Edit tour

Windows Analysis Report
https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmu

Overview

General Information

Sample URL:	https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GK
Analysis ID:	1637550
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2300,i,6407035292632144826,202524602769657174,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=

Joe Sandbox AI: Score: 8 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The URL 'cpm-form.trustarc.com' does not match the legitimate domain 'box.com'., The domain 'trustarc.com' is associated with privacy compliance and not directly with Box., The presence of 'cpm-form' as a subdomain is unusual and could indicate a phishing attempt., The URL does not contain any direct reference to 'box.com', which is suspicious. DOM: 0.1.pages.csv

HTTP Parser: Number of links: 0

Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No favicon
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No favicon
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No favicon
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No favicon

Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="author".. found
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="author".. found
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="author".. found

Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="copyright".. found
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="copyright".. found
Source: https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: links.box.com
Source: global traffic	DNS traffic detected: DNS query: cpm-form.trustarc.com

Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1632_1321701765

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1632_1321701765

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@24/18@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2300,i,6407035292632144826,202524602769657174,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2300,i,6407035292632144826,202524602769657174,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
dv47blw0sft4u.cloudfront.net	13.32.27.28	true	false	unknown
cpm-form.trustarc.com	18.172.112.111	true	true	unknown
www.google.com	142.250.185.196	true	false	high
links.box.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=	true		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.172.112.111	cpm-form.trustarc.com	United States	3	MIT-GATEWAYSUS	true
13.32.27.28	dv47blw0sft4u.cloudfront.net	United States	7018	ATT-INTERNET4US	false
18.172.112.57	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637550
Start date and time:	2025-03-13 17:32:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@24/18@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.142, 108.177.15.84, 142.250.185.78, 142.250.185.110, 142.250.184.238, 2.16.100.168, 142.250.186.106, 142.250.186.74, 172.217.18.10, 142.250.74.202, 142.250.186.42, 172.217.18.106, 142.250.185.202, 216.58.206.74, 142.250.186.170, 142.250.185.170, 216.58.206.42, 172.217.16.202, 142.250.184.234, 142.250.186.138, 172.217.23.106, 142.250.184.202, 142.250.186.174, 142.250.74.206, 142.250.186.110, 172.217.18.14, 142.250.186.131, 142.250.184.195, 23.199.214.10, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 139236
Category:	downloaded
Size (bytes):	24589
Entropy (8bit):	7.989603712758719
Encrypted:	false
SSDEEP:	768:5pYbTt3ksidqtORUQ6qG9glu4h0z/Ewjce:/ITpkjqKUQ6qCv4hhbe
MD5:	1352B7ADB930955CE48CBA8A619EE7A6
SHA1:	91F0FAB0DAD8894CF4711ACCE1BCA5470DAE63F8
SHA-256:	FF88F69A4D8366EC5A81C4B03A8704F35849CA28C6238316C57C7B5FE14F1882
SHA-512:	5323F173D7ACD0CB1E6803D4E5DBD70E20BD0ED74E2F1DE091E262B6F9188EA23802799C6F9BE363E9FA40BFFBE0917B822C34BEB452583A93057D2D3CFC9129
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/xapi/v1/consent-form-renderer/2117db13-71aa-48b2-aba4-e5cb40479d7e?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&latestPreference=true&locale=en-US&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a=&cacheBust=1741883637916
Preview:	...........n.H.&.*.....>..M$O.m@.d.../]...)..%.\....`.b.`0..o2O..AJ6.#.........EFFDFFDFF.v6t.9...v.......k.>.D7...u...7.T...}9.....u....,..2J..._.\.3.n..w....v....6= .?..93..n..c..6n..wV.L..k.....,.,.:..5.R....u.\|w...@....[...e.....L.~=.&.5.....e.r...i......;#.qk..M\.g......._//W...J.p...^.._.....~Y...3.j.......,.y..,..9>}!.)<....i...^..j^..$\(..QR8.B.3t.....7.xE.M.BQ...7D..3.......t..7....K%.&UIP.....7.!....~.W-lE..o-M....,.....p.x....`.y..x3s!....Y.C9.......+.B....D...!lK...D.4...W..h.oz(^.9...G."u..>.../^...I.8].t..3<...HD.5.Z..P.:.>Cg..A.g......!A......R.......@7 ...R<!..$...5..L......../.4..'..Z.h....r...)!;......}.......!\..:8...BH ..DC..M.3....[S..0#.....B...\|.....uz.p.(.w.4.../..@..j.'.X+...w1Ch.r(.D.....$..<..H.E.l..B"......x..".E.q.t.lQ0. ...^..MC.^..F.#4..SDu...A.P".4.......P.1q....!G1....T&...#H.:'A.h.........d.HS.q......~.Ga...W.G..I..:1....]........^%.......<..........H.."s!(...3<}....../u..%...X..#..E#?.R.W.........zv.i9.x..4.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	283821
Entropy (8bit):	7.999145483445981
Encrypted:	true
SSDEEP:	6144:1F6oXtcIzOF0Y8lvkLy46o3sE2+h/c0iDpWQPOEX8am0G:9OKILy4fBTh00q/8jd
MD5:	7D9EBA65908624CD66E0CF7168BBDC1C
SHA1:	FB833DBAB0C1CF7AA2D00957F65EB23171F83279
SHA-256:	3AA93702CE159E01E0615B74BA061F1AED9498480DA97BDBD58934472FE481F8
SHA-512:	F56850F4BBB23A38D2FCDB239F5CE9061E9C5EA6B5C542600C1AEC111F5F4BCB0A89613C0DA154DF09912E128E62BFC47AAE073476B65A5895AF430A98AB8B69
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/browser/client.js
Preview:	e.H/BD5..@.2.}......<...d..=.:..qs..e. r(aM.Z...%..A.P.6..C./tRU./.......1.3...<.$O.o..n...'...PH.".1V!V.B..e.......Zs...\...3.4...l....W.eH9...{.T.......'....,..g#{.}..}..}...N.?G..9.#..o........s.6.$.:...i2.W........s}E1..5<Z.$.....~.{ .q.?Q.>G&..x&....,....gv.>...."dv:.>..Rn. ...lR...o...X...D.#..f..8Ij.8.....n[A2.....p2.0.......&..w....'..x.....I......q...?X..&.. ....d..k..8..X.G3^I..B...o..3).j...jI...4..V......L.fQCe.Z...."Q2..w.Ie.....8....l...8S\|..d.n.'....q.vm.P...&....b.)....-^d....-.....y..'3.q2.?.?...q..&B..h....)....Mn.\|.2{%L.8._.1A.2#^....'9..tH.1V..q....8.M..9...B.......[..Q{-...:.h..".....f...y..l....y.......YgO.6\..^..k....=bkb.....S.c....f.i...S?.2.P9.z_..5.,.9t........q.......z4....d..9...F,..q.T...-..r..?.@K...\.G.M!...{+.[......Y...,.....ng:J..s.D%.iaUxp..[Z.p.>..).....E`Pf1-v..q.<0H..(.9.E..*aFz....;?..2.......j..2J..^7..._..P.h.'9.E..S.d...Z?.E..f..Y.......m...\|.bj.QA..m0................T..V~+.........{..e.\|...#..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	762
Entropy (8bit):	7.780155128031758
Encrypted:	false
SSDEEP:	12:aPehx94QhMTfRgphWX5MCPSDk9CPGGQDyXRxyuuA8DxMYIf1ZQj49Pd:BhxWQhMTOsMns2HQ+hxXmxWzb
MD5:	A3C88176A390C926229C839A53F2F449
SHA1:	FA0E6AD8AD9C779C15B582DB6872C01395E92C20
SHA-256:	93AEEEC9A3434C43F0906BDB4FA58B086053B75C644C54AE9DBACAE4D86E2F40
SHA-512:	11F40D5A2B67909FDCA1911D612BF410770795E42B29862BC97DDA3F366E9D19C1ED4C463B3301D1208C9BD8EB399F59C4B57E40B7A1E2A9721CE9EF9D5A7A7C
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/form/index.d9140f00.css
Preview:	A. . .S..,.R.K.I.+.N..[.Ob...4..;....s.?m...BE.fH...,.....3...W..j.d&c9....Bi..et....US.p..>...0..`.i9ws}..&.m+..Y....U...0@.....3..\|.I.C..2.8c}.xA..HY..).7..._T.{.).)wr].....z..1.....vCW...&gY.......~N.._Knz._.._\|3.?...{.... ..>.o.$.~..]...3.........FF....skE\|<...u2.ig.........K...>.p.C..........K_.^R.tx..y,...S..../...q..`@..b..{%...9.\....}H..0......%U3e..0tP.....9.$AQu..!Z`(.......@.)....o..[Q;.6.2....:x.$K..8sC.^Kr...}q4..2R.c...1O.OU.X...@.3d..U.`m.R...X._.._Z...b/2.H."..Z.qE.......^..J\..n.k.Y...\|.J.n...{F...........G%.......g0b.D.[;s..b...-..R..../....w.&#...;..'...1...a.. .R..@B..)...%[...\&D<<R.M.Q... 8.(K.{...pm".n..uQ..Q....-....4...+.-.^.p.K...lbW.....M..aX#V....Sw1.L....~.}.......v.i.~Z.L......

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.979282431785544
Encrypted:	false
SSDEEP:	3:adQ8P1sK2lQgvgk3MPkKtKcMDYzxtKYTit1:adQ8Pamgv5MPDtH1K+ij
MD5:	0BE32126FBE220A8C31C4B85E72F8A18
SHA1:	5FA0C016B6C0D05BC90DBC09114CDD1613F766A8
SHA-256:	6E1839258170947EEFC7984C8E60575C0CCBF12B726E7215DD0C931F57EBA8D9
SHA-512:	F61AAA5FE0FCA9A05599BDCC4D0A55BABE951E7A64D0CED42A148F94A5DDFC08E7B8137A491B58E2320F5EEAF4888B58113BAB579A774A42582FD322150EEE54
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhJDCSgMtP3Q0F_kEgUNCvLNmBIFDf3zgxESBQ3hHv5EEgUNLmLAdxIFDbMq-yoSBQ3dhhY1EgUNSW9RmiHEyEf9cPX8xA==?alt=proto
Preview:	CkcKCw0K8s2YGgQICRgBCgsN/fODERoECCQYAQoHDeEe/kQaAAoHDS5iwHcaAAoHDbMq+yoaAAoHDd2GFjUaAAoHDUlvUZoaAA==

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.549288256181601
Encrypted:	false
SSDEEP:	3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPoLW0awcWWGu:q43tIkObRHXiMIWObtklI5LPCapfGu
MD5:	860114D028C455E0EBF64C21F5AF00A2
SHA1:	F48D590AB329AE5BF33FC1952AA09B4531355AEB
SHA-256:	7F2DC408197F10B0FA70C4331F26E486B4F464EDC6B1CB419AEC0DB8AD312D8E
SHA-512:	3706EFEB6A9218958CE8D915ABD17CE5DC621EB6538BCC5B76C34648A86883D2483A2B22817A4FCBF292692B053B1A9E2B240CCEBEC4A83BB83E693354A34DF8
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.23.3</center>..</body>..</html>..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2243
Entropy (8bit):	7.903317813380188
Encrypted:	false
SSDEEP:	48:FYRud5aonblISQoarUtIk6oW3Vh8f6EMsl0jutAXrK+N:FndPblISsUq79AiErOrK+N
MD5:	4C65C7D5692584C8C39150F82FCE28F3
SHA1:	F659F7CEF9B27246457E6D1E7068B5E279861E07
SHA-256:	411620B9C48537A3FAFB5DCEB9C674FF195BDB086E293D5A45B45524EB3C10A2
SHA-512:	FD0EFCA282E9061FCBAB6A78A385043709B4B69CC15716434D1050D8C18F4C5C1379CD66F70B9DA3306C1E3979F4549DCEEABA1988B596142F858A834DAF2D13
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/form/?brandId=1e36ee3e-35df-4cce-91c5-c66a682e7ae7&consentFormId=2117db13-71aa-48b2-aba4-e5cb40479d7e&8ab38b55-02e2-4d3d-8471-eb4d7b71e87a_e&latestPreference=true&token=
Preview:	Q.X..@..........8=.......iK.a.WF\|..._s.........P..6...:.t.....6).(@N......Qu.e.1f.].5...........2.6....).:....v.j.z......\|H...v.m....o.o.me..I..j%.%wX.X[... ......}..).....A...g6/;.;...<n.m........2...q..Y.l..+...l.......D1...#Q...o...?...(Z.7.X...C..........v..o.~.o..x.u?<........b~.uC;a.s....q.........:.....f.Jh.v...f` .....t`..~u...Y...vy..n..%.uTa.B....\....=i.y...o.Dkb...s.%...".5...Z-....S..>.....oy...(%....-...!.yxk3.L>PU........>..z.e..O.gU.<......5......K.b.@......{.-v..">.I.78.y.....d@....;..../:...3.Z]..+...."......[..U.a......m...)\|.S......7...+..yz.mfSK..i2.f.\...7...%.J..M....s..c....b.%1.PP^..].....V+...g.24..\|.....&C...h.....V.. e.....@........Z...HY\|q.E....8.....9E...[y_!k.![M..n@+..=?X............m..................m.a.n`..6.1go...6..U.8.Li.5...v..U."&l....^\|-.%B....J.C.J.v.@IF.$\7....q.X..d..^.....X.u.3......8......2.Q..}y.A.GE...}......aH.C.$. ..LHu.....8..I>.9...&j.i../..x...VQ!wf.szJ9.v.N.f..*.r....,...M.A2K.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 139236
Category:	dropped
Size (bytes):	24589
Entropy (8bit):	7.989603712758719
Encrypted:	false
SSDEEP:	768:5pYbTt3ksidqtORUQ6qG9glu4h0z/Ewjce:/ITpkjqKUQ6qCv4hhbe
MD5:	1352B7ADB930955CE48CBA8A619EE7A6
SHA1:	91F0FAB0DAD8894CF4711ACCE1BCA5470DAE63F8
SHA-256:	FF88F69A4D8366EC5A81C4B03A8704F35849CA28C6238316C57C7B5FE14F1882
SHA-512:	5323F173D7ACD0CB1E6803D4E5DBD70E20BD0ED74E2F1DE091E262B6F9188EA23802799C6F9BE363E9FA40BFFBE0917B822C34BEB452583A93057D2D3CFC9129
Malicious:	false
Reputation:	low
Preview:	...........n.H.&.*.....>..M$O.m@.d.../]...)..%.\....`.b.`0..o2O..AJ6.#.........EFFDFFDFF.v6t.9...v.......k.>.D7...u...7.T...}9.....u....,..2J..._.\.3.n..w....v....6= .?..93..n..c..6n..wV.L..k.....,.,.:..5.R....u.\|w...@....[...e.....L.~=.&.5.....e.r...i......;#.qk..M\.g......._//W...J.p...^.._.....~Y...3.j.......,.y..,..9>}!.)<....i...^..j^..$\(..QR8.B.3t.....7.xE.M.BQ...7D..3.......t..7....K%.&UIP.....7.!....~.W-lE..o-M....,.....p.x....`.y..x3s!....Y.C9.......+.B....D...!lK...D.4...W..h.oz(^.9...G."u..>.../^...I.8].t..3<...HD.5.Z..P.:.>Cg..A.g......!A......R.......@7 ...R<!..$...5..L......../.4..'..Z.h....r...)!;......}.......!\..:8...BH ..DC..M.3....[S..0#.....B...\|.....uz.p.(.w.4.../..@..j.'.X+...w1Ch.r(.D.....$..<..H.E.l..B"......x..".E.q.t.lQ0. ...^..MC.^..F.#4..SDu...A.P".4.......P.1q....!G1....T&...#H.:'A.h.........d.HS.q......~.Ga...W.G..I..:1....]........^%.......<..........H.."s!(...3<}....../u..%...X..#..E#?.R.W.........zv.i9.x..4.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	283286
Entropy (8bit):	7.99907853712014
Encrypted:	true
SSDEEP:	6144:wMwr35WBmu8dlYzGk6d/ewYh9R23MEOD6cb9JxlEJL1oaypAZbzBtYK6:wB0c9dlY98/ewYhv23M5D6M5sBoamwPw
MD5:	BF07FA02F43493FF60E31BA0F6135D67
SHA1:	479F55B5EBF1CB3DCE67805BC875AA69734F5C3A
SHA-256:	5443B98C2949B7E7B8C7AA93CD2A624108CA5FB3E26994641F885FC2DDED4B20
SHA-512:	D0438C882884520D55171B105043285D743E1617025346A5868B5CF548779B50A7790F65076D32520A5DA6597697706CEFB1C1A58F2533FB2C58DBC8DDE997D2
Malicious:	false
Reputation:	low
Preview:	e...AD5..@.2.}..j....p....d..z.:...y...q r)!....e.$..5U.E.nS.T+trU./....._.0.3............r....@.(...S..c.B......NEo[C........8.g6....f~).hd..z'.L..,....x.l?OO..36.[.w..W..&;...A.....X.......3+H......?.@.#..9....c.-H..z.bT.+x."H......&.A......}.L...L....Y..GK...{} ...y..t}n....AP..IM3..i..b.G..$W..#.$...4...V.m..4..%...\|.H.?..GD.$....;.$...R..$...N...P.`1H........~........b....J. ...8.2..J.P....TG'a.r1.wP{gj6............#H.P.$..}Hud...V.=..Y:5.h..7...IB.._..@^..q....../2..Hk..............8.g.......8k...(<.4zzB.4l..B...OC.I.G.k.&.Af.2..{$...Z...cu....-=.C..T){.x.&d._a........41j.=..X+...aN.i.K....&....g..X.Qn..u.Xk.UK.U..(..f.![.k.@'L...j.K..43LKH..z).q..y....6....!..O~c.w..>...?P...&W-....s..X\|..D.(..Z .;U....-...r..)7....,l.b.....;.OY.QI....(}...{..L..U....oiI..{.pS^.,.g.....(v..q..7H.. .Y."s$.J.............}..V...U...x...Pt..t..4.\.E...E.PN@....j...,...E.k.....B.D15....6.uhn.m...f~~.G......1..V0....T..v8.....!F.O..&.R..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2276
Entropy (8bit):	7.911105494299324
Encrypted:	false
SSDEEP:	48:k0X6EsD+6GV0E6WiGcVIrWNqA+lds94MZwW6lwX0vVgNtxH:7I26WiG8Nq1L3KF6lS0vVQTH
MD5:	F46505050439FF8176CC76DEEDC11082
SHA1:	8C47CCCD22B80A8674C1AF1C9EA3E06ABC86F3A2
SHA-256:	6791BFB5B48CF897C5607F9865AE188FD34CE11FD162CB40B9980461EAEAD1A9
SHA-512:	2BBBD0D8F871A2F27B5F927860C6D716844F8E399580AD004A3FE656378B1A9A1680D983E3AE9864CA65EEB434837FA38D6A7F57D0FE51A43BE9E8C2350F58DE
Malicious:	false
Reputation:	low
URL:	https://cpm-form.trustarc.com/form/index.5b8bae7d.js
Preview:	Q.X..@.[j.~^x6&.z.Iz...."l.....#....7W..l..........{.zKG......"..V%a....U...V/Q)............>KT..C..b......].L^~~.\_........8.W..8v.E:..(....#...K)...1.ij.....s....lU}...!.0!E..03[..v......=^iHR........q....[`h...H........}0..........`...x...h..X...d.................4?.y...T..3.0??...-...%.=..=..Sw..:?.A....".H..W'.....$8..T'.v.[..{o$S..{q..'.,C.i+.)u......ZY...y..:D.'.a.....i....H...G$.Uvd...z.._...R..SS..0.n.dF....=..72KWe.UTG..^7.Nu...........1F......+.X.&i.D'..+uZ...X.3..$.99..$U...B....X..]..Q.....;d.T]A...h....3....0.>x$J.../....T......#..c...DA..vV.%.A....D....U...0r......U.....D..m..+X.R...9...t./{cY....}..........pe.nh..}O.k_..$R....4...c.....83n. ...x.Fx6.\|.].>.x....).z......jB...:=.d.K.y.B=.'.,....P...en9..u.$g.0.B.1.,...<MJx..`Gl.y.......Z.ge..y...p..Vk.N'...0`.......Q%9..?#Mg...4U.t.....T....7...b._n..G./...~....mK...DC8...?.,...9.a..........o.#..........d.qH...:A....qg.0.1(.....R...]f.oN..jKZb..(.,..$.."3.*aB~=M...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (886)
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	5.193034115093603
Encrypted:	false
SSDEEP:	24:ztKBG64EBDOBHslgT1d1uawBATFGuoBN2t2t2t2t2t2t2tomffffffo:B/yOKlgJXwBAZGuSNYYYYYYYomfffffA
MD5:	803EEF0AF6752FDD2942E3BBF3FC78E1
SHA1:	E84BA5595C8488E3E7C71DCC19C7539BAE2BBA09
SHA-256:	351A12EC7D675233453541E2861423664E07871B4BA378247ACA6C320E7EF7AC
SHA-512:	BDFED55E0F5EA502559286AE0339141C0C80C6257BE1CCB1C8ABB65C925F324B138A0D81407EFBB2D67CF9F1FC289DBC4052E841A608D0E3A881C7E15F2BB738
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["is monster hunter wilds worth it","evan engram denver broncos","sleep token emergence lyrics","apple iphone 17 pro max","new orleans st patrick day parade","pi day pizza deals","julian alvarez penalty vs real madrid","spacex launch astronauts"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-323610753334691692","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 17:33:32.090589046 CET	49672	443	192.168.2.6	204.79.197.203
Mar 13, 2025 17:33:36.736917019 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:36.903081894 CET	49672	443	192.168.2.6	204.79.197.203
Mar 13, 2025 17:33:37.043703079 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:37.653040886 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:38.856224060 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:41.278044939 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:45.850366116 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:45.850405931 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:45.850562096 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:45.850939989 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:45.850954056 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:46.173612118 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:46.653074026 CET	49672	443	192.168.2.6	204.79.197.203
Mar 13, 2025 17:33:47.485785007 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.485816002 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:47.486114979 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.486150980 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.486174107 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:47.486222982 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.486838102 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.486850023 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:47.487215996 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:47.487230062 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:47.658804893 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:47.659172058 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:47.659184933 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:47.660283089 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:47.660340071 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:47.675331116 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:47.675527096 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:47.717761040 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:47.717782021 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:47.765383005 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:50.974077940 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:50.974155903 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.061173916 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.064194918 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.064212084 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.064570904 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.064577103 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.065215111 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.065221071 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.071801901 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.071871996 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.161962986 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:51.162786961 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.163184881 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.163209915 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.204319000 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:51.624272108 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.624763012 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.624778986 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.716655016 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.764930964 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.798832893 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.844434023 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.850181103 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.851989985 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:51.852209091 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:51.853046894 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:51.870949030 CET	49696	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:33:51.870981932 CET	443	49696	142.250.185.196	192.168.2.6
Mar 13, 2025 17:33:51.911679029 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:51.932106972 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:33:51.979062080 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:33:52.220505953 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:52.220539093 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:52.220633030 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:52.221237898 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:52.221251011 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:52.267498016 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:33:52.272152901 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:33:52.272244930 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:33:52.272384882 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:33:52.277059078 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:33:52.900998116 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:33:52.909432888 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:33:52.914134026 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:33:53.090481043 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:33:53.144668102 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:33:55.737483025 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:55.737552881 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:55.779359102 CET	49678	443	192.168.2.6	20.42.65.91
Mar 13, 2025 17:33:55.789905071 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:55.789983988 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:55.792102098 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:55.792108059 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:55.792272091 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:55.792277098 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:55.792467117 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:55.792473078 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.349878073 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.352339983 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:56.352358103 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.506064892 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.547370911 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:56.561047077 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.561129093 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:56.635752916 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:56.635754108 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:56.635787010 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:56.635797977 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.195282936 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.195354939 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.240474939 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.241121054 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.241231918 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.288424015 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.330410957 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.334228039 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.334234953 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.942483902 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.942580938 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.945472002 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.945563078 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.952686071 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.952877998 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.952888966 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.959156036 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.959240913 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.959245920 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.965610981 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.965703964 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.985651970 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.985670090 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.985780954 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.985790014 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.985872030 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.988887072 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.988965988 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.995563030 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.995620966 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:57.995686054 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:57.995708942 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.003448009 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.003637075 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.039032936 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.039165020 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.042354107 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.042488098 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.049099922 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.049170971 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.049386024 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.049396038 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.055854082 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.055999041 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.056008101 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.062666893 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.062715054 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.062751055 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.069433928 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.069547892 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.076217890 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.076328039 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.083211899 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.083390951 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.105314016 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.105426073 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.106892109 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.107178926 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.107290030 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.119019985 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.119133949 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.119158983 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.119421005 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.123050928 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.123107910 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.129636049 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.129709005 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.135691881 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.135881901 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.139620066 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.139734983 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.143713951 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.143821001 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.147643089 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.147963047 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.151670933 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.151845932 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.155626059 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.156112909 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.159559965 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.159950018 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.160098076 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.163129091 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.163197041 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.166973114 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.167066097 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.170643091 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.170818090 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.170923948 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.174460888 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.174565077 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.182488918 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.182648897 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.183250904 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.183407068 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.193088055 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.193231106 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.194529057 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.194639921 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.194869995 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.197774887 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.197834969 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.197901011 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.209686995 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.209837914 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.209849119 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.210406065 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.210537910 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.213613033 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.213713884 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.213721991 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.213989019 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.216762066 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.216840029 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.216873884 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.223690987 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.223800898 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.223809958 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.239787102 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.239944935 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.239979982 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.251553059 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.251877069 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.251885891 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.263468027 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.263670921 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.263679028 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.269203901 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.269279957 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.269288063 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.269980907 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.270170927 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.270179033 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.277561903 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.277616024 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.277623892 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.278620958 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.278724909 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.281372070 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.281549931 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.283124924 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.283243895 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.283305883 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.287679911 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.287745953 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.287830114 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.288130045 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.288779020 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.288873911 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.294857025 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.294996023 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.295149088 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.295156956 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.295608044 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.295659065 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.295741081 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.300707102 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.300864935 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.300873995 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.308013916 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.308079958 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.308088064 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.308793068 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.308886051 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.308893919 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.311986923 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.312149048 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.312165976 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.314193964 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.314294100 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.314305067 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.314743042 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.314857960 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.314867020 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.319866896 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.319972992 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.319983959 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.320565939 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.320605993 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.320621967 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.333858013 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.333934069 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.333956957 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.333977938 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.334003925 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.334475994 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.335561991 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.335570097 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.342026949 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.342387915 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.342402935 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.342689991 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.342801094 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.342808962 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.344290018 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.344403028 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.344412088 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.345778942 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.346014023 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.346040010 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.355165958 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.355262041 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.355282068 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.355570078 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.356729031 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.359647989 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.359750032 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.359769106 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.360390902 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.360574961 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.360583067 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.361892939 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.361987114 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.361993074 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.368335962 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.368483067 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.368491888 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.369010925 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.369076014 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.369091988 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.372761011 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.372880936 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.372888088 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.374099016 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.374181032 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.374190092 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.378267050 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.378385067 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.378395081 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.378465891 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.378973961 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.379483938 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.381654024 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.383999109 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.384126902 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.384202003 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.384212971 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.384293079 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.399355888 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.399435997 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.399502993 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.399521112 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.399533987 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.399552107 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.400028944 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.400113106 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.401113033 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.401226044 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.402374029 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.402420044 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.402446985 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.403876066 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.404031038 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.404038906 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.406518936 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.406640053 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.406649113 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.407250881 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.407408953 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.408746958 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.408889055 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.408895016 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.416762114 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.416779041 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.416855097 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.416870117 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.416982889 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.417871952 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.418054104 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.418215990 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.419544935 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.419647932 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.419656992 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.419833899 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.437666893 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.437680006 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.437856913 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.570946932 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.570967913 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:58.571449995 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:58.571456909 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.354496002 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.405704975 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.724622965 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.776932001 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.777230024 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.777251959 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.777333021 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.777770042 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.777858019 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.777905941 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.778893948 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.778966904 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.779776096 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.779891014 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.779982090 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.780808926 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.780884981 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.781840086 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.781898022 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.782849073 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.782942057 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.783864975 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.783927917 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.789887905 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:33:59.789894104 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:33:59.815922976 CET	49707	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:33:59.815987110 CET	443	49707	18.172.112.57	192.168.2.6
Mar 13, 2025 17:33:59.816169977 CET	49707	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:33:59.816493988 CET	49707	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:33:59.816510916 CET	443	49707	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:00.740704060 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:34:00.763394117 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:00.763442993 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:00.763551950 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:00.764081955 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:00.764095068 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:00.792900085 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:34:05.041492939 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.041644096 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.041656017 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.041707039 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042098999 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042104006 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.042259932 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042263985 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.042325020 CET	49707	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042479038 CET	443	49707	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.042534113 CET	49707	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042640924 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042644978 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.042716026 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.042720079 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.636636972 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.637146950 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.637160063 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.785540104 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.826706886 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.892532110 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.892574072 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.895009995 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.895030975 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.899236917 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.899350882 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.899363995 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.905946970 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.906430960 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.913244963 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.913398981 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.919745922 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.919759035 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.919827938 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.919846058 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.919939995 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.926258087 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.967333078 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.983207941 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.983212948 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.983501911 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.983531952 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.983724117 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:05.989867926 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:05.989960909 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.096029997 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.137707949 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.158339024 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.158446074 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.160012960 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.160111904 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.160120964 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.164781094 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.164858103 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.164864063 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.200836897 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.200921059 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.200941086 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.247070074 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.248986006 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.252553940 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.252618074 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.252657890 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.252743006 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.252788067 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.257431984 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.257512093 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.257607937 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.262228966 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.262240887 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.262310028 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.262319088 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.267148018 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.267220020 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.271915913 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.271971941 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.271979094 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.325176954 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.325201035 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.330108881 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.330213070 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.330229044 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.330329895 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.339503050 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.343102932 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.343157053 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.343170881 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.343220949 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.346657991 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.346723080 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.346729994 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.351655006 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.351747036 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.356508017 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.356548071 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.356626034 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.356637955 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.356722116 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.361114025 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.366019964 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.366058111 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.366091013 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.366096973 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.366125107 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.371243954 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.371330976 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.371339083 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.375164986 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.375297070 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.375308037 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.379906893 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.379975080 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.379987001 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.384819984 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.384921074 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.384932041 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.384988070 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.408099890 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.408113003 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.408251047 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.408266068 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.433116913 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.433268070 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.433279991 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.433398008 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.435424089 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.435477972 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.435523987 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.435537100 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.440633059 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.440673113 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.440705061 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.451682091 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.451735973 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.451746941 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.453959942 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.454108953 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.454119921 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.456444025 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.456532001 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.456545115 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.460041046 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.460125923 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.460175991 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.465353012 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.465418100 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.465429068 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.465477943 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.467154980 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.467195988 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.467242956 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.467252016 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.479754925 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.479809999 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.479938030 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.481056929 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.481062889 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.481123924 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.481136084 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.481180906 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.484621048 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.488284111 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.488291025 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.488343000 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.488356113 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.488421917 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.490422964 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.490530968 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.490541935 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.496722937 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.496815920 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.496829987 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.508714914 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.508836985 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.508846998 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.517510891 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.517565966 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.517571926 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.518800974 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.518850088 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.518855095 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.521856070 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.521869898 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.522021055 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.522030115 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.522089958 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.525213957 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.525278091 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.525284052 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.527899981 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.528039932 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.528045893 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.531016111 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.531171083 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.531177044 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.534821987 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.534871101 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.534898996 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.534903049 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.534945011 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.541548014 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.541625977 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.541634083 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.542783022 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.542927980 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.542934895 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.553499937 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.553586960 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.553594112 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.553637981 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.560245991 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.560343027 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.560389996 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.560396910 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.561477900 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.561566114 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.561573982 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.575424910 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.575439930 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.575493097 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.575504065 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.575555086 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.578007936 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.578016043 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.578099966 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.578107119 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.580519915 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.580585957 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.580590010 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.582820892 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.582885027 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.582890987 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.582942009 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.585253954 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.585342884 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.585392952 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.585400105 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.587657928 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.587709904 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.587734938 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.590955019 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.591347933 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.591404915 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.591409922 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.591475010 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.593318939 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.593368053 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.593410015 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.595580101 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.597829103 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.597866058 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.597902060 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.597913027 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.597946882 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.597987890 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.600254059 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.600327015 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.600332975 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.608102083 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.608191967 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.609201908 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.609289885 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.609359980 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.609365940 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.609437943 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.611710072 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.613491058 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.613549948 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.613557100 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.613631010 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.616878986 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.616993904 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.617028952 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.617567062 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.617610931 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.617619038 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.623795986 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.623907089 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.623919010 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.638202906 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.638385057 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.638392925 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.639096975 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.639153957 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.639178038 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.640521049 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.640584946 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.640620947 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.640666008 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.640738010 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.642236948 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.642374992 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.642379999 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.643729925 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.643795967 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.643800974 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.653006077 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.653137922 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.653163910 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.653233051 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.653732061 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.653856993 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.653898001 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.655334949 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.655450106 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.655456066 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.661624908 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.661688089 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.661750078 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.662457943 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.662688971 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.662693977 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.665760040 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.665824890 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.665829897 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.671860933 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.671902895 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.671937943 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.672589064 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.672647953 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.672658920 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.674212933 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.674218893 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.674274921 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.674288988 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.674365997 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.676865101 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.676974058 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.676980019 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.677474022 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.677575111 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.677580118 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.678982019 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.679112911 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.679116011 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.679121017 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.679162025 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.680424929 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.680512905 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.680517912 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.681879044 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.681984901 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.681992054 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.683438063 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.683582067 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.683588982 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.688189983 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.688196898 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.688293934 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.688301086 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.688410044 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.688813925 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.688893080 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.688898087 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.690329075 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.690411091 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.690412045 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.697451115 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.697546959 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.697552919 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.697633028 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.699140072 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.699184895 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.699347973 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.699903965 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.699915886 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.700021982 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.700026035 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.700119019 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.701334000 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.701435089 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.701440096 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.708125114 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.708209038 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:06.708214045 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:06.762684107 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:36.856596947 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:34:36.856625080 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:34:36.934766054 CET	49699	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:34:36.934802055 CET	443	49699	13.32.27.28	192.168.2.6
Mar 13, 2025 17:34:45.747850895 CET	49702	443	192.168.2.6	18.172.112.111
Mar 13, 2025 17:34:45.747869968 CET	443	49702	18.172.112.111	192.168.2.6
Mar 13, 2025 17:34:45.906052113 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:45.906119108 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:45.906187057 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:45.906636000 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:45.906649113 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:47.725795984 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:47.726350069 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:47.726363897 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:47.726721048 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:47.727091074 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:47.727159023 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:47.779228926 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:50.658476114 CET	443	49681	2.23.227.215	192.168.2.6
Mar 13, 2025 17:34:50.658562899 CET	443	49681	2.23.227.215	192.168.2.6
Mar 13, 2025 17:34:50.658616066 CET	49681	443	192.168.2.6	2.23.227.215
Mar 13, 2025 17:34:50.658651114 CET	49681	443	192.168.2.6	2.23.227.215
Mar 13, 2025 17:34:51.718456984 CET	49708	443	192.168.2.6	18.172.112.57
Mar 13, 2025 17:34:51.718480110 CET	443	49708	18.172.112.57	192.168.2.6
Mar 13, 2025 17:34:52.454400063 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:34:52.454550028 CET	443	49698	13.32.27.28	192.168.2.6
Mar 13, 2025 17:34:52.454612017 CET	49698	443	192.168.2.6	13.32.27.28
Mar 13, 2025 17:34:53.734472990 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:34:53.740350008 CET	80	49703	142.250.185.67	192.168.2.6
Mar 13, 2025 17:34:53.740458965 CET	49703	80	192.168.2.6	142.250.185.67
Mar 13, 2025 17:34:57.318943977 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:57.319005013 CET	443	49713	142.250.185.196	192.168.2.6
Mar 13, 2025 17:34:57.319139957 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:58.452723026 CET	49713	443	192.168.2.6	142.250.185.196
Mar 13, 2025 17:34:58.452758074 CET	443	49713	142.250.185.196	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 17:33:41.752852917 CET	53	63631	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:41.821583033 CET	53	59483	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:45.208012104 CET	53	50346	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:45.473272085 CET	53	59591	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:45.842058897 CET	65061	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:45.842370033 CET	51910	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:45.849200964 CET	53	51910	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:45.849569082 CET	53	65061	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:47.464143038 CET	54508	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:47.464483023 CET	49165	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:47.471555948 CET	53	54508	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:47.513972044 CET	53	49165	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:52.192878962 CET	55855	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:52.194607019 CET	58296	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:52.208961010 CET	53	58296	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:52.219849110 CET	53	55855	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:59.789060116 CET	62219	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:59.789316893 CET	53182	53	192.168.2.6	1.1.1.1
Mar 13, 2025 17:33:59.809186935 CET	53	53182	1.1.1.1	192.168.2.6
Mar 13, 2025 17:33:59.815308094 CET	53	62219	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:01.236987114 CET	53	51826	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:02.522528887 CET	53	62478	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:21.350667000 CET	53	49355	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:34.224379063 CET	138	138	192.168.2.6	192.168.2.255
Mar 13, 2025 17:34:41.419074059 CET	53	53600	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:43.928389072 CET	53	60845	1.1.1.1	192.168.2.6
Mar 13, 2025 17:34:46.271207094 CET	53	53503	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 17:33:47.514041901 CET	192.168.2.6	1.1.1.1	c24f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 17:33:45.842058897 CET	192.168.2.6	1.1.1.1	0x49a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:45.842370033 CET	192.168.2.6	1.1.1.1	0xd524	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 17:33:47.464143038 CET	192.168.2.6	1.1.1.1	0x12d5	Standard query (0)	links.box.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.464483023 CET	192.168.2.6	1.1.1.1	0x4a0b	Standard query (0)	links.box.com	65	IN (0x0001)	false
Mar 13, 2025 17:33:52.192878962 CET	192.168.2.6	1.1.1.1	0xa74	Standard query (0)	cpm-form.trustarc.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:52.194607019 CET	192.168.2.6	1.1.1.1	0x570d	Standard query (0)	cpm-form.trustarc.com	65	IN (0x0001)	false
Mar 13, 2025 17:33:59.789060116 CET	192.168.2.6	1.1.1.1	0x5237	Standard query (0)	cpm-form.trustarc.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:59.789316893 CET	192.168.2.6	1.1.1.1	0x7f15	Standard query (0)	cpm-form.trustarc.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 17:33:45.849200964 CET	1.1.1.1	192.168.2.6	0xd524	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 13, 2025 17:33:45.849569082 CET	1.1.1.1	192.168.2.6	0x49a0	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.471555948 CET	1.1.1.1	192.168.2.6	0x12d5	No error (0)	links.box.com	dv47blw0sft4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:33:47.471555948 CET	1.1.1.1	192.168.2.6	0x12d5	No error (0)	dv47blw0sft4u.cloudfront.net		13.32.27.28	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.471555948 CET	1.1.1.1	192.168.2.6	0x12d5	No error (0)	dv47blw0sft4u.cloudfront.net		13.32.27.75	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.471555948 CET	1.1.1.1	192.168.2.6	0x12d5	No error (0)	dv47blw0sft4u.cloudfront.net		13.32.27.49	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.471555948 CET	1.1.1.1	192.168.2.6	0x12d5	No error (0)	dv47blw0sft4u.cloudfront.net		13.32.27.87	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:47.513972044 CET	1.1.1.1	192.168.2.6	0x4a0b	No error (0)	links.box.com	dv47blw0sft4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:33:52.219849110 CET	1.1.1.1	192.168.2.6	0xa74	No error (0)	cpm-form.trustarc.com		18.172.112.111	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:52.219849110 CET	1.1.1.1	192.168.2.6	0xa74	No error (0)	cpm-form.trustarc.com		18.172.112.10	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:52.219849110 CET	1.1.1.1	192.168.2.6	0xa74	No error (0)	cpm-form.trustarc.com		18.172.112.57	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:52.219849110 CET	1.1.1.1	192.168.2.6	0xa74	No error (0)	cpm-form.trustarc.com		18.172.112.101	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:59.815308094 CET	1.1.1.1	192.168.2.6	0x5237	No error (0)	cpm-form.trustarc.com		18.172.112.57	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:59.815308094 CET	1.1.1.1	192.168.2.6	0x5237	No error (0)	cpm-form.trustarc.com		18.172.112.111	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:59.815308094 CET	1.1.1.1	192.168.2.6	0x5237	No error (0)	cpm-form.trustarc.com		18.172.112.101	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:33:59.815308094 CET	1.1.1.1	192.168.2.6	0x5237	No error (0)	cpm-form.trustarc.com		18.172.112.10	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49703	142.250.185.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 17:33:52.272384882 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 17:33:52.900998116 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:02:23 GMT Expires: Thu, 13 Mar 2025 16:52:23 GMT Age: 1889 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 13, 2025 17:33:52.909432888 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 17:33:53.090481043 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:02:26 GMT Expires: Thu, 13 Mar 2025 16:52:26 GMT Age: 1887 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49696	142.250.185.196	443	5760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:33:51 UTC	487	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CO6MywE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:33:51 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 16:33:51 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pPRTNGntjU6s3EMjWA3gWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-13 16:33:51 UTC	75	IN	Data Raw: 33 37 62 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 69 73 20 6d 6f 6e 73 74 65 72 20 68 75 6e 74 65 72 20 77 69 6c 64 73 20 77 6f 72 74 68 20 69 74 22 2c 22 65 76 61 6e 20 65 6e 67 72 61 6d 20 64 65 6e 76 65 72 20 62 72 6f 6e 63 Data Ascii: 37b)]}'["",["is monster hunter wilds worth it","evan engram denver bronc
2025-03-13 16:33:51 UTC	823	IN	Data Raw: 6f 73 22 2c 22 73 6c 65 65 70 20 74 6f 6b 65 6e 20 65 6d 65 72 67 65 6e 63 65 20 6c 79 72 69 63 73 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 37 20 70 72 6f 20 6d 61 78 22 2c 22 6e 65 77 20 6f 72 6c 65 61 6e 73 20 73 74 20 70 61 74 72 69 63 6b 20 64 61 79 20 70 61 72 61 64 65 22 2c 22 70 69 20 64 61 79 20 70 69 7a 7a 61 20 64 65 61 6c 73 22 2c 22 6a 75 6c 69 61 6e 20 61 6c 76 61 72 65 7a 20 70 65 6e 61 6c 74 79 20 76 73 20 72 65 61 6c 20 6d 61 64 72 69 64 22 2c 22 73 70 61 63 65 78 20 6c 61 75 6e 63 68 20 61 73 74 72 6f 6e 61 75 74 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a Data Ascii: os","sleep token emergence lyrics","apple iphone 17 pro max","new orleans st patrick day parade","pi day pizza deals","julian alvarez penalty vs real madrid","spacex launch astronauts"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":
2025-03-13 16:33:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	2
Start time:	12:33:35
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	12:33:40
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2300,i,6407035292632144826,202524602769657174,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	12:33:46
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.box.com/s/c/juoqw4SedvwuOequ6M4ld_duh2_JtePeTMtNIPk_FgQMgpaCdemTi58H8yI3ylYW648uCy0Ouys_Ps17pQNqPKDeB52ufQpDOBZ-9GGsj9HqM5J2kr2I73zOXO5z9mDpHLPJmKhnwfFu6_faYBDQNisOl4mkuniuVn6ugfbs9oa1GKZbrVYNgPDcFovPaodhEPwgo66csoNifM6GdpVmondhpntyIL76pCrP4yTQ7Tp3aQ_vl_c2flkHy4XCw9Y8Xbo6SYJPBQ1etZojmut6Xue9HfF3eJ-m2dv0v0_HQ6G_ry8JdqaYTGLfAOdEAYLUliNDPPQDuEw65euSRj_uoHjgm3irwgwLlMZhz2KcAQ3zYzW2S4fjrfji7Yvpleqsn7s7IjNgGnuZrBN5zgFhAEcYQLdyeVNzPn7qTabZCIAewjRavAeq7F3hLgMtaS2jvrUU4FkAf2wpf-4sJBci4qMlV7CkUE0xnMW-jbxMox3NnDyDN035/asLmBR9yGyS8WO_rVlf3CjUDBUS31On6/7"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1632, Parent PID: 3784

General

Chronological Activities

Analysis Process: chrome.exePID: 5760, Parent PID: 1632

General

Chronological Activities