3 22 06 4e bd b3 91 e9 70 6d 0a 5c 9c 9b c2 ae 9d f6 cd d1 ff dd ae 89 84 b3 52 f0 85 5a 7f c7 fd 65 d7 e0 70 1e ae ab ec b0 50 3e 58 fb 14 de 4e a3 7a 62 00 75 1c 3e 11 86 45 69 35 50 c2 13 e1 8c e2 1e 9f 25 bc 91 c6 cb 15 bd ff fd dd 9b d7 e8 90 9e 90 98 0c c2 27 2c 15 06 4b a3 bc f9 71 ed 92 37 69 ba 53 80 4e 99 c6 9f d7 76 da 96 cf 0c 83 92 a3 6a ac 8c f5 30 f4 87 98 47 b5 e8 8e e1 70 8e f8 b8 da c4 4f 94 ce c4 67 47 fe 7a ab 12 9e 26 fd 05 7e 69 ab 0f fd d4 e4 b1 dd d2 57 56 44 fb 79 71 99 5e 2c dd 47 e8 71 ad 31 Data Ascii: /?dxJ\|~Osc1kA[)Ph$@DC*a="Npm\RZepP>XNzbu>Ei5P%',Kq7iSNvj0GpOgGz&~iWVDyq^,Gq1
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 09 ac a6 1b 6a 16 8a 1a 17 31 62 f5 2d 67 33 14 e3 8a 1d a5 20 ae d8 cf 38 67 74 b1 f3 00 28 43 36 71 d8 7b f9 98 cf d1 06 e5 00 b1 59 de d8 7c c2 ce 45 ec 0d 0f 44 43 af bc 5f 88 f1 2c 85 2e a4 95 a4 49 a5 a5 a4 4d 56 ec 60 b3 49 1d e7 b0 b5 cc 20 74 f9 2c 11 b2 c6 99 c9 c1 22 14 95 91 67 42 3e 1f 4a 8b 06 a3 43 28 63 76 aa 3f 19 58 aa d9 0c 41 64 b9 a1 c8 f5 b1 12 4e 81 d9 c9 4f 45 83 d4 18 b2 41 3c 74 9c 9c ff fd 82 01 d9 0b 04 fa 4b 0d d8 50 2f df a0 e2 77 43 ba b6 f2 96 04 ca 6b 6e 32 b5 1f c3 da fd 18 d7 ed c7 a8 6e cf 75 2b 7b 0e 31 6e 88 58 d7 d8 4f 3f 90 eb ce 96 fd 84 1f 77 ec a7 2e ab ac 87 a4 fe c4 11 6c df 6c 39 f3 83 54 83 8f 09 e9 e2 bd 25 7a 0f 05 12 34 7d 2f 20 d0 cc e0 57 81 66 0d b0 d8 00 ae 3e cb 86 2c 22 70 a5 47 dd 0a c6 26 d7 f0 5a Data Ascii: j1b-g3 8gt(C6q{Y\|EDC_,.IMV`I t,"gB>JC(cv?XAdNOEA<tKP/wCkn2nu+{1nXO?w.ll9T%z4}/ Wf>,"pG&Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	34.102.205.190	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:37 UTC	572	OUT	GET /js/bundle-app-production-7012-50c34dca8b7ca494c30f.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:37 UTC	832	IN	HTTP/1.1 200 OK x-goog-generation: 1714143040760875 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 35912 Content-Encoding: gzip x-goog-hash: crc32c=ZoQBgQ== x-goog-hash: md5=Lp00tVWndJUoOIUaRMmoxg== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 35912 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-UploadID: ABPtcPpfVBvnIluasWIhA0R691O339w92F_K3ipNBuPe-lSd1fK15MfiD24IxQ50aZ1XE7YjbQ Server: UploadServer Date: Fri, 26 Apr 2024 16:02:28 GMT Age: 2769 Last-Modified: Fri, 26 Apr 2024 14:50:40 GMT ETag: "2e9d34b555a774952838851a44c9a8c6" Content-Type: application/javascript Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:37 UTC	423	IN	Data Raw: 1f 8b 08 08 40 bf 2b 66 02 ff 74 6d 70 76 72 78 6f 7a 7a 6b 61 00 ec bd 09 77 e3 c6 b1 30 fa 57 18 de f7 25 d2 fd 48 06 fb 22 1d 25 57 23 cf 78 9c cc 78 9b c5 ce 38 7e 3e 20 09 8a f0 90 04 0d 90 5a 46 9e ff fe 6a 6b a0 41 02 20 a9 d8 8e f3 2e cf 8c 24 a0 aa ab bb ab 97 5a ba ba 1b 27 79 3c 9b 0c 6e e3 e1 32 1a bd bf 9a ae 17 ef 67 71 34 be 8e 17 49 7c d1 8c fa f9 e7 ef be 3f 1d 2c d7 f9 f4 e4 bb ef 7c c3 b4 be ef 3d 78 81 6f 05 e6 d9 49 da 5b f4 e2 d3 8b bf 3c 74 d7 79 dc c9 57 59 32 5a 75 cf e3 41 76 b2 38 3d bf 89 b2 ce ec 22 3e 09 7c d7 f6 4f 7b ab 8b 78 b0 38 99 9d f6 22 80 85 96 ed 39 ee 69 2f 23 60 74 da 1b 61 42 cf f4 3c 48 99 10 70 74 da 5b 5e 2c e2 db ce 9b af 5f 9c c4 27 8e 6d 3b 81 7d da 8b 07 c3 d3 de a5 86 b0 dd c0 30 3c 41 4c 2e b2 93 d3 93 Data Ascii: @+ftmpvrxozzkaw0W%H"%W#xx8~> ZFjkA .$Z'y<n2gq4I\|?,\|=xoI[<tyWY2ZuAv8=">\|O{x8"9i/#`taB<Hpt[^,_'m;}0<AL.
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: bf b9 e6 4a 14 c5 51 61 9d ce 6d 32 5e 4d d5 6b 3b fd 7f 9f 2d d2 d5 c9 60 01 a8 28 1f 45 e3 f8 54 da 3a 99 cd ce 3a a3 75 96 c5 8b d5 15 52 a9 ac be 1b cd a2 3c ff 7f 2f f4 0e e8 77 bf ef 75 18 f1 df 17 dd ce 26 a6 b9 f9 8a de 42 7e a9 ee 3f ae f3 55 32 b9 87 b4 8b 15 14 0d 75 80 df 71 46 b8 68 96 5c 2f fa c9 2a 9e e7 1a bc ad 56 67 c3 18 ba 34 6e ae 9c 24 28 07 d8 59 67 81 63 60 b6 f1 c7 72 96 77 7f 36 75 e2 bc 1c 73 79 f2 21 3e eb 24 8b 69 9c 25 2b 02 cf 92 45 5c 8c 82 12 81 a8 55 7c b7 ea 43 ab 8e 01 b6 b8 3e eb 44 eb 55 7a 5e 20 56 59 b4 c8 71 14 62 3d 16 b1 d0 f4 61 e6 bf 4f 60 f0 53 69 f3 34 5d 4d 99 76 b1 4a a0 51 a2 3c 1e 53 16 fd 79 fa a1 9f e6 77 5b 09 af b3 e8 1e ba 77 16 6f 0e 08 6a 86 68 3c ee af d2 3e f6 c4 2c c9 57 95 36 29 fa a1 fb cf 7f Data Ascii: JQam2^Mk;-`(ET::uR</wu&B~?U2uqFh\/*Vg4n$(Ygc`rw6usy!>$i%+E\U\|C>DUz^ VYqb=aO`Si4]MvJQ<Syw[wojh<>,W6)
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 3b 70 de 17 ed e3 66 58 4f b8 8a b3 45 34 43 b7 bf cd 93 f1 6a a7 7a 7c 1f ef 5e c5 f3 c6 4d a4 ad ab 60 5e dc 44 b6 cb d8 f5 6a e7 37 76 0d 2e 1d b6 10 fa b5 73 1b 18 04 69 36 6b 93 28 be d9 48 b8 cb 45 f4 ad 46 52 b4 80 da 28 ed 46 4a 74 6c db 28 9d 46 ca 9d 6e 9d ef 36 d0 c2 38 82 9e 49 da a5 a7 ef 35 53 b7 91 d5 ce db c9 2c 6a f3 3f fc da b9 3a 49 67 50 c5 5d 2b d7 7e d8 42 bb c3 42 f3 a3 66 da 36 b2 da f9 79 9d b4 2e ca f8 b5 d3 f2 7a 96 0e db 44 81 5f 3b 23 af d3 f4 9a 06 6c 96 ce 5b a9 e3 16 ea 1d d1 39 7f d2 4c db 42 16 d4 4e cc eb 2c 1a af 29 64 0b 7e 42 9b 9d 11 98 f5 e4 71 bc 00 9b b9 55 e9 05 56 3d 69 b2 d3 50 0f ec 26 ca 36 22 a7 9e 28 bd 5d 4d 77 59 63 81 db 42 db 6a 87 05 b5 b3 72 8a a6 d4 6d 74 d3 be 44 15 d4 4e cd 29 b8 6c ab 61 1c ad 76 Data Ascii: ;pfXOE4Cjz\|^M`^Dj7v.si6k(HEFR(FJtl(Fn68I5S,j?:IgP]+~BBf6y.zD_;#l[9LBN,)d~BqUV=iP&6"(]MwYcBjrmtDN)lav
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: fb 64 d9 07 92 db a8 55 f0 4f ea 67 2c c5 da 73 e8 ab 15 2e 85 b5 96 5e 3f 73 53 3c 6b 96 8f 60 74 b5 2e a5 59 86 d1 48 3e 8e f7 a1 af 9f c3 18 28 1a 81 0b b1 8a f9 40 6a 5b 0e f5 13 19 37 1d c5 f3 e5 ea be 8d d4 6e 24 dd 65 0d 59 f5 a7 76 39 a2 d9 8f 46 ab e4 26 69 2f bb 7e 3a 53 0c 66 87 91 60 d5 9f dc 45 da db a8 75 fb b0 55 7f 68 37 5f 2f 97 69 7b 23 d7 4f e5 fb c5 68 1f 8d 64 d5 1f da 5d e1 66 34 da 5a d2 46 1a d5 93 5e ef 10 d2 56 fd 81 dd 55 d4 3a 1a 6b a7 30 9f 7c 4f 56 ed f5 ac 9d c5 ab e9 7a 3e cc 77 44 e7 ad fa f3 b9 42 db 16 4f b3 ea 4f e7 ae 92 d6 65 06 ab fe 4c 2e 2d 6d ee 1e 7c f5 e7 72 77 ac 8b 5a f5 07 72 57 59 34 99 80 64 9f b5 1b 43 56 fd 99 5c a0 6e 33 6e ad fa 53 b9 ab 2c c6 67 da 50 dd 46 ec d6 13 a7 cb e9 fd 6e e9 50 7f 0e 57 a8 69 Data Ascii: dUOg,s.^?sS<k`t.YH>(@j[7n$eYv9F&i/~:Sf`EuUh7_/i{#Ohd]f4ZF^VU:k0\|OVz>wDBOOeL.-m\|rwZrWY4dCV\n3nS,gPFnPWi
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 41 9d 6e a5 25 0b 3e de 33 f1 38 c9 d1 94 1d ef 4a 8e bd 81 3b a4 16 63 be 6b 4a a5 a7 97 fe 22 5e 83 45 33 eb 1b f5 14 54 fb 2a 5d 43 b6 f5 f4 cc d1 bf 90 81 e2 f2 d0 2c 86 d1 e8 7d 33 d7 eb a4 bf cc 92 79 94 dd d7 93 d4 b0 bd 49 c8 69 ea c9 eb b8 3e 84 be 9e e9 6a 87 39 7a 8f c9 b9 ca 83 5a 48 36 55 3e a2 7f f9 5a 9b 47 f5 ac 1c 5e 3b a8 4f f9 e6 36 ba 12 4c 6e 0f b3 ad e5 dd b9 4c 83 2c 1a 27 60 54 48 1e 3a ac ef 9c 9e 2f a3 31 ad 05 18 1d 13 69 d4 d5 6a 74 b3 9a 7e 73 9a 5c 9c b6 79 d1 9a 80 65 82 d7 ce 33 e6 61 07 0b 65 df 6e 64 b2 31 4a 4f cf f5 4b d2 cc 81 fb b1 90 50 67 93 74 04 7c d2 cd 74 00 8b 82 45 b6 3c 2d c5 56 03 7a 4f 59 56 4b fd a0 8e 4f a1 5c ab ad 08 3f 92 62 83 fe ac af cd 56 9a c3 ab b4 91 45 43 bd 3a f8 f4 fe ee cd eb 4f ca 7a e8 b0 Data Ascii: An%>38J;ckJ"^E3T*]C,}3yIi>j9zZH6U>ZG^;O6LnL,'`TH:/1ijt~s\ye3aend1JOKPgt\|tE<-VzOYVKO\?bVEC:Oz
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: bb 9c 6f b8 29 02 3a c4 e1 43 8a 72 49 bc 83 33 45 9b 39 86 fe 82 96 6d 12 cd 8e 3a e7 d0 79 b4 2b 71 95 93 5d a9 37 6b 5f 9b fe 7f fb e4 b8 71 df bd 8d aa 93 43 40 07 4c 0e a2 f8 05 26 c7 71 a4 1e 47 aa be b4 73 88 29 92 c7 50 d2 f8 70 77 57 93 be d5 99 f1 8f 2f fe f6 c3 a4 3a 33 04 74 c0 cc 20 8a c7 9a 58 87 6f 72 dd d7 34 fb 1d ed 6f fd 97 0d ad 47 db 59 de d1 ce fa 45 55 c9 87 4f c6 d6 ab ea 84 11 d0 01 13 86 28 1e f4 ed 89 d5 a8 a9 a3 41 54 68 78 8f 3d b5 56 5d 5d eb b6 5e d6 22 0f ad 7f fd 66 cc c3 76 31 56 32 ab 59 9a de c4 3d a6 8e bc 34 ad 55 d1 db a8 a2 b3 b9 5f d4 69 ac e2 5e 5b 40 76 a7 7e 54 53 ef b3 f9 c9 6a ae f9 5e 9b 9f ca e4 3b f7 e8 ed 99 fb a3 58 dd 6b db ca 1e 75 7d 54 e1 fb ec e3 db 6a e7 bb ab b7 57 41 b5 7e 02 3a a0 0e 44 f1 a0 8d Data Ascii: o):CrI3E9m:y+q]7k_qC@L&qGs)PpwW/:3t Xor4oGYEUO(AThx=V]]^"fv1V2Y=4U_i^[@v~TSj^;Xku}TjWA~:D
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 88 b3 a3 29 d5 fd a8 5d 8d 96 7d ec 39 a1 63 9b de 6f 73 35 da f8 9d 71 fd b2 72 e2 a6 66 03 7d b9 5c 5b 2c 12 12 1d ad 29 a7 5f bf 5c 3f 54 62 b3 d5 04 77 77 e9 4d d6 54 02 5d d0 7a 5a 25 f8 f1 13 ff 55 e5 a6 94 ad 32 e3 4b e3 f3 bf b7 85 8b 9d a6 70 71 91 45 f6 f5 bd fd 5c 6a f5 5f 93 c9 a4 8a 1d bf ff f4 f3 a0 a6 ce 8b f8 9a 4e 82 e3 d5 5c 55 8a cb cf 3e ff 6c d2 76 9d 90 53 73 9d 50 35 8b a7 d1 fb 4f be a8 5b 1a 2f 52 0c 93 bf 2f 7f d0 52 d8 5b 79 fc c3 7a 15 58 95 b6 db 4a 72 f7 cd 87 24 11 de 92 c5 34 ce 92 55 35 c1 68 38 5e 9a 87 46 ba cf cb a6 3c af 44 d7 dc cd f2 17 a3 85 f3 ae 1a 81 db ee e1 af 46 cf 9e fc ad 12 3d aa 19 05 93 57 5f fd f8 f0 b8 fb be aa 39 45 3f bd 5c bd aa e9 ee ad fd 4e e9 37 df 3e 51 47 f5 e4 7b 21 84 f8 d1 09 9f 7f cb cb 47 Data Ascii: )]}9cos5qrf}\[,)_\?TbwwMT]zZ%U2KpqE\j_N\U>lvSsP5O[/R/R[yzXJr$4U5h8^F<DF=W_9E?\N7>QG{!G
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: cb 57 7d 73 60 94 89 c4 d7 e5 09 45 3e f1 19 9a 55 92 5f b6 9a fd eb f9 91 fd f6 f1 31 99 d0 fc 9a 44 f3 64 76 2f 23 30 bf cf c1 63 ef af 13 b5 d2 84 83 4a ee f9 ad 4c 47 01 cd 62 fc f2 0c dd 10 8c 2a 5d 41 71 9e 0e b3 38 7a cf 17 89 6f 5c b3 5d ab a0 18 98 4f a3 71 7a ab 01 4a 79 41 b0 ea 85 c4 54 d8 2d 74 a3 14 a6 43 36 aa 44 30 bc c0 b8 c2 cc fe 27 1c ce b5 06 57 eb 16 07 b4 38 dd 30 d3 e2 0e 06 c6 69 e7 0f c9 1c 3f d1 15 2d 78 11 e8 ed 0f 21 88 87 ad 6b 82 da e8 ce d5 5d dd 46 7d 66 6a 81 26 59 10 7b 8f ba 97 7d ef 2b e0 b1 d1 e6 d1 5d 5f 6e e1 f4 d4 a2 11 55 a5 57 3c fd e5 bf 1f f4 4e 5d 66 31 75 d3 c7 ff 41 77 27 3a 29 73 e8 50 16 a7 0f 25 3b 25 0e 64 e3 e8 04 c3 26 9d 7e 07 57 f3 1a 1a b3 76 11 8b 50 1d a8 45 31 42 68 30 f5 f1 bd 36 9b bf 8c 93 1b Data Ascii: W}s`E>U_1Ddv/#0cJLGb*]Aq8zo\]OqzJyAT-tC6D0'W80i?-x!k]F}fj&Y{}+]_nUW<N]f1uAw':)sP%;%d&~WvPE1Bh06
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: a7 ba ab 34 ca de d7 8d 06 41 d3 e6 34 2a 7b c3 2e 16 3c c5 63 b6 8d a9 ad 8b 50 1b 2a a7 b8 de 6c e0 ea 0d ac 9b 7d 53 5e 52 ba 6d 93 6f 7e e6 6e 7b 40 6a 29 90 f9 6d f3 5c 4f 50 32 b0 e1 33 40 a2 4a 6f 57 7b 46 c7 36 75 2d a4 d1 46 f6 46 03 6a c8 82 7e 63 f0 eb 49 f4 31 52 35 88 cb ed 4c db 7d ac 6d a6 da ee 83 32 10 b1 dd 01 84 4b 16 80 5b 6d c9 82 e1 bc 6f 62 9b 5a a6 a1 4d 37 80 5a 08 05 39 e7 c4 3a d4 a6 f6 77 26 81 a5 43 1d ec 58 c3 9b 0c 3d 1d ea 22 34 0c 4d 4d 43 02 d4 c3 fa 85 51 10 57 ea e0 23 47 e3 91 a9 69 39 80 06 d8 8c e6 38 d2 07 f2 bc 1f 62 e7 80 51 31 d1 24 0b 85 64 f5 1b 65 64 ad b9 ca 2c 39 b6 15 97 74 ec c5 86 66 d9 54 12 90 de 89 ec e1 70 e2 d6 27 60 ab c1 0d 83 89 51 9f 80 3d d4 c0 d7 8d 84 4a 02 76 53 7d cf 1a db f5 09 d8 9a b0 9c Data Ascii: 4A4{.<cPl}S^Rmo~n{@j)m\OP23@JoW{F6u-FFj~cI1R5L}m2K[mobZM7Z9:w&CX="4MMCQW#Gi98bQ1$ded,9tfTp'`Q=JvS}
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: 9f fe f4 c5 37 bf 3c d3 9f 5b 3f 7d eb 3e 94 5b 5b ce a7 aa 97 35 01 43 e7 5a 5b 37 41 d4 cc d6 47 75 ed 7c b9 70 47 4d 5c aa b5 c0 53 7d 4e f7 2d e7 b1 65 5d bf 7e cd 3b 93 be 9d 0d 93 68 f3 74 d9 d6 be 1e dc 2c b4 54 87 6e 51 d6 d3 d1 e2 f1 15 9e 29 85 fc 19 41 a2 9d 11 4f a0 53 aa 48 92 a5 8c fc 6c ce 3b e2 49 f6 75 7b 28 e1 53 3a a6 7a 45 07 22 f8 fc 02 8a 3a c1 d1 91 68 0d 47 92 a9 2c e7 15 1f 2e a8 16 47 62 aa db e3 39 fd ba d8 c6 49 92 a5 02 be a2 29 2b db 3e 49 3e 74 7b 38 a4 5e 42 96 d1 75 6c f1 19 0f 9c cc 15 b8 c9 e7 0c 70 36 76 7b 93 34 85 3c aa 15 a0 71 dc ed e5 eb eb eb 38 47 49 f7 3c 2e 8f 1f d3 80 06 3a 09 19 bc 86 1e 7e 92 de 11 8a 06 65 b7 47 2b ef 52 16 c1 69 74 74 7b b2 4c f7 64 c5 9b 50 a9 1f b5 73 cb 0a 4e bd ba b9 cd 0a bc 78 c7 b0 Data Ascii: 7<[?}>[[5CZ[7AGu\|pGM\S}N-e]~;ht,TnQ)AOSHl;Iu{(S:zE":hG,.Gb9I)+>I>t{8^Bulp6v{4<q8GI<.:~eG+Ritt{LdPsNx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	34.102.205.190	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:37 UTC	572	OUT	GET /js/bundle-app-production-8627-07fdd6b2e595c0888e76.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:37 UTC	837	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrv7vBb881Ax1RHD74Qm_RURZAJdfrcto5kK23jy7QjUjLEZ5hip_TgpYKL7t9Sksd4L0AtvhrWOg x-goog-generation: 1714148359600787 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4951 Content-Encoding: gzip x-goog-hash: crc32c=808UPA== x-goog-hash: md5=nTBQHL5TkrfjnDAQ7RgHlQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 4951 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Fri, 26 Apr 2024 16:34:39 GMT Last-Modified: Fri, 26 Apr 2024 16:19:19 GMT ETag: "9d30501cbe5392b7e39c3010ed180795" Content-Type: application/javascript Age: 838 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:37 UTC	418	IN	Data Raw: 1f 8b 08 08 07 d4 2b 66 02 ff 74 6d 70 32 6e 65 31 7a 74 34 73 00 ad 5a 6d 73 da 48 b3 fd 7e 7f 05 e1 56 6d 41 3d 0a 2b 84 48 6c e7 b2 29 8c b0 ad ac 47 0a b6 b0 83 b7 52 5b 58 c8 b2 10 06 17 2f 06 c9 f1 7f bf e7 f4 08 1b 67 93 bd 5b 75 b7 76 2b d1 db cc f4 74 f7 39 7d 7a 48 79 b5 88 4a 8b e5 3c 09 97 e5 0f 95 45 34 b9 a9 ad a3 eb fb 61 98 76 6e 57 d3 74 12 0d 47 71 34 4d a2 d6 cf 5f 7d fb f6 c7 d7 6a ed 7e b5 b8 ad fc f1 c7 de 3b eb fd 57 e3 b1 6e f1 e2 a0 a2 0c cf 70 aa ad df 1e 9d da bc e2 55 0d a7 36 aa 78 c6 e3 28 ba 19 ae 26 cb 83 0a 5e f5 9f aa 1f 1e 86 f3 d2 b8 e5 54 de ef 35 f7 f6 1b 55 c3 c5 f5 bb 77 ef ad 7d bb 6a 04 7c fe fe 7d d3 7c 57 35 e2 56 79 34 5c 0e 0f 92 bb 61 1c fd ba 78 88 ff b3 b9 9b 7c b8 1e 2e a2 77 b6 f1 f9 c4 b3 ae b2 c3 c6 f0 Data Ascii: +ftmp2ne1zt4sZmsH~VmA=+Hl)GR[X/g[uv+t9}zHyJ<E4avnWtGq4M_}j~;WnpU6x(&^T5Uw}j\|}\|W5Vy4\ax\|.w
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: e4 da 0a 1c 55 3f 1d 0f 1a 2a 88 63 15 b4 cd d3 71 7b e3 a5 2a 57 e7 f6 da c3 73 d7 e9 ae bd 8e bd 56 c1 20 56 e3 70 85 37 b9 97 70 7c 7b a5 c6 71 8e 3d 36 4e c7 7c 3a 88 fd a0 bf f2 c6 a1 ad 52 95 79 99 8d 67 ca 72 9d 74 83 39 1b 2a 77 63 95 77 b1 e6 c0 f2 b2 b6 cd f7 5e a7 9d 7b e7 b6 e5 e5 5d db 75 62 ce 63 06 4e 5f db 10 a4 b1 ef 70 bd 33 f5 23 bb 2f 13 37 be ba 9b 2c ae e1 6b d7 ec 37 cf c6 9f 8e cf 12 f7 e1 73 3c db 0b 8f 8f cc 61 e7 f0 6e 78 b9 59 9c 7e f9 54 bf 3e ee c3 ef 17 d6 d5 65 f3 e1 ea b8 87 58 78 8b e1 97 f6 0f 7d 78 85 f9 82 e0 c5 06 15 f4 68 57 c3 eb af 77 6c ed 9a 62 7f 7e e1 ec ec 69 e3 89 bd 61 7d d7 27 18 9f c3 bf a6 4a da 3b 3e e9 e6 3e fc ab f2 91 f3 ca a7 79 6f e5 39 2a 73 1d 45 9f 59 f0 25 c6 ab 35 c6 37 b1 f7 dd f5 73 d5 b1 2d Data Ascii: U?cq{WsV Vp7p\|{q=6N\|:Rygrt9wcw^{]ubcN_p3#/7,k7s<anxY~T>eXx}xhWwlb~ia}'J;>>yo9sEY%57s-
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: bf 96 3a 0f fc 21 b7 53 d8 d4 ce 7c e7 ca d1 3a 21 6c a2 ce a3 c6 d8 36 f2 c5 2c 74 02 e6 74 a1 3b b1 27 68 72 ea 00 8e d7 35 8f ba d3 45 7d 3b e2 78 93 e3 b1 66 93 d8 c0 f8 a6 8c ef 00 47 b0 d1 0f 88 d1 b4 41 9f 00 b3 c0 68 1f b8 85 5e 01 fe fd 2e f8 61 ec 52 d7 82 1f 62 e4 a8 5b d7 fc c0 fc 00 f7 a2 ee fa cc 67 e6 c9 18 b6 38 23 47 e7 93 b2 99 eb f4 83 9e 17 dc 00 1b 30 07 f6 d2 d3 71 1a 03 d3 ac 23 9a fb b3 02 17 98 c3 05 96 fb e2 23 dc 23 46 ee 46 63 79 d0 d0 f1 7d 7e 46 ce 00 06 a1 1a 83 2e de 87 19 78 a6 51 d4 1d f1 91 12 cc 82 ab 45 a7 ba 4d 8d 69 f0 c5 38 5e 09 f7 51 57 05 29 ec 1a 30 9f 1b 58 b7 c0 37 35 3a 34 28 6d cf 15 f7 8f f5 06 e4 36 d4 20 bb a9 f2 14 73 f4 a8 4f 2d f1 b3 7c 0b 7f 06 9a 47 3d d6 1d f2 d2 18 d8 18 f7 1b 3e d7 02 47 41 d3 e7 Data Ascii: :!S\|:!l6,tt;'hr5E};xfGAh^.aRb[g8#G0q###FFcy}~F.xQEMi8^QW)0X75:4(m6 sO-\|G=>GA
2024-04-26 16:48:37 UTC	1255	IN	Data Raw: ef 35 35 7f ba db 1e 96 18 37 e5 2c 41 63 5c fa 0e c1 38 74 7e c1 a5 0d a9 61 82 b1 34 13 ad 85 dc 86 8f 58 0f 1b a2 6b 84 6b 30 4e f8 84 da 27 dd 88 4e 91 6f 39 ce b5 35 9e bb a8 5b 5c 5f b1 1e 58 a2 8f a8 89 c6 b1 59 e0 39 a3 2e 27 1f b0 06 a8 ac c0 b3 9c 51 11 cf bd 3a f1 ae f1 8c 98 15 78 e6 d9 a7 8c e7 59 a2 d3 17 ed 81 1a 6b 6e b1 cb fa a2 b1 0b dd af f3 11 fb 8f f9 9e 7a a6 49 7f 14 fa 9c be 14 ec a2 be 5b 7a 7d c6 92 cf a8 3f c3 fa 56 0b f9 1a cf ec 87 36 85 16 c2 dc e1 77 df 31 ef a8 3f 88 fb 5e 03 7e e6 da 52 2b fc f3 d7 6b fb 5c 5b d6 69 cb 99 81 3e b3 10 0e ca b4 0e 0b 0b 2e ec 93 43 a8 cb 77 f7 5e 17 1d 48 de 21 27 53 6b 64 fa fc c1 a3 ce dd f5 27 fb b2 a0 57 f0 6b 1f f9 74 e6 e8 be 6d d0 28 f8 75 03 4c d4 5d dd d7 35 e4 4c 43 ce 5c d9 03 49 Data Ascii: 557,Ac\8t~a4Xkk0N'No95[\_XY9.'Q:xYknzI[z}?V6w1?^~R+k\[i>.Cw^H!'Skd'Wktm(uL]5LC\I
2024-04-26 16:48:37 UTC	768	IN	Data Raw: 73 aa 18 88 4c 7a e3 d4 f8 cf 2a 92 69 8c 7d 56 d2 56 19 29 79 39 4c 96 e5 64 5a 72 aa 1f bb 95 ed 70 a7 56 bc 91 69 bc ea 41 80 f4 2b 2f e7 c3 64 82 c1 f2 f9 47 ce b6 7d 72 d0 ab 1a 83 5a 38 9c 86 d1 64 17 34 da f2 37 62 f9 f7 7b 66 76 8f 5b 3e c2 b2 8d d7 13 e6 b8 99 ac 16 b7 3f c0 dd 8b 0f 3e c6 07 e7 15 84 0a e0 1b 3c 61 16 a7 62 bd 7f d7 68 d6 e1 6a 5c ef bd af bf af e3 3a c5 75 dd 6a 02 99 55 98 ee d4 a6 70 be d1 df 81 5c f5 71 12 2d 1f c3 d9 f4 26 89 0f bc a7 16 13 c0 ab dd cc 67 77 dd 3b 6c 0a a4 e0 d5 96 33 7d fd 47 62 6c be d2 b7 6e 6d b5 88 ce 97 c0 7f b5 f2 06 ab 3c 8e 92 c5 fd 70 19 de 1e ac 9e f8 fe b4 76 54 ad 90 08 7c a4 ee 6f 8f aa 76 3f 8f 1e 90 41 8e fe 07 29 78 a5 6a 8b e5 ec fe f3 7c 76 3f 8c 87 7a 8b c6 a6 f2 c6 ac 32 58 61 2d ff bd Data Ascii: sLz*i}VV)y9LdZrpViA+/dG}rZ8d47b{fv[>?><abhj\:ujUp\q-&gw;l3}Gblnm<pvT\|ov?A)xj\|v?z2Xa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	34.149.61.18	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:39 UTC	1181	OUT	GET /favicon.ico HTTP/1.1 Host: www.aptracking1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-CSRF-TOKEN=1h9shJy777CHhK2A75DCKsNmt0SWOlaGhRd1ApubX5ZOJIytvCRz5omD5qT7zYgpmehtYv_8RfBj2GHOR_ATWQ; _leadgenie_session=B8IMTGOG1Ta6c%2FswNvPH4hKmnRIkUfr8PNYQQKupgSmxALH3P4HIqhxuXPdniKbhvz006D9KBMTdCIUb2uAgQZd4YD8u%2Fzf9CxPsi9atLHT9Y2v67aMZyzagQKssLVfCABmEZM58kCYGEtID8AqQfPzMusmOyaruiHogFXrAUaccY2uXYNwdKCdyE9F%2B8aD8xIi5Iu4UyBK87B%2B5Dyf4TRi7YYwQaB7ycxVmvmyUIM7yQ8a4p8WmAIlRLrYqV0kkhbHpo7nhvAoyyu30wZo9zIsOUwBiIvNtnqk%3D--%2BBEeuWFajZHj73PE--BDN9LBeka9E%2FL04sqw2xNw%3D%3D; GCLB=COrOzJmyp7Kb7wEQAw
2024-04-26 16:48:39 UTC	304	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 16:48:39 GMT Content-Type: image/x-icon Content-Length: 1406 Last-Modified: Fri, 26 Apr 2024 14:44:29 GMT ETag: "662bbdcd-57e" Server: nginx Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:39 UTC	951	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1e 62 77 00 00 00 00 00 04 0d 10 00 08 1a 20 00 0c 27 30 00 3c c2 ee 00 40 cf fe 00 18 4e 60 00 1c 5b 70 00 20 68 80 00 02 07 08 00 0a 21 28 00 36 af d6 00 16 48 58 00 3e c9 f6 00 34 a8 cf 00 38 b5 df 00 3c c2 ef 00 32 a2 c7 00 36 af d7 00 20 68 7f 00 0a 20 28 00 34 a9 cf 00 1a 54 68 00 1e 61 78 00 22 6e 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( bw '0<@N`[p h!(6HX>48<26 h (4Thax"n
2024-04-26 16:48:39 UTC	455	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 0f 07 07 07 08 06 06 06 06 06 06 0c 07 0f 06 06 06 01 01 01 01 01 06 06 06 06 06 01 01 0e 06 06 06 14 01 0d 00 01 15 06 06 06 17 01 09 06 06 06 06 06 01 01 11 0b 01 12 06 0e 01 0a 06 06 06 06 06 06 0f 01 03 05 01 02 06 03 01 13 06 06 06 06 06 06 06 04 01 16 07 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	162.247.243.39	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:39 UTC	579	OUT	GET /nr-spa-1.257.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aptracking1.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:39 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 108525 x-amz-id-2: /hcxPOF/6pmryCqhevdkWxARBiG4T2cx1tWxoI76CWAV2hlLfWGq4u4bQkntyHUEYxGNVlJLytI= x-amz-request-id: G69S53H98ZPW8K1N Last-Modified: Fri, 19 Apr 2024 00:43:41 GMT ETag: "34409e01359ee8c8db0c50eb0d12e36c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 8lx2yHKebisc5tgqY1i.rEOm4AHzJoDM Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 16:48:39 GMT Via: 1.1 varnish X-Served-By: cache-mia-kmia1760086-MIA X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 35 37 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 31 5d 2c 7b 39 31 33 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 6c 65 74 20 72 3b 69 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 72 3d 65 7d 29 29 Data Ascii: /! For license information please see nr-spa-1.257.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let r;i.d(t,{m:()=>s});const n=new Promise((e=>{r=e}))
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 29 29 2c 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 3f 2e 65 65 2e 6f 6e 28 6f 2e 77 4f 2e 52 45 53 45 54 2c 28 28 29 3d 3e 74 68 69 73 2e 72 75 6e 48 61 72 76 65 73 74 28 7b 66 6f 72 63 65 4e 6f 52 65 74 72 79 3a 21 30 7d 29 29 29 7d 75 6e 6c 6f 61 64 28 29 7b 74 68 69 73 2e 61 62 6f 72 74 65 64 7c 7c 28 74 68 69 73 2e 6f 70 74 73 2e 6f 6e 55 6e 6c 6f 61 64 26 26 74 68 69 73 2e 6f 70 74 73 2e 6f 6e 55 6e 6c 6f 61 64 28 29 2c 74 68 69 73 2e 72 75 6e 48 61 72 76 65 73 74 28 7b 75 6e 6c 6f 61 64 3a 21 30 7d 29 29 7d 73 74 61 72 74 54 69 6d 65 72 28 65 2c 74 29 7b 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 65 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 75 6c 6c 21 3d 74 3f 74 Data Ascii: )),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 64 65 6c 61 79 7c 7c 74 68 69 73 2e 6f 70 74 73 2e 72 65 74 72 79 44 65 6c 61 79 3b 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 69 3f 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 69 2c 65 29 29 3a 21 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 69 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 69 2c 65 29 7d 7d 7d 7d 2c 36 32 39 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 4d 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 72 3d 69 28 34 34 32 30 29 2c 6e 3d 69 28 34 33 35 31 29 2c 73 3d 69 28 34 32 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 Data Ascii: delay\|\|this.opts.retryDelay;this.started&&i?(clearTimeout(this.timeoutHandle),this.timeoutHandle=null,this.scheduleHarvest(i,e)):!this.started&&i&&this.scheduleHarvest(i,e)}}}},6291:(e,t,i)=>{i.d(t,{M:()=>y});var r=i(4420),n=i(4351),s=i(4247);function a()
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 74 68 69 73 29 3a 74 68 69 73 2e 5f 73 65 6e 64 2e 62 69 6e 64 28 74 68 69 73 29 29 28 65 29 7d 6f 62 66 75 73 63 61 74 65 41 6e 64 53 65 6e 64 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 7b 70 61 79 6c 6f 61 64 3a 69 3d 7b 7d 7d 3d 74 3b 72 65 74 75 72 6e 20 64 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 22 73 74 72 69 6e 67 22 2c 5b 22 65 22 5d 29 2c 74 68 69 73 2e 5f 73 65 6e 64 28 7b 2e 2e 2e 74 Data Ascii: this):this._send.bind(this))(e)}obfuscateAndSend(){var e=this;let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const{payload:i={}}=t;return d(i,(function(){return e.obfuscator.obfuscateString(...arguments)}),"string",["e"]),this._send({...t
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2e 22 29 29 29 2c 54 26 26 30 21 3d 3d 54 2e 6c 65 6e 67 74 68 26 26 22 7b 7d 22 21 3d 3d 54 26 26 22 5b 5d 22 21 3d 3d 54 7c 7c 28 54 3d 22 22 29 3b 63 6f 6e 73 74 20 78 3d 5b 5d 3b 78 2e 70 75 73 68 28 7b 6b 65 79 3a 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 76 61 6c 75 65 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 7d 29 3b 6c 65 74 20 4f 3d 63 28 7b 75 72 6c 3a 50 2c 62 6f 64 79 3a 54 2c 73 79 6e 63 3a 61 2e 75 6e 6c 6f 61 64 26 26 28 70 2e 76 36 7c 7c 70 2e 77 31 29 2c 68 65 61 64 65 72 73 3a 78 7d 29 3b 69 66 28 21 61 2e 75 6e 6c 6f 61 64 26 26 75 26 26 63 3d 3d 3d 73 2e 42 65 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 3b 4f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 65 6e 64 22 Data Ascii: r configurations."))),T&&0!==T.length&&"{}"!==T&&"[]"!==T\|\|(T="");const x=[];x.push({key:"content-type",value:"text/plain"});let O=c({url:P,body:T,sync:a.unload&&(p.v6\|\|p.w1),headers:x});if(!a.unload&&u&&c===s.Be){const e=this;O.addEventListener("loadend"
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 6f 61 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 74 3d 65 3d 3e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 6c 65 6e 67 74 68 3e 30 3f 65 3a 6e 75 6c 6c 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 7c 7c 7b 7d 29 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 7b 6c 65 74 5b 69 2c 72 5d 3d 74 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 Data Ascii: oad(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const t=e=>"undefined"!=typeof Uint8Array&&e instanceof Uint8Array\|\|Array.isArray(e)?e:"string"==typeof e?e.length>0?e:null:Object.entries(e\|\|{}).reduce(((e,t)=>{let[i,r]=t;return("numb
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 72 22 3a 61 3d 36 2c 73 3d 72 25 31 3f 72 3a 72 2b 22 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 61 3d 72 3f 37 3a 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3d 39 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 73 3d 74 28 72 29 7d 69 2e 70 75 73 68 28 5b 61 2c 65 2b 28 73 3f 22 2c 22 2b 73 3a 22 22 29 5d 29 7d 7d 29 29 2c 69 7d 76 61 72 20 6c 3d 2f 28 5b 2c 5c 5c 3b 5d 29 2f 67 7d 2c 35 39 39 38 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 75 42 3a 28 29 3d 3e 6d 2c 77 75 3a 28 29 3d 3e 70 2c 7a 4a 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 72 3d 22 53 74 61 72 74 22 2c 6e 3d 22 45 6e 64 22 2c 73 3d 22 75 6e 6c 6f 61 64 45 76 65 6e 74 22 2c 61 3d 22 72 65 64 69 72 65 63 74 22 2c 6f 3d 22 64 6f Data Ascii: r":a=6,s=r%1?r:r+".";break;case"boolean":a=r?7:8;break;case"undefined":a=9;break;default:s=t(r)}i.push([a,e+(s?","+s:"")])}})),i}var l=/([,\\;])/g},5998:(e,t,i)=>{i.d(t,{uB:()=>m,wu:()=>p,zJ:()=>f});var r="Start",n="End",s="unloadEvent",a="redirect",o="do
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 5f 41 2e 63 6c 6f 73 65 3d 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 6e 2e 5f 41 2e 63 6c 65 61 6e 75 70 54 61 73 6b 73 29 65 28 29 3b 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6e 2e 69 6c 3f 28 28 30 2c 73 2e 4e 29 28 65 2c 21 30 29 2c 28 30 2c 72 2e 62 50 29 28 22 70 61 67 65 68 69 64 65 22 2c 65 29 29 3a 6e 2e 76 36 26 26 6e 2e 5f 41 2e 63 6c 65 61 6e 75 70 54 61 73 6b 73 2e 70 75 73 68 28 65 29 7d 7d 2c 34 32 32 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 66 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 2f 28 5b 5e 3f 23 5d 2a 29 5b 5e 23 5d 2a 28 23 5b 5e 3f 5d 2a 7c 24 29 2e 2a 2f 2c 6e 3d 2f 28 5b 5e 3f 23 5d 2a 29 28 29 2e 2a 2f 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 Data Ascii: _A.close=()=>{for(let e of n._A.cleanupTasks)e();e()}}function a(e){n.il?((0,s.N)(e,!0),(0,r.bP)("pagehide",e)):n.v6&&n._A.cleanupTasks.push(e)}},4222:(e,t,i)=>{i.d(t,{f:()=>s});var r=/([^?#])[^#](#[^?]\|$)./,n=/([^?#])()./;function s(e,t){return e.r
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 4f 62 66 75 73 63 61 74 65 28 29 7b 72 65 74 75 72 6e 20 68 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2e 6c 65 6e 67 74 68 3e 30 7d 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 65 29 7b 69 66 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 74 3d 68 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2c 69 3d 65 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 2e 72 65 67 65 78 2c 73 3d 74 5b 72 5d 2e 72 65 70 6c 61 63 65 6d 65 6e 74 7c 7c 22 2a 22 3b 69 3d 69 2e 72 65 70 6c 61 63 65 28 6e 2c 73 29 7d 72 65 74 75 72 Data Ascii: Obfuscate(){return h(this.sharedContext.agentIdentifier).length>0}obfuscateString(e){if(!e\|\|"string"!=typeof e)return e;for(var t=h(this.sharedContext.agentIdentifier),i=e,r=0;r<t.length;r++){var n=t[r].regex,s=t[r].replacement\|\|"*";i=i.replace(n,s)}retur
2024-04-26 16:48:39 UTC	1378	IN	Data Raw: 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 29 28 74 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 2c 38 31 35 38 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 53 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 46 49 52 53 54 5f 50 41 49 4e 54 3a 22 66 70 22 2c 46 49 52 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 3a 22 66 63 70 22 2c 46 49 52 53 54 5f 49 4e 50 55 54 5f 44 45 4c 41 59 3a 22 66 69 22 2c 4c 41 52 47 45 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 3a 22 6c 63 70 22 2c 43 55 4d 55 4c 41 54 49 56 45 5f 4c 41 59 4f 55 54 5f 53 48 49 46 54 3a 22 63 6c 73 22 Data Ascii: {return window.navigator.sendBeacon.bind(window.navigator)(t,i)}catch(e){return!1}}},8158:(e,t,i)=>{i.d(t,{S:()=>r});const r={FIRST_PAINT:"fp",FIRST_CONTENTFUL_PAINT:"fcp",FIRST_INPUT_DELAY:"fi",LARGEST_CONTENTFUL_PAINT:"lcp",CUMULATIVE_LAYOUT_SHIFT:"cls"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49731	162.247.243.29	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:40 UTC	1171	OUT	POST /1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aptracking1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:40 UTC	450	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Fri, 26 Apr 2024 16:48:40 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.aptracking1.com access-control-expose-headers: Date timing-allow-origin: https://www.aptracking1.com x-served-by: cache-mia-kmia1760091-MIA
2024-04-26 16:48:40 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 30 2c 22 69 6e 73 22 3a 30 2c 22 73 70 61 22 3a 30 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 41 77 4f 54 49 7a 4d 6e 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 79 4e 7a 4d 30 4f 44 6b 33 4e 51 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":0,"ins":0,"spa":0,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTAwOTIzMnxCUk9XU0VSfEFQUExJQ0FUSU9OfDEyNzM0ODk3NQ"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49732	34.149.61.18	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:40 UTC	863	OUT	GET /favicon.ico HTTP/1.1 Host: www.aptracking1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-CSRF-TOKEN=1h9shJy777CHhK2A75DCKsNmt0SWOlaGhRd1ApubX5ZOJIytvCRz5omD5qT7zYgpmehtYv_8RfBj2GHOR_ATWQ; _leadgenie_session=B8IMTGOG1Ta6c%2FswNvPH4hKmnRIkUfr8PNYQQKupgSmxALH3P4HIqhxuXPdniKbhvz006D9KBMTdCIUb2uAgQZd4YD8u%2Fzf9CxPsi9atLHT9Y2v67aMZyzagQKssLVfCABmEZM58kCYGEtID8AqQfPzMusmOyaruiHogFXrAUaccY2uXYNwdKCdyE9F%2B8aD8xIi5Iu4UyBK87B%2B5Dyf4TRi7YYwQaB7ycxVmvmyUIM7yQ8a4p8WmAIlRLrYqV0kkhbHpo7nhvAoyyu30wZo9zIsOUwBiIvNtnqk%3D--%2BBEeuWFajZHj73PE--BDN9LBeka9E%2FL04sqw2xNw%3D%3D; GCLB=COrOzJmyp7Kb7wEQAw
2024-04-26 16:48:41 UTC	304	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 16:48:40 GMT Content-Type: image/x-icon Content-Length: 1406 Last-Modified: Fri, 26 Apr 2024 14:44:29 GMT ETag: "662bbdcd-57e" Server: nginx Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:41 UTC	951	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1e 62 77 00 00 00 00 00 04 0d 10 00 08 1a 20 00 0c 27 30 00 3c c2 ee 00 40 cf fe 00 18 4e 60 00 1c 5b 70 00 20 68 80 00 02 07 08 00 0a 21 28 00 36 af d6 00 16 48 58 00 3e c9 f6 00 34 a8 cf 00 38 b5 df 00 3c c2 ef 00 32 a2 c7 00 36 af d7 00 20 68 7f 00 0a 20 28 00 34 a9 cf 00 1a 54 68 00 1e 61 78 00 22 6e 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( bw '0<@N`[p h!(6HX>48<26 h (4Thax"n
2024-04-26 16:48:41 UTC	455	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 0f 07 07 07 08 06 06 06 06 06 06 0c 07 0f 06 06 06 01 01 01 01 01 06 06 06 06 06 01 01 0e 06 06 06 14 01 0d 00 01 15 06 06 06 17 01 09 06 06 06 06 06 01 01 11 0b 01 12 06 0e 01 0a 06 06 06 06 06 06 0f 01 03 05 01 02 06 03 01 13 06 06 06 06 06 06 06 04 01 16 07 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	162.247.243.29	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:43 UTC	913	OUT	GET /1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:44 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Fri, 26 Apr 2024 16:48:44 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-mia-kmia1760071-MIA
2024-04-26 16:48:44 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49737	162.247.243.29	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:50 UTC	802	OUT	POST /events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=24893&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aptracking1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:50 UTC	250	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 38 31 36 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 34 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 33 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 34 3b 36 2c 27 63 6c 73 2c 30 2e 3b 65 2c 27 66 63 70 2c 39 61 78 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 36 31 37 33 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 35 38 38 34 2e 35 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 63 6f 6d 70 6c 65 74 65 3b 35 2c 31 2c 32 3b 36 2c 33 2c 33 35 30 2e 3b 36 2c 34 2c 31 2e 34 3b 36 2c 35 2c 30 2e 3b 65 2c 27 6c 6f 61 64 2c 39 39 33 2c 34 3b 35 2c 31 2c 32 3b 36 2c 33 2c 33 35 30 2e 3b 36 2c 34 2c 31 2e 34 3b 36 2c 35 2c 30 2e Data Ascii: bel.6;e,'fp,816,4;5,'net-etype,'4g;6,'net-rtt,350.;6,'net-dlink,1.4;6,'cls,0.;e,'fcp,9ax,7;6,'timeToFirstByte,6173.3000000000175;6,'firstByteToFCP,5884.5;5,'loadState,'complete;5,1,2;6,3,350.;6,4,1.4;6,5,0.;e,'load,993,4;5,1,2;6,3,350.;6,4,1.4;6,5,0.
2024-04-26 16:48:51 UTC	317	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 16:48:51 GMT content-type: image/gif access-control-allow-origin: https://www.aptracking1.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760036-MIA
2024-04-26 16:48:51 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49738	34.102.205.190	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:48:54 UTC	572	OUT	GET /js/bundle-app-production-7977-78bb72fada7e81315467.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:48:54 UTC	831	IN	HTTP/1.1 200 OK x-goog-generation: 1714143044674510 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 9934 Content-Encoding: gzip x-goog-hash: crc32c=ZA8zSw== x-goog-hash: md5=yDaKpu1M9ESXLAV5NGIX/A== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 9934 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-UploadID: ABPtcPo-bx5XseEx0wz4zLGSrR0tmTVXcKn9qHD_rJHGz7tKdwjLPFPFbTIEdGOYXIbeLDDcq_A Server: UploadServer Date: Fri, 26 Apr 2024 16:08:11 GMT Age: 2443 Last-Modified: Fri, 26 Apr 2024 14:50:44 GMT ETag: "c8368aa6ed4cf444972c0579346217fc" Content-Type: application/javascript Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 16:48:54 UTC	424	IN	Data Raw: 1f 8b 08 08 44 bf 2b 66 02 ff 74 6d 70 61 6c 34 31 6d 68 75 5f 00 ad 7c 69 73 e3 46 92 f6 f7 f7 57 70 b4 b1 3b 52 2c a5 c1 c9 43 0a ed be b4 c0 96 d1 db 00 4d 09 6c 9b 72 38 26 40 00 84 78 88 94 79 34 01 f4 f4 7f df 7c 32 8b 14 28 92 9e 9e 0d 87 c6 76 77 65 15 2a 33 2b 8f 27 b3 4a 73 be 4c a6 c3 ab 4d 32 78 0d a3 c9 dd f3 7a 36 99 26 61 9c 26 b3 51 72 7b 9a f4 8f 7f fc fa db c5 d5 eb 7a f9 7c fe eb af f5 66 bd fe 5b f5 6b b3 61 34 cd e6 f5 b9 57 f5 ab ce c5 ed 7f 7d 3d 5b 2f 93 ca 72 b5 18 45 ab b3 1b e7 6a 71 ee 5f dc 7c 09 17 95 f1 ad 73 de d4 1a 5a 43 bf a8 ba b7 ce d5 ec 7c 7c 51 9d 63 d0 30 6b 96 7d 51 2d 78 70 7e 71 7e 71 ee 9e 5f 5c dc 14 6a 27 ef 6a 14 57 ff fa bc 7a 99 fe 1a 87 ab f0 32 7c 9d 4f a7 f3 d1 fc 76 b5 58 27 bf 55 af 37 cf c9 22 39 bf Data Ascii: D+ftmpal41mhu_\|isFWp;R,CMlr8&@xy4\|2(vwe*3+'JsLM2xz6&a&Qr{z\|f[ka4W}=[/rEjq_\|sZC\|\|Qc0k}Q-xp~q~q_\j'jWz2\|OvX'U7"9
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: 2c bd 1e cd 46 2b da e4 86 87 87 e1 cb 68 9a 5f 93 0e ce 4b c2 5f 7c fb f3 34 1a 81 ef cb d7 c5 e8 25 5c e4 97 ba 76 5d f9 b7 a4 39 34 86 c3 9b f7 34 03 b4 a8 1e 47 c3 e8 80 66 82 d6 18 0c ea c3 e6 01 cd 02 cd d2 1a cd 61 e3 80 66 83 a6 5b b5 64 58 3b a0 d5 40 d3 1a b6 11 19 07 b4 3a d3 06 c6 b0 6e 1e d0 1a 4c 33 f5 9a 59 a2 cd 97 a4 d5 2f 89 12 b0 3e 4c 86 47 88 22 61 63 18 27 c6 21 51 44 8c 86 61 74 64 25 cb 68 0f 93 38 ac 1d 12 59 48 33 8e a2 86 7d 48 64 29 f5 78 60 d4 1a 87 44 25 66 dd 34 87 87 44 25 a7 69 ea 83 1d 71 96 a4 e1 9b 9c c3 61 d2 48 1a 87 44 96 73 18 45 f5 a8 7e 48 34 65 65 83 7e 0e 89 2c e7 b0 6e 1b b6 71 48 64 39 e3 a6 59 33 6b 87 44 96 73 60 e8 b1 1e 1f 12 59 ce ba a9 0d b4 23 a2 34 44 7d 9a a9 bd 29 3e 0a d7 ab d1 7c b6 15 73 68 24 cd Data Ascii: ,F+h_K_\|4%\v]944Gfaf[dX;@:nL3Y/>LG"ac'!QDatd%h8YH3}Hd)x`D%f4D%iqaHDsE~H4ee~,nqHd9Y3kDs`Y#4D})>\|sh$
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: a3 76 62 86 98 c9 b0 56 ab 9d e2 43 ec a4 69 0e cc 77 7c bc 2f 25 86 b5 d8 4a cc 93 73 14 5a 0b 8d e8 f4 1c a9 9e 8c 7a 23 6c 9c 9c 63 49 d1 6f 45 8d c1 c9 39 02 54 43 23 ac 9f fe 8e 58 cb d0 d0 ed e1 c9 39 02 5b 6d bd 69 d5 4e ce 61 fd 58 03 5d 33 0e f4 53 82 b0 89 11 5b c3 fa f1 09 ca 5a 9a 66 12 1d 9f c0 6a 69 36 6a f5 c4 3a 3e 41 aa ad c8 8c e3 f8 f8 04 a9 b7 6c 9d 6a f3 e3 13 6a d2 33 d3 eb a5 00 be 37 41 6a ae 50 1b da 27 a4 68 a8 a2 2c b2 0e 7c b8 a4 86 06 81 a7 f8 28 5d b4 d0 88 c2 66 ed 28 5d 0a 4e 7d d0 a8 5b 47 e9 96 74 04 c3 ba 7d 7c 7f 5b fc a9 31 d4 9b 47 e9 a2 81 a8 16 ea fa 51 3a 2b c0 1c da 0d 2d 39 4a 17 f9 23 33 d1 c2 f7 f4 d7 55 49 05 43 9d 42 87 75 6a 8a 54 dd 76 d3 8e 87 a7 a6 b0 22 a2 5a 2d 79 9f 1b de a6 48 85 53 a7 ea bc 71 6a 8a Data Ascii: vbVCiw\|/%JsZz#lcIoE9TC#X9[miNaX]3S[Zfji6j:>Aljj37AjP'h,\|(]f(]N}[Gt}\|[1GQ:+-9J#3UICBujTv"Z-yHSqj
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: 79 c6 24 36 ca b3 2a 77 de d5 5e 3c ce d6 71 56 55 6d ba 1f 56 33 19 c5 39 d2 2e db 36 d5 76 9c 4f f5 ec 5b d5 bf 52 9d cd db e2 5b 55 37 6c c3 ae 97 9e 59 6d 9f 54 35 9a a6 59 6f f2 93 aa 73 79 8b 75 71 73 86 e7 57 b3 f4 ec f6 76 95 bf 26 f3 e1 b9 7b eb 5e fd fd ef c9 d2 9b c7 eb 69 f2 df ee f6 cb d7 ee c5 7f fc 07 51 7f 95 47 56 2e 4c e7 37 79 ae 35 bf fd fa ed 66 7e 35 9a 2d 93 c5 ea f6 0c 5a 3f ab ce af 96 f4 dd 69 b2 9a cf 6e ff a2 f3 bc e2 76 7c ee 56 e7 17 37 de 55 92 21 07 2d 69 2f 31 bd 7f fc e3 eb b7 6f 55 43 c7 4b b1 3f 7e 20 56 75 ae e2 73 bf fa 75 cb d6 39 cd 4b bf bd bd 1b ab 37 6c 92 53 84 14 4d f0 d3 b1 ab d9 b9 8b 77 63 67 c0 e2 d7 a4 dc 34 f9 db f2 4b fa 9f d9 cb f4 66 10 2e 93 9a 55 fd e9 47 df 78 ca 7f 30 c3 9f 1f b4 d0 d1 46 7e d1 1a Data Ascii: y$6*w^<qVUmV39.6vO[R[U7lYmT5YosyuqsWv&{^iQGV.L7y5f~5-Z?inv\|V7U!-i/1oUCK?~ Vusu9K7lSMwcg4Kf.UGx0F~
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: 06 d9 78 ce fc 16 7d 92 17 31 af ad f9 38 77 c4 85 71 4f 13 bd a7 a4 23 9c 8b cb b1 86 e9 23 6b 43 b1 95 e4 f1 72 f0 e6 8d 89 5e 90 5d 38 69 46 b1 17 71 94 72 4d ca 63 9d a0 55 70 6c 1d 91 cf 05 1e d9 82 47 f6 d7 2b e0 03 5e e1 72 2c 52 71 c5 ea 60 ed c8 ca 3c 89 b1 06 e2 b2 8f 33 25 fd d3 7c d8 5c 41 31 98 e4 6e 29 fd b7 49 ff 2a a6 15 7d 13 31 5a 72 41 1f 67 4e fb 50 ee 0a 3e 92 8e da c8 25 a6 d2 eb 86 6c 5e c9 86 9c 08 d9 7a b0 19 1d 3a ec f0 f9 4d e8 2c 70 56 14 0f 1d 9f 73 11 c5 56 0d 3a 84 8e 3b 4e cf 50 67 40 79 a9 2b 36 5d f4 72 b6 e9 3b cb 46 fc 15 fe c8 5e c6 4f 1e fb 4c e0 59 b4 3f 6c 72 43 7a 51 ba eb 91 4d 53 2c 70 22 c4 c7 dc 9f b0 7d 51 5e e9 93 9e 7a f0 49 cd 77 ba 4c a7 38 4e 32 f7 28 ff 91 1e 02 c4 0f 8a d9 45 0b 31 87 72 17 e2 7c 94 53 Data Ascii: x}18wqO##kCr^]8iFqrMcUplG+^r,Rq`<3%\|\A1n)I*}1ZrAgNP>%l^z:M,pVsV:;NPg@y+6]r;F^OLY?lrCzQMS,p"}Q^zIwL8N2(E1r\|S
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: f3 4b 84 bf 73 9d f1 43 57 6c 7e 8a 58 ce f5 99 f7 a1 41 58 a2 9d fd 42 78 84 70 cc 46 fa 06 1f a7 7d b3 9b c6 c6 74 42 35 5e d3 1d 47 e4 33 3f cc 9f 7e 9e ce c2 1f bb db bf 2b bf fa 68 86 f7 53 ed e9 51 72 c5 27 e3 6d 1f f9 fb c3 f4 69 e6 91 bf 6d b8 97 41 63 b7 67 d5 e0 5f 69 b5 b0 69 ed 6d 8f 10 ec a6 f1 cb 74 1a 6b 1f bf 24 98 73 d7 da b8 12 9a e1 72 6f 6a 79 b1 bf 0c 5e 7a 23 f7 c7 e7 d5 e0 de 2e 88 dd 79 fc e3 c3 a6 33 6a 7c 89 cd d8 fc 34 8b 8a 4f 2f cd fc 29 6f e4 38 92 4f 26 f6 76 ff 9c 76 00 a0 c4 98 c3 59 26 2e da 25 28 32 21 b7 24 08 28 66 04 17 45 2b 63 47 27 33 38 46 37 19 26 53 e8 83 0b 91 3b 65 d2 3e 81 6b 90 b9 60 2d 5c 44 c1 5d 0a bf bb f9 94 ea 01 9d c8 fc ba f4 df ae b1 fd fb db 7f df 8f 47 28 1d 29 65 c5 04 c3 19 c6 96 bf af b1 2b 8f Data Ascii: KsCWl~XAXBxpF}tB5^G3?~+hSQr'mimAcg_iimtk$srojy^z#.y3j\|4O/)o8O&vvY&.%(2!$(fE+cG'38F7&S;e>k`-\D]G()e+
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: 45 31 90 21 3e da cd d2 f2 94 76 61 81 12 00 6d 0d 3a db 42 b5 80 4d af f8 88 f5 28 f7 72 19 eb 9a 3e 43 68 b4 91 26 88 e1 b9 b4 ee b9 35 95 73 3b ff 51 e1 a0 09 ed 8f 36 28 e5 42 97 5b de bb d2 07 76 c1 ad d3 0e 5a b9 64 d3 bc 16 fc dc a9 96 b0 d3 45 b9 92 73 db 4a b5 34 69 ed 06 e7 8d f6 20 c9 c9 ad 22 1a 33 19 c3 1c ca bd a7 33 af f7 b1 fd e0 7c 6e 1f d7 19 e2 2d 5a 04 5d 29 c3 03 96 19 ed 6a 5c 5b 68 28 8b 48 3e e0 8b 8c db 09 e3 9e 6a 31 b6 b8 75 27 2d 63 94 ca 5d d2 13 f4 0d 1c e6 1a 6c bb 28 27 c9 57 b1 56 ae 8a 3c b1 5d b2 e5 2d 8e f3 b9 75 8c 92 b9 47 b1 18 7b a3 1d 37 29 7c d5 e2 f1 c6 52 fa 79 e0 03 f9 13 be 16 f4 34 39 2f 60 95 89 ba 5e 22 bb 0d a6 8a 77 95 5f 10 4b 9d be ac c7 9f 11 ab 03 b4 d7 5b db 31 be 66 f0 b9 d4 ee e6 14 6b d5 99 01 13 Data Ascii: E1!>vam:BM(r>Ch&5s;Q6(B[vZdEsJ4i "33\|n-Z])j\[h(H>j1u'-c]l('WV<]-uG{7)\|Ry49/`^"w_K[1fk
2024-04-26 16:48:54 UTC	1255	IN	Data Raw: d9 8c 39 80 f9 1c d4 81 dc c6 df 48 6b bf a5 29 6c 0d 3b a4 98 c1 79 6c c3 39 04 4f 62 10 27 b8 5d df ca f8 9a 30 e7 bd f1 5c a0 50 f3 4c be c2 0c 18 07 6c a4 5f 85 3a 90 f1 08 62 a9 2d be d2 e5 da 50 5d 01 64 12 17 5b fc ac c1 7b 54 71 4b e9 82 6c 41 db ef 75 b5 35 7f f2 f9 de 3f 72 9d 88 da 11 57 39 92 9b 29 1e 06 88 21 18 4b 55 4f 83 6a 1b e4 18 1e 23 2c 38 92 9e 88 af ae 48 b8 f7 17 a8 9e 4e 41 f1 0b 71 04 cf 14 1c 3c f3 41 4f 83 e6 f0 79 70 0e 35 55 4f 04 d8 ac 50 d8 2c e3 bc 27 3d 91 a2 c3 eb 11 cf f1 dc 08 fb 53 ae 2f b6 38 08 cf 1d b8 1f 48 79 15 79 bf 8d 1c 6b 4a 4f 07 d7 c6 7d 3c 83 11 6c 26 3d 0d d8 d2 46 30 0d d6 f7 b7 b8 c1 14 7f 62 6c 87 fe ae c1 79 b3 ad f6 e6 67 4d 91 ea 29 6c 79 4f 37 8c 55 b8 37 b1 d5 c7 9e de be b7 46 d3 f9 0a ba e0 38 Data Ascii: 9Hk)l;yl9Ob']0\PLl_:b-P]d[{TqKlAu5?rW9)!KUOj#,8HNAq<AOyp5UOP,'=S/8HyykJO}<l&=F0blygM)lyO7U7F8
2024-04-26 16:48:54 UTC	725	IN	Data Raw: 9b bb 88 8f 39 e7 10 ee 1b f7 50 d7 60 bd ed f3 3d 5a 5b e5 da e9 f7 f6 63 04 0f 8f 55 bf 91 f5 82 fe 51 4b 6a 18 d5 03 55 b8 60 c3 31 47 9e 8d 20 ae c0 f7 6d 8e d1 c1 c4 d8 f5 98 db 1e f2 2c c5 39 b7 50 df 34 3c be 53 ee a1 5e 95 3e 00 3f 41 dd c6 2e ae d9 91 e3 2d b2 15 c4 48 8b 6c 81 d7 72 9f b0 50 f5 1a ce 2e 17 5d f8 1c b3 51 fb 78 78 1e 8d f5 5c 47 77 b0 37 6c 95 9f 62 b6 91 bb b9 0f d8 e1 a7 6b bd ad 7e 72 89 8d 90 71 db df c6 73 21 b7 f8 de 3b 6c e9 87 f7 37 bb 9e 7e d1 a7 1c c8 f6 65 a9 b3 05 56 c8 55 4f 84 e2 9d 3c 5b e7 a7 64 c8 a1 d8 8f 6a 79 91 07 39 18 35 27 30 36 f7 44 85 6f ee 29 b5 f9 89 eb 56 6e f6 3b 8c 8d d4 be 01 72 2f 6a 50 60 d6 be b2 a9 1e 7c 40 9e cb 4b 2f 87 7b 5d d2 4f 01 7e 9a 48 4d c3 cf c0 5d f4 53 74 7e a6 23 f1 0f 4f 19 6d Data Ascii: 9P`=Z[cUQKjU`1G m,9P4<S^>?A.-HlrP.]Qxx\Gw7lbk~rqs!;l7~eVUO<[djy95'06Do)Vn;r/jP`\|@K/{]O~HM]St~#Om

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49740	162.247.243.29	443	6332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 16:49:21 UTC	802	OUT	POST /events/1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=54900&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 450 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aptracking1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aptracking1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 16:49:21 UTC	450	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 6c 63 70 2c 39 61 78 2c 63 3b 36 2c 27 73 69 7a 65 2c 31 31 38 34 30 30 2e 3b 35 2c 27 65 69 64 3b 35 2c 27 65 6c 65 6d 65 6e 74 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 36 31 37 33 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 3b 36 2c 27 72 65 73 6f 75 72 63 65 4c 6f 61 64 44 65 6c 61 79 2c 30 2e 3b 36 2c 27 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 30 2e 3b 36 2c 27 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 35 38 38 34 2e 35 3b 35 2c 27 65 6c 55 72 6c 2c 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 5c 3b 62 61 73 65 36 34 5c 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 6a 41 77 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 49 77 4d 43 49 67 64 6d 6c 6c 64 30 4a 76 65 44 Data Ascii: bel.6;e,'lcp,9ax,c;6,'size,118400.;5,'eid;5,'element;6,'timeToFirstByte,6173.3000000000175;6,'resourceLoadDelay,0.;6,'resourceLoadTime,0.;6,'elementRenderDelay,5884.5;5,'elUrl,'data:image/svg+xml\;base64\,PHN2ZyB3aWR0aD0iMjAwIiBoZWlnaHQ9IjIwMCIgdmlld0JveD
2024-04-26 16:49:21 UTC	317	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 16:49:21 GMT content-type: image/gif access-control-allow-origin: https://www.aptracking1.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760047-MIA
2024-04-26 16:49:21 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Target ID:	0
Start time:	18:48:16
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:48:21
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1888 --field-trial-handle=2032,i,1493493240830737483,1153212126501728940,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:48:23
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u43140843.ct.sendgrid.net/ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46	HTTP Parser: No favicon
Source: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46	HTTP Parser: No favicon
Source: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.FULPoWoOJjjMK7Iu3Hm9dKua1Ujg-2BXfmD3Dpv413Ur-2Bguspdn2MOgHExqb-2BHV1ab2eCm9V4giLEeU4sr24VchYln1wH-2FzU5qN3bG8tgo8dE3q40-2FkEp8mm3kFm9RbmkRDgzL3r7GOi2yLaUwTIbjvw-3D-3DLm78_EDJSrGUK2rdmRgVlbW4kzix0SMOC9Aad6NUmnIyhty5lBnt69TBV1Ypr17mqpfKnfw3BT6HZkBmUbw5SOTlYmHWrdXr3FajOPmkSx5zoRHmxVaRd1BAEnce9rwTUjg3B8RvbzsDNP12Ff75VbzqYaZV5Cch3PbDQFtk10jVQqNbcsmLi4jbymPatVX5nY7tI1TlNbICQcLWNoxnYTJgmNELYwsXEEyqH2dxuntngVlJ6Z5h4m8HTOdRvlzxMPPL1L36N7DfQ59FtksF3b25id7YUBVFqjGt3LH-2F4wQvWszO5P9romYsnx5xdYnZz4-2BvTlr4xH9rLXNCZvwZaFyCV5JCfrq0ShrCd8C37Bd0qlt8gUCAnKNy5LPus8JZi21TXrOrGNU6d5sxCqNYmCsEwhH6C9K5d2wszv7qw-2Fv-2FHjEM-3D HTTP/1.1Host: u43140843.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?mid=662111e2b41b5c000793ac46 HTTP/1.1Host: disarming-individualist-2448d018e760.herokuapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46 HTTP/1.1Host: www.aptracking1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/unsubscribe-ui.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aptracking1.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-7012-50c34dca8b7ca494c30f.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-8627-07fdd6b2e595c0888e76.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.aptracking1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aptracking1.com/u?action=render_unsubscribe&controller=redirector&mid=662111e2b41b5c000793ac46Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-CSRF-TOKEN=1h9shJy777CHhK2A75DCKsNmt0SWOlaGhRd1ApubX5ZOJIytvCRz5omD5qT7zYgpmehtYv_8RfBj2GHOR_ATWQ; _leadgenie_session=B8IMTGOG1Ta6c%2FswNvPH4hKmnRIkUfr8PNYQQKupgSmxALH3P4HIqhxuXPdniKbhvz006D9KBMTdCIUb2uAgQZd4YD8u%2Fzf9CxPsi9atLHT9Y2v67aMZyzagQKssLVfCABmEZM58kCYGEtID8AqQfPzMusmOyaruiHogFXrAUaccY2uXYNwdKCdyE9F%2B8aD8xIi5Iu4UyBK87B%2B5Dyf4TRi7YYwQaB7ycxVmvmyUIM7yQ8a4p8WmAIlRLrYqV0kkhbHpo7nhvAoyyu30wZo9zIsOUwBiIvNtnqk%3D--%2BBEeuWFajZHj73PE--BDN9LBeka9E%2FL04sqw2xNw%3D%3D; GCLB=COrOzJmyp7Kb7wEQAw
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.257.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aptracking1.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.aptracking1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-CSRF-TOKEN=1h9shJy777CHhK2A75DCKsNmt0SWOlaGhRd1ApubX5ZOJIytvCRz5omD5qT7zYgpmehtYv_8RfBj2GHOR_ATWQ; _leadgenie_session=B8IMTGOG1Ta6c%2FswNvPH4hKmnRIkUfr8PNYQQKupgSmxALH3P4HIqhxuXPdniKbhvz006D9KBMTdCIUb2uAgQZd4YD8u%2Fzf9CxPsi9atLHT9Y2v67aMZyzagQKssLVfCABmEZM58kCYGEtID8AqQfPzMusmOyaruiHogFXrAUaccY2uXYNwdKCdyE9F%2B8aD8xIi5Iu4UyBK87B%2B5Dyf4TRi7YYwQaB7ycxVmvmyUIM7yQ8a4p8WmAIlRLrYqV0kkhbHpo7nhvAoyyu30wZo9zIsOUwBiIvNtnqk%3D--%2BBEeuWFajZHj73PE--BDN9LBeka9E%2FL04sqw2xNw%3D%3D; GCLB=COrOzJmyp7Kb7wEQAw
Source: global traffic	HTTP traffic detected: GET /1/f318cdbaae?a=127348941&v=1.257.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=14163&ck=0&s=897981c547c13349&ref=https://www.aptracking1.com/u&af=err,xhr,stn,ins,spa&ap=10&be=6173&fe=5818&dc=4221&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714150104607,%22n%22:0,%22f%22:4537,%22dn%22:4584,%22dne%22:4769,%22c%22:4769,%22s%22:4770,%22ce%22:5685,%22rq%22:5685,%22rp%22:6173,%22rpe%22:7887,%22di%22:7934,%22ds%22:10394,%22de%22:10394,%22dc%22:11988,%22l%22:11989,%22le%22:11991%7D,%22navigation%22:%7B%7D%7D&fp=10410&fcp=12057 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-7977-78bb72fada7e81315467.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aptracking1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: u43140843.ct.sendgrid.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: disarming-individualist-2448d018e760.herokuapp.com
Source: global traffic	DNS traffic detected: DNS query: www.aptracking1.com
Source: global traffic	DNS traffic detected: DNS query: assets.apollo.io
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior