Edit tour

Windows Analysis Report
https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd

Overview

General Information

Sample URL:	https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd
Analysis ID:	1416058
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2020,i,3268176836136726466,13000087644650507593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd	HTTP Parser: No favicon
Source: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd	HTTP Parser: No favicon
Source: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.5:49723 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /u?mid=6601ae2964c7bd00071c13cd HTTP/1.1Host: agattu.plix.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/unsubscribe-ui.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://agattu.plix.aisec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-7012-2a61c6ae5d188b6c9911.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-8627-07fdd6b2e595c0888e76.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: agattu.plix.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-CSRF-TOKEN=fcZtoND_CpTzUM1DY40SoF3I-HkfnqFAofsXMIwZ7vW9V3UvxaSKDEyYChry6sXRa7GJBcaPFVad_phs9nAQ2A; _leadgenie_session=TRUFgtWpIU75SU%2FoCHHs89PS81pXQcweoa%2F3Cc2FYMjybTkCZ67q9pba9vrnmBYSdv%2F%2FSvFnK1YUXVudHCNkMQ9WPD3BJF3ZExUlJ1d569gcZM1fOAG2HATlGJigbdL2xavLd9QodvZCj6na6232cve9UfNzqD7QLHS8uqHa241ezy1Q2%2BOBTFE3D%2BKvzfp2Zo8h2R2vOWY5cRymM%2Fu8a7vFplYR2lq%2FzL3lTBMLFrTmhPOnoIaw7QfZsfM3WmPSspEtLkrml5wFauEOjKEMCcKoIvG071wmb80%3D--%2Bw4stxH18yyMcNAR--BDp4AkvtU3DFBJZC5HwbEA%3D%3D; GCLB=CJ2F0dvQtYH3rAEQAw
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.253.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://agattu.plix.aisec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: agattu.plix.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-CSRF-TOKEN=fcZtoND_CpTzUM1DY40SoF3I-HkfnqFAofsXMIwZ7vW9V3UvxaSKDEyYChry6sXRa7GJBcaPFVad_phs9nAQ2A; _leadgenie_session=TRUFgtWpIU75SU%2FoCHHs89PS81pXQcweoa%2F3Cc2FYMjybTkCZ67q9pba9vrnmBYSdv%2F%2FSvFnK1YUXVudHCNkMQ9WPD3BJF3ZExUlJ1d569gcZM1fOAG2HATlGJigbdL2xavLd9QodvZCj6na6232cve9UfNzqD7QLHS8uqHa241ezy1Q2%2BOBTFE3D%2BKvzfp2Zo8h2R2vOWY5cRymM%2Fu8a7vFplYR2lq%2FzL3lTBMLFrTmhPOnoIaw7QfZsfM3WmPSspEtLkrml5wFauEOjKEMCcKoIvG071wmb80%3D--%2Bw4stxH18yyMcNAR--BDp4AkvtU3DFBJZC5HwbEA%3D%3D; GCLB=CJ2F0dvQtYH3rAEQAw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bundle-app-production-7977-3598acce02a7abed456a.js HTTP/1.1Host: assets.apollo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: agattu.plix.ai

Source: unknown

HTTP traffic detected: POST /1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://agattu.plix.aiSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://agattu.plix.ai/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_77.2.dr

String found in binary or memory: https://assets.apollo.io/js/unsubscribe-ui.js

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.5:49723 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/24@14/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2020,i,3268176836136726466,13000087644650507593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2020,i,3268176836136726466,13000087644650507593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-7012-2a61c6ae5d188b6c9911.js	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/unsubscribe-ui.js	0%	Avira URL Cloud	safe
https://agattu.plix.ai/favicon.ico	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js	0%	Avira URL Cloud	safe
https://assets.apollo.io/js/bundle-app-production-7977-3598acce02a7abed456a.js	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=45288&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=15276&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
aplolinks.com	34.28.233.175	true	false	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
assets.apollo.io	34.102.205.190	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	high
www.google.com	172.253.122.104	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
agattu.plix.ai	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js	false	Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-7977-3598acce02a7abed456a.js	false	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/nr-spa-1.253.0.min.js	false		high
https://assets.apollo.io/js/unsubscribe-ui.js	false	Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-7012-2a61c6ae5d188b6c9911.js	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268	false	Avira URL Cloud: safe	unknown
https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=15276&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0	false	Avira URL Cloud: safe	unknown
https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd	false		unknown
https://agattu.plix.ai/favicon.ico	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=45288&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.102.205.190	assets.apollo.io	United States	15169	GOOGLEUS	false
172.253.122.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
34.28.233.175	aplolinks.com	United States	2686	ATGS-MMD-ASUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1416058
Start date and time:	2024-03-26 19:48:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/24@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.111.94, 172.253.115.102, 172.253.115.113, 172.253.115.139, 172.253.115.138, 172.253.115.100, 172.253.115.101, 142.251.163.84, 34.104.35.123, 40.68.123.157, 72.21.81.240, 192.229.211.108, 20.3.187.198, 20.166.126.56, 172.253.115.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 26 17:49:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979282142045832
Encrypted:	false
SSDEEP:	48:8Wd5ThVhHbidAKZdA19ehwiZUklqehsJy+3:8kLnBJy
MD5:	493117541781853B7EB70F1BF6C7D4D6
SHA1:	C4A88E88591C1B9681B5EF44B24889A33F3BB984
SHA-256:	C29D4F9C7ECC578FFBD81D5EAE680152038A367662869631A85ADEB84D37DDE0
SHA-512:	0DD31E2123AF1AAC0BE9E2B252C81A55B2D8C3782C99E5927DB3859329DADEDBBD6D418442A70FBB757E4E3DB4325FBC4A3495C19FB80CC565F087026E8029E9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....mF7M....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VzX(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 26 17:49:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9989045505194714
Encrypted:	false
SSDEEP:	48:8hd5ThVhHbidAKZdA1weh/iZUkAQkqehxJy+2:89LN9Q+Jy
MD5:	00A80C1FA7368677B5A199C205B700A1
SHA1:	472AFCDB00ABE5D4AF1EC7FC4378FE53FB4C5E33
SHA-256:	EF9FAB4F150EF7A9586D8880C577FB2A5A82AAA1CDA7187D48CC244CBC096DD2
SHA-512:	E98BDC355425FD0FAF2DB30495A9DD05A56BFCA4B506C137C42E3B9D2C5E910133A622558691EC18E775E008764473CD64509FE9F182BFF83137FD171B38B1A6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......+M....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VzX(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007454901853989
Encrypted:	false
SSDEEP:	48:8xed5ThVsHbidAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8xcL2ndJy
MD5:	30F15A9D7774CDA833B4E134315C1982
SHA1:	D5ABAA779A0A52B24F898A21A84E95755DF13769
SHA-256:	55D81A97BA1909DD6244792BC8BC93746E21F581B9A8A106416F94C8A836B052
SHA-512:	819856DB4938DFC734C303E800A5D233EDF0C5281991BFCAED900EA5D9CF38B3CDC89D7F4FD569436CB8DC2C4E46693B8931A262D27F86C6B794958D276CDB87
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 26 17:49:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9952180210981654
Encrypted:	false
SSDEEP:	48:8Wed5ThVhHbidAKZdA1vehDiZUkwqeh1Jy+R:8vLujJy
MD5:	6E2A3D77CF8EB160648D030A509A2C93
SHA1:	6B83F6F97C11162F1F46EAD8F1A146803D517327
SHA-256:	6E75260ACBE2651FEFADA3AAAA6AC157AFA746177E45578CC165DCB803D3759B
SHA-512:	8A97C42A925C4BD398D83D648FDC29AC92774480AF7E6689EC9B0B1CFAD1283F5D219384AB6EA2FF0765AD822A2704E3F87FACD2CD6A51B2CBEC780605A4941A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......&M....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VzX(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 26 17:49:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9834495803796144
Encrypted:	false
SSDEEP:	48:8Fd5ThVhHbidAKZdA1hehBiZUk1W1qehnJy+C:8hLe9HJy
MD5:	55FC0FE059C13ACE00425FFED5F27690
SHA1:	3473608946D5FDFB8023A4FFAADAE712E6E3DF92
SHA-256:	E201DA03CD84E2850521716BC4E4854F7BDCF22E6F7774085442F8F59590D92F
SHA-512:	EE5F7727BED7EDB7825108D88C3AF83B4F9D53E366E04EA1622193A1A7D2BADD0646DD7AB2AC80A37D442D4DCEA1BB4E344A04359971CB07FDE3CE31C6B0BD7B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......1M....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VzX(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 26 17:49:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.997902372531809
Encrypted:	false
SSDEEP:	48:8Jd5ThVhHbidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:8VLAT/TbxWOvTbdJy7T
MD5:	21048BAAEF49F6A31BC8B72D8E86D064
SHA1:	860B239AACD8B3FF0914EF043E42555179618192
SHA-256:	29D037950D056684FF4C13B581C9FA5DA4B931492C3BD02BF3849797B6A77041
SHA-512:	C1CA6F37B053F11FEAFE1C5354B12A5554750106E3913A2881813564FD8BBE304CE294DC79ECEC89ABFC996CD2FA08BE3C3D54AD47A2693CC2655B6B71F8FCA2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......M....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IzX&.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VzX&.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VzX&.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VzX&............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VzX(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............7.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpsqol5o1w", last modified: Tue Mar 26 18:28:22 2024, max compression, original size modulo 2^32 346968
Category:	downloaded
Size (bytes):	104167
Entropy (8bit):	7.996798745667448
Encrypted:	true
SSDEEP:	3072:FtnO4+2uCgIuwWeE8HOc5g+1SE9q0q3W54DlTi9B:FtO4nkw9E855B1hI0N/B
MD5:	2A8EA1E66DCFD6CDD8C18731011453D0
SHA1:	417B17DE4042977B9FB745C0D8AC3B68EE4BF4EC
SHA-256:	34F6C306E5ECB06D1D1741DF105F0F63EA512A498766084351D9853F7FE59240
SHA-512:	18AD8421728EA5D1AC204CC899B7B68E8F79EA236B05190156F77CB6DD75FD4EED0BD5542E51D578D749F4C045E1BB06EA477D83B8CCFFD9167E568E40CDB61E
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/unsubscribe-ui.js
Preview:	.......f..tmpsqol5o1w....6.0x=..J.."+)..RRfi...g\|j..{.W.nJ.R..H.I.....G...}...]....6"...I)e.....)..."..@........7VPc....lw....a...Y-..g.)#..LO.t..VS.}xn.........;.........~...g.......X... ....G..a=.......E.(`.&..F1MD./j....@..].^.[c_.4...uN.C.z.~...Yq...?..Z...+......A.._(.nQ.7.$..k.v..bS.1.\..B...-\6..r.YS....R7...s..q...l.p<.S.Y..p}A..[.......Y.s-..su...K.A.......[.\|.2m;7.....ZA...T.g...-......V-..9a-`.7N.l .%......Cp.Y1/...j....jSg..y...&PqJK..=.S.....-..~4....`.E..n.5#...6...\.c..F.^.......s..j .Z........[Q......3g^.)..h`w.j...KM$.Tx..Z....2...W.}.K_;.r3k8...k..g.X../_.I\.h.v.XZ.^...D.>.X....d.Gfs.}...(....W.7...1..p...JH......v..Y.X@o.k.7.........WA`.7..~!....Us....U.=.#..\`r..>F....&.&.-93M...>..............2..a..o.)X.m......9..c.Z5.y......sobM..-.~/T.5....5EK..X...Z.72}=.u.f...]k.c.g.EM....Z.O......i{U......t^#P#-1x..as."....@X.v....DWS5.GQ8....n[...}....{.vk;.....s.&.g.?.0Z......sI.[..F....-.v'......pWF..ejK.Q

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpaaird6q4", last modified: Tue Mar 26 17:15:58 2024, max compression, original size modulo 2^32 23756
Category:	downloaded
Size (bytes):	9794
Entropy (8bit):	7.961410961380865
Encrypted:	false
SSDEEP:	192:5IdL0DT3lzLJb2A7eU+/5fQs/gMdu9q9d2TxJ+7d0WOEqNLj:5m+lzlbP+/5f+skxJ+xNqV
MD5:	AB78801EF93E1068BC46A40D79D065B5
SHA1:	41CFE6AAB7E3C20BF26EF8774D79DF8A9BBD60D0
SHA-256:	CAB1BAED20D9BD5088D80C79199EE632BB32EE36F5A1E981E4A5E733678B7D27
SHA-512:	004AEDC2EF8AADFE9558322FFBF9257C8822518E5F0DDE7F2BA5738A73CABEFD29BA8A7B4202DCEF2924C74A2E0A5A6138A1302245F0C0E5C29F48A39D5F9E6B
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-7977-3598acce02a7abed456a.js
Preview:	.......f..tmpaaird6q4..\|ks.F....+4...).............M.l.r8&@..@R..G.@O...Y.@....:4..+.P.Y.8.U..e2.]n..K.Mn...4..4.e........../_..._.m....j_[M.e...._s.o.....29Y..Y.:.v..g....pq2.q.ZZSk..5......ks..f..k%..........R..]fq.O...q../..t:..7..:..v..^,...0.....h...}...d...^\,..y.XgW'.?.N.s/.D.k'.I:ON.n..~>....p=[.k'..l....v....!.-k'K...2Yd....v.......d.Ea.....ml~r;...'...8;.\|...C.<.OO./.\|&..b4........)..W.,[.&........"{....]..[......[..Z..Qt@3Ak...Q.f.fi..y@.A.z2....iM...Z.iCc.0.hM..z...KR.D...%.#D..9...("F.0:..e.GI....,..GQ.>$..z<4..C...a..C...4..8K..U..(i&.C".9..F.8$...I?.D.s...8$..q...C".94.X...,g....Q..>..^....U6.m...I....[.......&2.Z...[......1:.)..VE.-M.h....4...".2..x.d..q.2..(j..).".+U..7....-.F#K;BeY.a..GG.JZ.Q.....5....j.N/.q......9...4.1.h........G!.D.4.....V...s@c..~.h,...gG.}.....5.F..F..,elF.J...Y..B\|:FfY..".1.-..l&.c.x ..12.m..S....bD..9...X\.%........X.F+.+......\|L`..=lT$c...M."..T....vU.5.r....wnJ.vd..w.WvD..(:.Y.+..Q%

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	101365
Entropy (8bit):	5.293330286038558
Encrypted:	false
SSDEEP:	1536:uf5j69dg5MPV0aEA/w1uc6UesqY+NBcU23zw4IOZ78Jxw:uB245MN0K/w8WeKzZ8Jxw
MD5:	4A6ECB6DA3C4E819773B0E3331FF5E7A
SHA1:	32CA19165F56AD45DF3A60882D985DA4DD34E38B
SHA-256:	E72E22C9FD71D91300781105175767A7275AA469946F7F72CDDA5ADAA5C548E1
SHA-512:	F6AF66176E588B15333A5D21E80FA4620DF430ABF59E4D9AD05C74F64C827E03B1B7C92C8CE5BFF70DAD25CCD707BE5FA47B72F37506860D7A41962A1F9C4650
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.253.0.min.js
Preview:	/! For license information please see nr-spa-1.253.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.253.0.PROD"]=self["webpackChunk:NRBA-1.253.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>r});const n=new Promise((e=>{s=e})),r=Object.freeze({onReplayReady:s,sessionReplayInitialized:n})},1199:(e,t,i)=>{i.d(t,{R:()=>r,z:()=>n});var s=[];function n(e){if(0===s.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<s.length;t++){var i=s[t];if("*"===i.hostname)return!1;if(a(i.hostname,e.hostname)&&o(i.pathname,e.pathname))return!1}return!0}function r(e){if(s=[],e&&e.length)for(var t=0;t<e.length;t++){let i=e[t];if(!i)continue;0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));const n=i.indexOf("/");let r,a;n>0?(r=i.substring(0,n),a=i.substring(n)):(r=i,a="");let[o]=r.split(":");s.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.in

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpnajcdet_", last modified: Tue Mar 26 17:15:59 2024, max compression, original size modulo 2^32 162110
Category:	downloaded
Size (bytes):	35650
Entropy (8bit):	7.989665934079285
Encrypted:	false
SSDEEP:	768:XRastr+m8p7Te8gwfwGiL90I7TI5/WL9HOi4Xnc+GJNVIqLSQa48:X4s8m8p7y4K0I7M5uxui4Xncj3Sxl
MD5:	3A40B8653FB7762F5A744D3B32B369C8
SHA1:	5386662DE6DA5BC4F197AE7129A3390BF93211AC
SHA-256:	486212CE8C993A867FCF5DCBD32B402DFFE78FAE37FE58E8A37BD2F180DFA867
SHA-512:	031C64D8273F1B4831AD525C620EBF130546E0B7850933EB4092687AF8E7157049F983BAEB9376C5AA89FD38B7E1E2E8197C8CADC4237F35AB0C524FDCBC6F9D
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-7012-2a61c6ae5d188b6c9911.js
Preview:	.......f..tmpnajcdet_...{.F.(.W...&.$.."}.sd.3c..d....$A..I0.............L....Tuuw.RKWw.(.'..M.G....jv5...e<K.z.O?.x......?..i.........3...g..o....-..`.>.{.....u.hM...wm...<.{...q'.Xh...w....;.L..)....;.Y\|.z...Q\|.e....?.k........lqt\|.<:>.dg.<.;Cz8?>...i/.v..=Jg..(......Z.:M&w'./.y:...d../Os.0....d7.........j19j......!.b.-...IG./.;..%..:....r......A:I...u....8N.....s.TE.......I\|{.2.+.]_r%..V.&.....?Of..7.T...a\|,-.L&'..j..g...RY.0.DY...............T}...S..^e.dt.igK(.j.....Ir9.&.x.i.z..c...z...i'.............b.e........"Y.x...\| ..D-..e..v....I+Z-....\D...".c..M...U...J...r..e...e..N..4..Hx...'....f....2.bWL.lYj..#........%.P.O..4J&M.V..<^d.....-.t..].E...Y..SI8...n?.4V.'.$..$n"..A"G..fr...6j..*..y..L...2m. l.`.mTI......Oo.h.......b./..ywAS.!.A}....q\|..I'...tk.G.....Qf.M.M.f-a....R..3...$..r.....1.j.Ew0.`:E.I.....#.EM3.t...D^9.Q.t.m\|.u.MD....W.t.76YXG9..W]...>j.OWKTrM...3.....p5h..f.4./.x..Jc.......'q..U.m.2f\M..DS9.Q..0.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.673701612429055
Encrypted:	false
SSDEEP:	6:H0cUayCV/I1EiPsMpcAK+jU+kX1RVU692fLqrrOjfmGkjc2iO:H0ctyCVkFgVXXVU3OOjfqjc2
MD5:	1F5103571DCB6984D79EFD6E129D5C48
SHA1:	ADE1688FDA202178126ECB7A56E851D482C50FB4
SHA-256:	0AFB297FCAF9AC134966020C8CF37AD63121529F28A509A57B3C4EE502F14E13
SHA-512:	AB103067DE4E6F9735F22AD58C52D9CEA47BC111E60568B23964D321BD26942D1EF701E1DA68C1C4A7F917BDF1342F0C51D4EC6029143CA04371AB0D20234D3E
Malicious:	false
Reputation:	low
URL:	https://agattu.plix.ai/favicon.ico
Preview:	..............h.......(....... ................................bw........... ..'0.<...@....N`..[p. h.......!(.6....HX.>...4...8...<...2...6... h... (.4....Th..ax."n....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.673701612429055
Encrypted:	false
SSDEEP:	6:H0cUayCV/I1EiPsMpcAK+jU+kX1RVU692fLqrrOjfmGkjc2iO:H0ctyCVkFgVXXVU3OOjfqjc2
MD5:	1F5103571DCB6984D79EFD6E129D5C48
SHA1:	ADE1688FDA202178126ECB7A56E851D482C50FB4
SHA-256:	0AFB297FCAF9AC134966020C8CF37AD63121529F28A509A57B3C4EE502F14E13
SHA-512:	AB103067DE4E6F9735F22AD58C52D9CEA47BC111E60568B23964D321BD26942D1EF701E1DA68C1C4A7F917BDF1342F0C51D4EC6029143CA04371AB0D20234D3E
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ................................bw........... ..'0.<...@....N`..[p. h.......!(.6....HX.>...4...8...<...2...6... h... (.4....Th..ax."n....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpctdvkv64", last modified: Tue Mar 26 17:15:56 2024, max compression, original size modulo 2^32 108698
Category:	downloaded
Size (bytes):	33086
Entropy (8bit):	7.993369548669679
Encrypted:	true
SSDEEP:	768:X1U5VXN94XuUdZOtr6JFNvKIY+s2Kxvn6V+jEH3G4jsC4gY:uVo1Ar6JFJKIYbFn4oEH3vIC4gY
MD5:	B43EF54CDF350E857C35F6D713E6EE77
SHA1:	A8D0B7F706443A0AA222D4C11098C260E94ED57E
SHA-256:	0B068FA5E1748C58D87204E75F11212AA4D649A0FE0B122B020043316F443B9E
SHA-512:	4A4DECCFBCB60FC42882B6C36699E43048416DD030BBFAD23A78D15D952B2DD322E1223412D5F2B5B710E0A2E9E8F2E06B8EA8891FA84B9229108BF09EBD2C66
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js
Preview:	.......f..tmpctdvkv64...v.F.0..<.....H..%;``.,..w\|Q\|..0.7D.E.$@.".!.....%...w]P...{z..f...@..k.k....}......4.?.?..a.......i/.dj..O:..![}wrtt...,t..++Kx#I.`.Z.I... ....U..,...o.v...k..UZ..N...-......f..&l..~sm.5.8....s..aM...k.<..Vo.p.....5........d......k.qV7~.H!-..y\|...9...(m6...O.l......ZT.Q..z.....d[.e....../...?.C.qz...m1.N>...+:lwX.......}. LR?..h.H.....U..U........W......0....t....>L..(J..u{.^...<.f.t.?9\|.m....@;,.G.l.d.3...H.{o....2..6..N..$./...VeU..K..r....... .O..WY...^^...`...[...l...g..?I....E.0@fv-.........K...1.G7.T....P)O.........KK\.#.z.E.X...$.ln....@..2]/.OR..X,...;... .G..8.n....D3..\|.....V.]m6....Of[tEM.\|u.Z./dFfj...Z.}.u....;.........U..b......./........kn...X.q6.F.,.1. .z.......h...... ...gE...G......M...[.@.`u..........W3>v.:l.c..q.+.&..0>.@...`.%.b...k...P..`...{..q....<.......H...+?......X....>..G..`Yj....+.....4...t\|.$5=.S_.,..=.7..}...8..htQ.C.^...u`........q..DAh[..Hi..\|.&..i..?l..7....d.2....v.M.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59941)
Category:	downloaded
Size (bytes):	61195
Entropy (8bit):	5.378195859289267
Encrypted:	false
SSDEEP:	1536:ewQ8Boo72J2F/Uu2yocyK2HaKPQWFCr+NidlF9iKDd4yV:ewZoo72kF/8yocylHaKIKNOL9iKDd4yV
MD5:	8421451604A57BA6D09BF7B34820DE5D
SHA1:	2FB6925996ADCADE535A13CAD2CEB4D97E4C22C9
SHA-256:	48BAF21DD1363CE7DE2A4CD7861C23844157BA8EBEA6C38631EA75755A9D6299
SHA-512:	CED99C233CC288815B680DC17B6D974418096D1AFADDB4E70A8531E86E1E76648FA3F4D097DD25C5683DD4393079FE8794E8E7C3EB423D8F06CAAE5C0FF923AD
Malicious:	false
Reputation:	low
URL:	https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd
Preview:	<html>.<head>.<script>window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"f318cdbaae","applicationID":"127348941","transactionName":"dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c=","queueTime":0,"applicationTime":11,"agent":""}</script>.<script>(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["bam.nr-data.net"]},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"127348975",accountID:"1009232",trustKey:"1009232",xpid:"VQYHWFRQChABVlZRAwkOUlU=",licenseKey:"f318cdbaae",applicationID:"127348941"};;/! For license information please see nr-loader-spa-1.253.0.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>m,Mt:()=>b,C5:()=>s,DL:()=>x,OP:()=>N,lF:()=>C,Yu:()=>w,Dg:()=>v,CX:()=>c,GE:()=>E,sU:()=>O});var n=r(8632),o=r(9567);const i={beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp43awyien", last modified: Tue Mar 26 17:15:54 2024, max compression, original size modulo 2^32 10118
Category:	downloaded
Size (bytes):	4951
Entropy (8bit):	7.90427138216077
Encrypted:	false
SSDEEP:	96:fYvfQKHxumhWl7ACUNKqVZpI34n5oKtvxq2+hSv4UPZX0UcTCbcPzuRhH0F9Gcvw:gvfQK7a7ACyKEjnvtw2+ElZX3qPQ4Tvw
MD5:	6C0CDA0D4D63BE50BCD2C41FB04E75C9
SHA1:	E4DB7223D193F1315D27DA2D202139860461A888
SHA-256:	583760407F6F0D97CF6E0667C2B08757D5BC3775AB2ABD9279898C6C5C058371
SHA-512:	41AA1C342FC273941A9BEF779DB94BFFA39DD7395DF3D076FDC4E2FED38111419036D1DBC72C5135D95308E0AF9B2141AE8566260728BD7AB9C7632927B6EA82
Malicious:	false
Reputation:	low
URL:	https://assets.apollo.io/js/bundle-app-production-8627-07fdd6b2e595c0888e76.js
Preview:	.......f..tmp43awyien..Zms.H..~...VmA=.+.Hl.)....G.....R[X..../.........g..[u.v+....t.9}zHy..J..<.....E4......a.vnW.t..Gq4M..._}....j.~.......;..W.n....p.......U..6.x..(...&..^.........T..5...U....w.}.j.\|..}.\|W5.Vy4\....a...x.....\|....w............:f......'..Io...k.q...d22?=D...o.>og.i'......z.k>\.....vy}..?....N..~..0j....0?....=.[.6.....x..\|9...,....0../W.........}.g.....NFw..k.,..).=/.....r....U?....c....q{.W....s....V. V.p.7..p\|{..q.=6N.\|:.......R.y..g.r.t.9.wc.w......^..{...].ub.c.N_.....p.3.#./.7...,..k..7.......s<.....a..nx.Y.~.T.>......e...Xx....}x........hW..wl.b.~...i.a}.'....J.;>..>.....yo.9*s.E.Y.%.5.7....s.-?...M.........`....Av............8...q....'.........q...3_do.....6......v<}.q.~p. .l%...1s+.{...=..O...{..w\.........8C.m.........w.+..&m..?...}K.}>w.g..X.W.n...E.{]ev...&r.vta.......m.m#V..(.u..8Sc.6c..w.u...R.=f.1..U..E~..a...y..)..b..........K.r..xy.{\|..\|}K.a>n.!&.a.,W.s.S.V....l...^.......7.y{...6\..Y..._..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2024 19:49:11.216306925 CET	49674	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:11.216317892 CET	49675	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:11.310044050 CET	49673	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:16.533884048 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.533921003 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.533988953 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.534442902 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.534507036 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.534564972 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.534687996 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.534701109 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.534894943 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.534909964 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.820182085 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.820553064 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.820583105 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.823740005 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.823823929 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.824948072 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.825109959 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.825145006 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.868241072 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.876768112 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.876775980 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.922188044 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.971334934 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.971637011 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.971647024 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.972726107 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:16.972794056 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.973228931 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:16.973288059 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.019598007 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.019608974 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.065514088 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.118171930 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.118282080 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.118377924 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.118406057 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.118453979 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.244507074 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.244529009 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.244555950 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.244604111 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.244760990 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.244770050 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.244812965 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.244824886 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245023966 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245066881 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.245075941 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245114088 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.245644093 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245651960 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245682955 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245696068 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245709896 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.245717049 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.245739937 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.298228979 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.298243046 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.346208096 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370421886 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370434046 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370502949 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370656967 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370688915 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370702982 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370712042 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370718956 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370733023 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370764971 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370773077 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370850086 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370894909 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.370902061 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.370948076 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.371030092 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.371037006 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.371090889 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.371104956 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.371165991 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.371222019 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.371511936 CET	49711	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:17.371526957 CET	443	49711	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:17.495676994 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.495712996 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.495760918 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.495990038 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.496004105 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.708676100 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.713911057 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.713922977 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.715189934 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.715269089 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.732867956 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.732997894 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.733050108 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.776237011 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.780337095 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.780355930 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.827622890 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.913875103 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.913927078 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.913953066 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.913992882 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.913995028 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.914005041 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.914047003 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.914057016 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.914105892 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.920691967 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.927862883 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.927889109 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.927938938 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.927947998 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.927988052 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.934976101 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.942085028 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.942181110 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:17.942193031 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:17.983828068 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.016330004 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.020258904 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.020279884 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.020342112 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.020349026 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.020394087 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.028266907 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.036261082 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.036288023 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.036324024 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.036330938 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.036370039 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.044260979 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.048258066 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.048280954 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.048326969 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.048352957 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.048393965 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.053550959 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.060026884 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.060064077 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.060086012 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.060094118 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.060168982 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.066786051 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.073467016 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.073498964 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.073550940 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.073568106 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.073612928 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.080156088 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.086986065 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.087017059 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.087177992 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.087186098 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.087223053 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.093622923 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.100387096 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.100447893 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.100563049 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.100572109 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.100609064 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.114295006 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.117269039 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.117312908 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.117316961 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.117325068 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.117362976 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.122895002 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.128320932 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.128365040 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.128369093 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.128377914 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.128417015 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.133328915 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.138334990 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.138379097 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.138386965 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.138392925 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.138560057 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.143076897 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.147876024 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.147910118 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.147921085 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.147931099 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.147964954 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.152542114 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.157254934 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.157299042 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.157306910 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.159735918 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.159780025 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.159786940 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.164460897 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.164516926 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.164524078 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.169277906 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.169321060 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.169328928 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.173882008 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.173929930 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.173938990 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.178663969 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.178730965 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.178754091 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.183408976 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.183470964 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.183478117 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.188158989 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.188230991 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.188242912 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.192971945 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.193018913 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.193026066 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.197458982 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.197508097 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.197515011 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.201843977 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.201891899 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.201898098 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.206127882 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.206177950 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.206185102 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.210439920 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.210489988 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.210495949 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.210586071 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.210628033 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.211129904 CET	49714	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.211143017 CET	443	49714	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.514215946 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.514236927 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.514293909 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.529541969 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.529589891 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.529648066 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.533664942 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.533694983 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.533786058 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.534326077 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.534342051 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.534801960 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.534821033 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.535183907 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.535198927 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.770150900 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.771399975 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.774625063 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.786412954 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.786431074 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.786861897 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.786884069 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.787338018 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.787353039 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.787518024 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.787578106 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.788028002 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.788083076 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.788518906 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.788590908 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.789247036 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.789315939 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.790507078 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.790595055 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.791627884 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.791712999 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.792082071 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.792088032 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.792411089 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.792418957 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.792542934 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.792551994 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.831864119 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.845916986 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.845927000 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.971467018 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971504927 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971532106 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971549034 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.971564054 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971591949 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971620083 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.971626997 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.971771002 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.972677946 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.972718954 CET	443	49717	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.972796917 CET	49717	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.975701094 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975743055 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975774050 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975784063 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.975800991 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975836992 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975847006 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.975855112 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.975899935 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.975907087 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.982574940 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.982625008 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.982631922 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.985455990 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.985503912 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.985532045 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.985552073 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.985569000 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.985610008 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.985615969 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.989455938 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.989516973 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.989525080 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.992367029 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.992394924 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.992418051 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.992425919 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.992460012 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.996565104 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.996617079 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:18.996628046 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:18.999830008 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.007373095 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.007399082 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.007431984 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.007456064 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.007503033 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.015047073 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.038837910 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.038863897 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.069375992 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.075314999 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.075392008 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.075422049 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.078701973 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.078753948 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.078763008 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.085695982 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.085736036 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.085764885 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.089580059 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.092354059 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.092392921 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.092410088 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.092427969 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.092467070 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.092729092 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.092861891 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.092880964 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.099143982 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.099719048 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.099775076 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.099785089 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.106050014 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.106079102 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.106092930 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.106103897 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.106137991 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.106647968 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.106693983 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.106702089 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.113219976 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.113590002 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.113641977 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.113652945 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120069981 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120124102 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.120135069 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120349884 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120378017 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120403051 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.120417118 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.120462894 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.126693010 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.126744032 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.127031088 CET	49716	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.127048016 CET	443	49716	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.127441883 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.134169102 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.134224892 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.134382963 CET	49715	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:19.134402037 CET	443	49715	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:19.312800884 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.312830925 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.312886000 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.313292027 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.313299894 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.526829958 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.568944931 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.604762077 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.604773998 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.606158972 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.606287956 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.608246088 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:19.608800888 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.608875036 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.656236887 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:19.657718897 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.657732964 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:19.706799984 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:19.708873034 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.708923101 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.709920883 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.710357904 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.710371971 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.736704111 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:19.736767054 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:19.736823082 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:19.736846924 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:19.736969948 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:19.776629925 CET	49710	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:19.776654005 CET	443	49710	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:19.908862114 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.922797918 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.922831059 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.924004078 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.924133062 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.926034927 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.926034927 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.926049948 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.926137924 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:19.927371979 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:19.927412033 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:19.927609921 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:19.930237055 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:19.930252075 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:19.970922947 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:19.970946074 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.030795097 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.093463898 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.105751991 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.105762005 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.105822086 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.105829000 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.105835915 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.106306076 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.106338024 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.106389046 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.106420040 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.124588013 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.124597073 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.124617100 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.124644041 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.124682903 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.124701023 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.124732971 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.130484104 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.130873919 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.151060104 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.151072979 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.151374102 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.174789906 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.197382927 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.197392941 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.197432041 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.197443008 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.197523117 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.197524071 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.197541952 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.197657108 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.197662115 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.211990118 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.212023020 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.212150097 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.212481022 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.212502003 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.212794065 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.212805033 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.212825060 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.212901115 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.212909937 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.212909937 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.212927103 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.213613033 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.225038052 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.225054026 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.225131989 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.225153923 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.225178957 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.225254059 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.234925032 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.234944105 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.235076904 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.235089064 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.235131025 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.281843901 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.281928062 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.281940937 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.282044888 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.294786930 CET	49719	443	192.168.2.5	162.247.243.39
Mar 26, 2024 19:49:20.294811010 CET	443	49719	162.247.243.39	192.168.2.5
Mar 26, 2024 19:49:20.420823097 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.452538967 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.452590942 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.452703953 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.453802109 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.453824043 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.466296911 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.466569901 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.466583967 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.467592955 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.467684984 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.468236923 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.468502045 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.468502045 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.468518972 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.468569994 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.514625072 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.514635086 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.523099899 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.523248911 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.523303986 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.523386002 CET	49720	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.523399115 CET	443	49720	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.561469078 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.567945004 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.567986965 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.568048000 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.568537951 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.568556070 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.655308008 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.655941963 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.655960083 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.657156944 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.657213926 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.757652044 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.757709026 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.757762909 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.757765055 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.757801056 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.759486914 CET	49721	443	192.168.2.5	34.28.233.175
Mar 26, 2024 19:49:20.759506941 CET	443	49721	34.28.233.175	192.168.2.5
Mar 26, 2024 19:49:20.764477968 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.764545918 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.775830030 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.775846958 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.776096106 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.817766905 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.817925930 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.817945957 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.819998980 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:20.827097893 CET	49674	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:20.827100992 CET	49675	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:20.858333111 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.858349085 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:20.864248037 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.905205011 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:20.920836926 CET	49673	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:20.972085953 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.972148895 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:20.972209930 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:21.094470024 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:21.094618082 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:21.094676971 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:21.465720892 CET	49722	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:21.465749025 CET	443	49722	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.128006935 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:22.128040075 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:22.128056049 CET	49723	443	192.168.2.5	23.221.242.90
Mar 26, 2024 19:49:22.128062010 CET	443	49723	23.221.242.90	192.168.2.5
Mar 26, 2024 19:49:22.292973995 CET	443	49703	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:22.293070078 CET	49703	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:22.758357048 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.758389950 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.758460045 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.758961916 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.758970976 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.954025030 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.954397917 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.954411030 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.955560923 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.955625057 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.956353903 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:22.956434011 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:22.956515074 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:23.000237942 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:23.004209042 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:23.004215956 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:23.051100016 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:23.237938881 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:23.238058090 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:23.238114119 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:23.239995956 CET	49725	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:23.240006924 CET	443	49725	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:29.534713984 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:29.534776926 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:29.534825087 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:31.130218983 CET	49718	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:49:31.130251884 CET	443	49718	172.253.122.104	192.168.2.5
Mar 26, 2024 19:49:31.803811073 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:31.803854942 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:31.803926945 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:31.804344893 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:31.804359913 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:31.999371052 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.045888901 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:32.045901060 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.046386003 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.046695948 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:32.046770096 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.048199892 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:32.092250109 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.215728998 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.215867043 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:32.215923071 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:32.225756884 CET	49727	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:49:32.225775003 CET	443	49727	162.247.243.29	192.168.2.5
Mar 26, 2024 19:49:33.030755043 CET	49703	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.030793905 CET	49703	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.031171083 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.031203032 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.031270981 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.033509016 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.033523083 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.188632011 CET	443	49703	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.188648939 CET	443	49703	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.361579895 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.361650944 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.496040106 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.496064901 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.496469021 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.496630907 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.507507086 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.507539988 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.507674932 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.507682085 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.740669012 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.740794897 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.741302967 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.741357088 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.741369963 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.741419077 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.741756916 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.741771936 CET	443	49731	23.1.237.91	192.168.2.5
Mar 26, 2024 19:49:33.741785049 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:33.741813898 CET	49731	443	192.168.2.5	23.1.237.91
Mar 26, 2024 19:49:35.898653030 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:35.898704052 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:35.898879051 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:35.899094105 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:35.899106979 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.109536886 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.110054016 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.110080957 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.111181974 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.111288071 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.111568928 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.111635923 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.111742973 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.152237892 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.156050920 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.156058073 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.204642057 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.315310955 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315345049 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315382004 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315414906 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315431118 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315458059 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.315469980 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.315474987 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.315859079 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.322137117 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.329009056 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.329293013 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.329299927 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.330701113 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.330725908 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.330734015 CET	443	49734	34.102.205.190	192.168.2.5
Mar 26, 2024 19:49:36.330776930 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:49:36.331077099 CET	49734	443	192.168.2.5	34.102.205.190
Mar 26, 2024 19:50:01.499878883 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.499918938 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.500050068 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.501537085 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.501544952 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.696142912 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.696696997 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.696718931 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.697077036 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.697480917 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.697539091 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.697706938 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.740235090 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.908580065 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.908704996 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:01.908756018 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.909440041 CET	49735	443	192.168.2.5	162.247.243.29
Mar 26, 2024 19:50:01.909461975 CET	443	49735	162.247.243.29	192.168.2.5
Mar 26, 2024 19:50:18.930711985 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:18.930742025 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:18.930911064 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:18.931221962 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:18.931236982 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:19.148731947 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:19.164253950 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:19.164268970 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:19.164666891 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:19.165144920 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:19.165210009 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:19.218354940 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:29.199863911 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:29.199922085 CET	443	49738	172.253.122.104	192.168.2.5
Mar 26, 2024 19:50:29.200119019 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:31.126580000 CET	49738	443	192.168.2.5	172.253.122.104
Mar 26, 2024 19:50:31.126605988 CET	443	49738	172.253.122.104	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2024 19:49:14.878238916 CET	53	57793	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:14.880805969 CET	53	50566	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:15.542633057 CET	53	51532	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:16.238240957 CET	56517	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:16.238410950 CET	56055	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:16.474464893 CET	53	56517	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:16.581895113 CET	53	56055	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:17.397845984 CET	64211	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:17.398144960 CET	52548	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:17.494261980 CET	53	52548	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:17.494643927 CET	53	64211	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:18.874804020 CET	64462	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:18.875545979 CET	56380	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:18.969649076 CET	53	64462	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:18.970673084 CET	53	56380	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:19.605643988 CET	49419	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:19.605643988 CET	65221	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:19.700875998 CET	53	65221	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:19.700891018 CET	53	49419	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:19.873955011 CET	49528	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:19.873955011 CET	62124	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:20.158252001 CET	53	49528	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:20.245476007 CET	53	62124	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:20.354502916 CET	59735	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:20.354502916 CET	63156	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:20.451040030 CET	53	59735	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:20.451200962 CET	53	63156	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:22.662374020 CET	56472	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:22.662873030 CET	51217	53	192.168.2.5	1.1.1.1
Mar 26, 2024 19:49:22.757010937 CET	53	56472	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:22.757519007 CET	53	51217	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:33.320453882 CET	53	55962	1.1.1.1	192.168.2.5
Mar 26, 2024 19:49:52.173393965 CET	53	64653	1.1.1.1	192.168.2.5
Mar 26, 2024 19:50:14.598119020 CET	53	51314	1.1.1.1	192.168.2.5
Mar 26, 2024 19:50:15.184089899 CET	53	58141	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 26, 2024 19:49:16.581990004 CET	192.168.2.5	1.1.1.1	c25a	(Port unreachable)	Destination Unreachable
Mar 26, 2024 19:49:20.245877028 CET	192.168.2.5	1.1.1.1	c25a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 26, 2024 19:49:16.238240957 CET	192.168.2.5	1.1.1.1	0x7be4	Standard query (0)	agattu.plix.ai	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:16.238410950 CET	192.168.2.5	1.1.1.1	0xea5a	Standard query (0)	agattu.plix.ai	65	IN (0x0001)	false
Mar 26, 2024 19:49:17.397845984 CET	192.168.2.5	1.1.1.1	0xff05	Standard query (0)	assets.apollo.io	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:17.398144960 CET	192.168.2.5	1.1.1.1	0x88cd	Standard query (0)	assets.apollo.io	65	IN (0x0001)	false
Mar 26, 2024 19:49:18.874804020 CET	192.168.2.5	1.1.1.1	0x24b5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.875545979 CET	192.168.2.5	1.1.1.1	0x926d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 26, 2024 19:49:19.605643988 CET	192.168.2.5	1.1.1.1	0x57c8	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:19.605643988 CET	192.168.2.5	1.1.1.1	0x363c	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Mar 26, 2024 19:49:19.873955011 CET	192.168.2.5	1.1.1.1	0x327e	Standard query (0)	agattu.plix.ai	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:19.873955011 CET	192.168.2.5	1.1.1.1	0x196a	Standard query (0)	agattu.plix.ai	65	IN (0x0001)	false
Mar 26, 2024 19:49:20.354502916 CET	192.168.2.5	1.1.1.1	0xfaab	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Mar 26, 2024 19:49:20.354502916 CET	192.168.2.5	1.1.1.1	0xefd2	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:22.662374020 CET	192.168.2.5	1.1.1.1	0xf951	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:22.662873030 CET	192.168.2.5	1.1.1.1	0xc97	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 26, 2024 19:49:16.474464893 CET	1.1.1.1	192.168.2.5	0x7be4	No error (0)	agattu.plix.ai	aplolinks.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:16.474464893 CET	1.1.1.1	192.168.2.5	0x7be4	No error (0)	aplolinks.com		34.28.233.175	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:16.581895113 CET	1.1.1.1	192.168.2.5	0xea5a	No error (0)	agattu.plix.ai	aplolinks.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:17.494643927 CET	1.1.1.1	192.168.2.5	0xff05	No error (0)	assets.apollo.io		34.102.205.190	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.104	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.106	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.147	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.105	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.103	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.969649076 CET	1.1.1.1	192.168.2.5	0x24b5	No error (0)	www.google.com		172.253.122.99	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:18.970673084 CET	1.1.1.1	192.168.2.5	0x926d	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 26, 2024 19:49:19.700891018 CET	1.1.1.1	192.168.2.5	0x57c8	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:20.158252001 CET	1.1.1.1	192.168.2.5	0x327e	No error (0)	agattu.plix.ai	aplolinks.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.158252001 CET	1.1.1.1	192.168.2.5	0x327e	No error (0)	aplolinks.com		34.28.233.175	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:20.245476007 CET	1.1.1.1	192.168.2.5	0x196a	No error (0)	agattu.plix.ai	aplolinks.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.451040030 CET	1.1.1.1	192.168.2.5	0xfaab	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.451040030 CET	1.1.1.1	192.168.2.5	0xfaab	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.451200962 CET	1.1.1.1	192.168.2.5	0xefd2	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.451200962 CET	1.1.1.1	192.168.2.5	0xefd2	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:20.451200962 CET	1.1.1.1	192.168.2.5	0xefd2	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:22.757010937 CET	1.1.1.1	192.168.2.5	0xf951	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:22.757010937 CET	1.1.1.1	192.168.2.5	0xf951	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:22.757010937 CET	1.1.1.1	192.168.2.5	0xf951	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:22.757519007 CET	1.1.1.1	192.168.2.5	0xc97	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:22.757519007 CET	1.1.1.1	192.168.2.5	0xc97	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:32.728264093 CET	1.1.1.1	192.168.2.5	0x9841	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:32.728264093 CET	1.1.1.1	192.168.2.5	0x9841	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:49:45.627634048 CET	1.1.1.1	192.168.2.5	0xf37b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:49:45.627634048 CET	1.1.1.1	192.168.2.5	0xf37b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:50:07.254303932 CET	1.1.1.1	192.168.2.5	0xa360	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:50:07.254303932 CET	1.1.1.1	192.168.2.5	0xa360	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 26, 2024 19:50:27.396523952 CET	1.1.1.1	192.168.2.5	0xa05c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 26, 2024 19:50:27.396523952 CET	1.1.1.1	192.168.2.5	0xa05c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

agattu.plix.ai

https:

assets.apollo.io

js-agent.newrelic.com

bam.nr-data.net

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	34.28.233.175	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:16 UTC	687	OUT	GET /u?mid=6601ae2964c7bd00071c13cd HTTP/1.1 Host: agattu.plix.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:17 UTC	1182	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: frame-ancestors 'self' chrome-extension://alhgpfoeiimagjlnfekdhkjlkiomcapa chrome-extension://ececkagaccnfmkopaiemklekhoimmgpn .salesforce.com .lightning.force.com Content-Type: text/html; charset=utf-8 Date: Tue, 26 Mar 2024 18:49:17 GMT Etag: W/"48baf21dd1363ce7de2a4cd7861c2384" Server: nginx Set-Cookie: X-CSRF-TOKEN=fcZtoND_CpTzUM1DY40SoF3I-HkfnqFAofsXMIwZ7vW9V3UvxaSKDEyYChry6sXRa7GJBcaPFVad_phs9nAQ2A; path=/; secure; SameSite=Lax Set-Cookie: _leadgenie_session=TRUFgtWpIU75SU%2FoCHHs89PS81pXQcweoa%2F3Cc2FYMjybTkCZ67q9pba9vrnmBYSdv%2F%2FSvFnK1YUXVudHCNkMQ9WPD3BJF3ZExUlJ1d569gcZM1fOAG2HATlGJigbdL2xavLd9QodvZCj6na6232cve9UfNzqD7QLHS8uqHa241ezy1Q2%2BOBTFE3D%2BKvzfp2Zo8h2R2vOWY5cRymM%2Fu8a7vFplYR2lq%2FzL3lTBMLFrTmhPOnoIaw7QfZsfM3WmPSspEtLkrml5wFauEOjKEMCcKoIvG071wmb80%3D--%2Bw4stxH18yyMcNAR--BDp4AkvtU3DFBJZC5HwbEA%3D%3D; path=/; secure; HttpOnly; SameSite=None Set-Cookie: GCLB=CJ2F0dvQtYH3rAEQAw; path=/; HttpOnly; expires=Tue, 26-Mar-2024 18:59:17 GMT Status: 200 OK Strict-Transport-Security: max-age=3600
2024-03-26 18:49:17 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 41 4c 4c 4f 57 41 4c 4c 0d 0a 58 2d 54 72 61 6e 73 61 63 74 69 6f 6e 2d 49 64 3a 20 66 36 36 32 62 63 63 39 61 38 35 30 66 62 37 61 35 39 34 34 37 35 64 38 35 37 33 33 32 39 64 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: Vary: Accept-EncodingVary: OriginVia: 1.1 googleX-Content-Type-Options: nosniffX-Frame-Options: ALLOWALLX-Transaction-Id: f662bcc9a850fb7a594475d8573329d9Connection: closeTransfer-Encoding: chunked
2024-03-26 18:49:17 UTC	3558	IN	Data Raw: 33 62 30 31 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 3b 4e 52 45 55 4d 2e 69 6e 66 6f 3d 7b 22 62 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 65 72 72 6f 72 42 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 6c 69 63 65 6e 73 65 4b 65 79 22 3a 22 66 33 31 38 63 64 62 61 61 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 22 3a 22 31 32 37 33 34 38 39 34 31 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 22 3a 22 64 77 6f 50 45 42 5a 61 43 51 67 44 52 30 31 51 51 6c 31 4b 46 31 56 4c 55 41 67 46 44 31 6b 48 51 32 31 5a 41 42 49 58 42 56 49 41 4f 77 4e 44 42 31 39 47 52 30 6f 54 41 51 Data Ascii: 3b01<html><head><script>window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"f318cdbaae","applicationID":"127348941","transactionName":"dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQ
2024-03-26 18:49:17 UTC	538	IN	Data Raw: 20 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 28 74 29 7b 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 65 2e 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 3d 7b 2e 2e 2e 74 2c 70 61 73 73 77 6f 72 64 3a 21 30 7d 3a 28 30 2c 6c 2e 5a 29 28 22 41 6e 20 69 6e 76 61 6c 69 64 20 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 20 77 61 73 20 70 72 6f 76 69 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 65 64 22 2c 74 29 7d 7d 2c 73 70 61 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 6f 66 74 5f 6e 61 76 69 67 61 74 69 6f 6e 73 3a 7b 65 6e 61 62 6c 65 64 Data Ascii: mask_input_options(t){t&&"object"==typeof t?e.mask_input_options={...t,password:!0}:(0,l.Z)("An invalid session_replay.mask_input_option was provided and will not be used",t)}},spa:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},soft_navigations:{enabled
2024-03-26 18:49:17 UTC	5930	IN	Data Raw: 29 28 74 2c 68 28 29 29 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 6e 2e 65 6b 29 28 65 29 3b 72 26 26 28 72 2e 69 6e 69 74 3d 70 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 67 29 3b 76 61 72 20 72 3d 6d 28 65 29 3b 69 66 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 2d 31 3b 6f 2b 2b 29 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 28 72 3d 72 5b 6e 5b 6f 5d 5d 29 29 72 65 74 75 72 6e 3b 72 3d 72 5b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 5d 7d 72 65 74 75 72 6e 20 72 7d 63 6f 6e 73 74 20 79 3d 7b 61 63 63 6f 75 6e 74 49 44 3a 76 6f 69 64 20 30 2c 74 72 75 73 74 4b 65 79 3a 76 6f 69 64 20 30 Data Ascii: )(t,h());const r=(0,n.ek)(e);r&&(r.init=p[e])}function b(e,t){if(!e)throw new Error(g);var r=m(e);if(r){for(var n=t.split("."),o=0;o<n.length-1;o++)if("object"!=typeof(r=r[n[o]]))return;r=r[n[n.length-1]]}return r}const y={accountID:void 0,trustKey:void 0
2024-03-26 18:49:17 UTC	5085	IN	Data Raw: 2c 69 2e 4f 50 29 28 72 29 2e 69 73 6f 6c 61 74 65 64 42 61 63 6b 6c 6f 67 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 68 3d 7b 6f 6e 3a 67 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 67 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 3d 3d 3d 74 26 26 72 2e 73 70 6c 69 63 65 28 6f 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 2c 6f 2c 69 29 7b 21 31 21 3d 3d 69 26 26 28 69 3d 21 30 29 3b 69 66 28 63 2e 61 62 6f 72 74 65 64 26 26 21 6f 29 72 65 74 75 72 6e 3b 74 26 26 69 26 26 74 2e 65 6d 69 74 28 65 Data Ascii: ,i.OP)(r).isolatedBacklog}catch(e){}var h={on:g,addEventListener:g,removeEventListener:function(e,t){var r=n[e];if(!r)return;for(var o=0;o<r.length;o++)r[o]===t&&r.splice(o,1)},emit:function(e,r,n,o,i){!1!==i&&(i=!0);if(c.aborted&&!o)return;t&&i&&t.emit(e
2024-03-26 18:49:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-26 18:49:17 UTC	4096	IN	Data Raw: 34 30 30 30 0d 0a 6e 74 73 5b 30 5d 3a 7b 7d 3b 74 72 79 7b 61 2e 5f 41 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 73 2c 7b 64 65 74 61 69 6c 3a 65 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 7b 6c 6f 61 64 65 64 3a 21 30 7d 29 29 29 7d 63 6f 6e 73 74 20 6c 3d 7b 7d 7d 2c 32 32 31 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 58 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 72 29 7b 69 66 28 6e 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 3b 76 61 72 20 6f 3d 72 28 29 3b 69 66 28 4f 62 6a 65 63 Data Ascii: 4000nts[0]:{};try{a._A.dispatchEvent(new CustomEvent(s,{detail:e}))}catch(e){}}({loaded:!0})))}const l={}},2210:(e,t,r)=>{"use strict";r.d(t,{X:()=>o});var n=Object.prototype.hasOwnProperty;function o(e,t,r){if(n.call(e,t))return e[t];var o=r();if(Objec
2024-03-26 18:49:17 UTC	10674	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 6e 2e 65 65 29 3b 74 72 79 7b 74 2e 65 6d 69 74 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 21 28 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 61 70 70 6c 79 26 26 21 65 5b 6f 2e 76 2e 63 6f 6e 74 65 78 74 4f 72 69 67 69 6e 61 6c 49 64 5d 29 7d 76 61 72 20 75 3d 72 28 32 32 31 30 29 2c 6c 3d 72 28 33 38 35 29 3b 63 6f 6e 73 74 20 66 3d 7b 7d 2c 68 3d 6c 2e 5f 41 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 70 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 67 3d 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 Data Ascii: }}function c(e,t){t\|\|(t=n.ee);try{t.emit("internal-error",e)}catch(e){}}function d(e){return!(e&&"function"==typeof e&&e.apply&&!e[o.v.contextOriginalId])}var u=r(2210),l=r(385);const f={},h=l._A.XMLHttpRequest,p="addEventListener",g="removeEventListener"
2024-03-26 18:49:17 UTC	1620	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 72 29 2c 6f 3d 30 3b 6f 3c 72 3b 6f 2b 2b 29 6e 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 72 3e 31 3f 72 2d 31 3a 30 29 2c 6f 3d 31 3b 6f 3c 72 3b 6f 2b 2b 29 6e 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 6c 65 74 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 65 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 65 78 70 6f 73 65 64 26 26 65 2e 61 70 69 5b 74 5d 26 26 69 2e 70 75 73 68 28 65 2e 61 70 69 5b 74 5d Data Ascii: s.length,n=new Array(r),o=0;o<r;o++)n[o]=arguments[o];return function(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),o=1;o<r;o++)n[o-1]=arguments[o];let i=[];return Object.values(e.initializedAgents).forEach((e=>{e.exposed&&e.api[t]&&i.push(e.api[t]
2024-03-26 18:49:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	34.102.205.190	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:17 UTC	563	OUT	GET /js/unsubscribe-ui.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://agattu.plix.ai sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:17 UTC	921	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoFCJIyIdImfhhX3YWRs0z5IoMWOZwBhPUSDX3G7CzXIHmxv2KvhDqd-BSrjxWJ9vjDds4 x-goog-generation: 1711477703280875 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 104167 Content-Encoding: gzip x-goog-hash: crc32c=iCsmhQ== x-goog-hash: md5=Ko6h5m3P1s3YwYcxARRT0A== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 104167 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Tue, 26 Mar 2024 18:41:00 GMT Last-Modified: Tue, 26 Mar 2024 18:28:23 GMT ETag: "2a8ea1e66dcfd6cdd8c18731011453d0" Content-Type: application/javascript Age: 497 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-26 18:49:17 UTC	331	IN	Data Raw: 1f 8b 08 08 c6 13 03 66 02 ff 74 6d 70 73 71 6f 6c 35 6f 31 77 00 ec bd db 9a e3 36 92 30 78 3d f3 14 4a da ce 22 2b 29 95 ce 52 52 66 69 dc e5 f2 b4 67 7c 6a 97 bb 7b e6 57 ca 6e 4a 84 52 ac a2 48 15 49 e5 c1 92 e6 db 47 d8 bd db eb 7d 8f fd f6 5d f6 05 f6 15 36 22 00 92 e0 49 29 65 a6 fb aa ba da 29 12 08 04 22 02 81 40 00 08 80 aa aa 99 af b7 37 56 50 63 e6 f6 b2 dd ba 6c 77 0d 95 e9 91 ee 61 ba b2 09 59 2d 8c 02 67 1e 29 23 04 0a 4c 4f ed 74 9b ed 56 53 d3 7d 78 6e f5 e0 7f 97 9a ee 9a be 1a a8 ca 3b 00 f5 ae 1b eb c0 8f fc e8 7e cd 1a 8e 67 b3 bb 1f 17 8a a6 8d 58 83 dd ad fd 20 0a cd c5 c6 9b 47 8e ef 61 3d 1a d5 ed 99 01 bc 9c 9d 45 da 28 60 d1 26 f0 94 18 46 31 4d 44 e4 2f 6a de f9 b9 0b 40 8a 84 5d d1 5e d7 5b 63 5f f5 34 c3 db ef 75 4e cc 43 e4 Data Ascii: ftmpsqol5o1w60x=J"+)RRfig\|j{WnJRHIG}]6"I)e)"@7VPclwaY-g)#LOtVS}xn;~gX Ga=E(`&F1MD/j@]^[c_4uNC
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: 73 02 fb 71 f6 1e a1 6c b6 70 3c f6 53 e0 af 59 10 09 70 7d 41 10 df 5b d1 b2 b1 b2 ee 00 f5 c8 59 a8 73 2d 0a ee b7 73 75 bb d7 15 4b d1 41 a6 ee 86 19 ad bd b6 9f 5b d1 7c a9 32 6d 3b 37 bd 8d eb ee cb 5a 41 db 02 8a 54 e2 67 b1 c4 99 16 2d 03 ff b6 e6 b1 db 9a a3 2a 56 2d 06 a9 39 61 2d 60 1f 37 4e c0 6c 20 00 25 1b 99 a1 1a e8 c0 43 70 bd 59 31 2f 0a e3 96 ac b9 6a a4 b7 2e 16 6a 53 67 0d 97 79 d7 d1 b2 ae 26 50 71 4a 4b d3 90 bb 3d e1 b2 53 da b4 ad c0 82 d8 2d 09 fb 7e 34 1f cf d5 84 1b 60 1b 45 9a b0 6e ef 35 23 c9 e4 e2 36 ed bd de be ec b6 86 5c c1 63 b5 f7 46 af 5e 9e fd eb bf bc f1 d7 f7 81 73 bd 8c 6a 20 cc 5a bb d9 1a d6 fe 83 d9 b5 bf 5b 51 08 ed f9 af ff f2 9d 33 67 5e 08 29 1b d0 68 60 77 c9 6a df 7f fb 4b 4d 24 d7 54 78 d1 f4 5a c8 d8 bf Data Ascii: sqlp<SYp}A[Ys-suKA[\|2m;7ZATg-*V-9a-`7Nl %CpY1/j.jSgy&PqJK=S-~4`En5#6\cF^sj Z[Q3g^)h`wjKM$TxZ
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: f4 9f e8 c1 d6 f4 1f e8 61 ad e9 3f d2 c3 52 d3 bf a3 87 95 a6 ff 4e 0f d7 9a fe 33 3d dc 6b fa d7 f4 00 95 7c 4b 0f 37 9a fe 3d 3d dc 69 fa 37 f4 70 ab e9 7f a5 87 8f 9a fe 27 7a f8 a0 e9 7f a6 87 77 9a fe 77 7a 78 ab e9 7f a3 87 37 da e8 7d c6 2b 59 46 2b 77 62 5b 91 55 b7 d6 be eb fa 8e 6f 46 c1 86 4d f5 46 38 ab 87 4b ff b6 be b2 1c 4f 6f c4 b9 f5 79 18 d6 41 e3 c3 7a c0 42 16 6d c1 a1 b8 0f 23 b6 aa 6f 1c a3 96 3c 82 2f 81 6e 17 13 99 7a ed 1d bb f6 59 ed af df ea b5 9f fd 19 f8 9e 7a ed af b3 8d 17 6d f4 da 1b cb 8b 2c f0 79 5c bd f6 03 64 d4 de 41 3f 07 e7 1f fe d6 43 16 38 0b bd a6 c4 85 95 b4 f4 9f 99 7b c3 22 67 6e e9 b5 af 02 c7 72 73 25 be c2 ca 6b 6f 70 2c ae bd 5d f9 ef 1d 45 42 53 92 f2 ee 7e 35 f3 5d 65 54 bf 65 b3 0f 4e 54 5f 80 b3 51 0f Data Ascii: a?RN3=k\|K7==i7p'zwwzx7}+YF+wb[UoFMF8KOoyAzBm#o</nzYzm,y\dA?C8{"gnrs%kop,]EBS~5]eTeNT_Q
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: 75 88 62 6c d9 96 ac 6a ab fa 25 36 0e 8c ec 0b a9 7b a3 38 eb e9 a2 71 5d 2c 2f e5 98 a5 59 65 66 5e 68 f7 59 53 72 2f 32 00 64 fc ad ce 6c b6 e8 95 03 f0 a1 bb 77 39 5c 34 cb 01 f8 34 71 38 90 47 ea 0c 00 9f 2b 0e fa 6d bb 53 0e c0 87 f4 76 d7 b6 2a 68 e0 43 bb dd 81 4a ca 01 f8 10 3f 6c b7 bb 97 59 80 bc 3f 0e 33 0e bb 55 05 d2 16 8e f5 a0 3f ab 02 11 93 ac f9 65 67 58 05 22 dc f3 d9 bc d9 ab 02 e1 13 2e 50 9b 66 b3 0a 84 64 72 c9 70 61 aa 0a 84 a4 d2 9f 75 59 35 08 77 09 86 ed 42 45 59 ff c7 9e 2f 64 a5 cc 42 90 54 66 7d d6 62 83 0a 08 3e c3 5e a0 9f 59 01 41 32 e9 c3 b4 75 ce 2a 20 b8 92 0c 61 4c b2 2a 20 b8 96 74 06 8b 61 bf 02 82 ab c9 a2 df ef 57 d1 c1 f5 e4 b2 33 eb e4 e8 c8 fb f3 8b be dd 65 9d 4a 18 e1 32 59 ed 79 35 0c 9f c2 b4 07 43 6b 58 09 Data Ascii: ublj%6{8q],/Yef^hYSr/2dlw9\44q8G+mSvhCJ?lY?3U?egX".PfdrpauY5wBEY/dBTf}b>^YA2u aL* taW3eJ2Yy5CkX
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: b2 02 bc f2 45 e8 ab 50 74 71 8d 4c 2c 79 6d 6f 18 71 8d 49 0b 6e 79 0b b6 9a d2 85 2b e8 87 95 80 d6 a3 e5 66 35 db 72 75 c2 5b 5b 6a a1 ef 3a 76 56 4d a4 4b 57 0e 6b 57 06 d0 75 d6 c6 da b2 6d e0 0c f5 34 77 dd cb f0 20 41 06 2d 84 6e 8f aa 77 d0 d4 f6 8d 85 cb ee ea 78 49 0d 38 92 b8 d0 ed 6e 1c 5b 08 b0 4e 9d cb b0 36 60 b0 45 0a dd 4c 43 09 31 81 1c a6 1d b0 55 92 c4 af af 81 94 7d 23 f0 6f cb 3b 5f 72 17 0e d6 9f 7f 1f e1 1f a3 59 6b d5 a8 aa 87 de c0 22 05 6c ce 2f 21 f2 6f 4f 49 ba 0d ac b5 81 7f 1e 78 cd c8 a3 de 42 66 65 81 50 0a 31 db 10 9b 3f db 62 8d f1 be d0 e8 51 59 7b 30 67 6e 15 76 3e f5 aa c2 72 4a 2e 55 53 bf 0b 75 f1 5b 6f 25 4f ed e4 a9 93 3c 75 93 a7 5e f2 d4 4f 9e 06 c9 d3 30 79 ba 4c 31 37 d3 c7 b4 96 56 bb 42 5f 44 b3 37 33 4a 50 Data Ascii: EPtqL,ymoqIny+f5ru[[j:vVMKWkWum4w A-nwxI8n[N6`ELC1U}#o;_rYk"l/!oOIxBfeP1?bQY{0gnv>rJ.USu[o%O<u^O0yL17VB_D73JP
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: 25 4f ed e4 a9 93 3c 75 93 a7 5e f2 d4 4f 9e 06 c9 d3 30 79 ba 4c 31 37 d3 c7 b4 96 7f aa 0b e4 5e 3f 93 0b 84 84 3f c1 05 42 e9 3e cd 05 c2 56 39 dd 05 c2 16 7c 9a 0b 84 2d ff 34 17 08 35 e6 74 17 08 b5 eb 69 2e 10 6a e5 d3 5c 20 d4 e6 d3 5d 20 d2 fc a7 b9 40 d4 63 9e e6 02 f1 9e f6 18 17 08 4a 3e e8 02 a5 30 07 5c a0 14 a8 c2 05 4a 01 0e b8 40 29 d0 01 17 28 05 aa 70 81 52 80 03 2e 50 0a 74 c0 05 4a 81 2a 5c 20 49 7e 07 5c 20 09 ea 68 17 08 ac d9 11 2e 50 16 2a e3 02 41 d6 d3 5c a0 12 04 4f 76 81 ca e8 2d b8 40 25 ac c7 e9 8f 74 81 a0 e4 e3 5c a0 5c c1 87 5d a0 b2 9a 1e 74 81 4a 18 7b 84 0b 54 89 e5 24 17 08 b0 54 b9 40 49 96 e4 02 35 e6 2e b3 82 85 73 67 18 33 b6 f0 03 74 6f 92 94 ea 4f 8c d1 b1 d0 7d 11 14 df c1 4f 88 96 fb c6 7a e3 ba d4 4b c0 b0 f9 Data Ascii: %O<u^O0yL17^??B>V9\|-45ti.j\ ] @cJ>0\J@)(pR.PtJ\ I~\ h.PA\Ov-@%t\\]tJ{T$T@I5.sg3toO}OzK
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: 39 82 0e b3 dc d2 6b 30 ee 03 55 96 bb 5e 5a 8f 64 ba 5d c5 74 bb 8c e9 3f 92 db f6 61 6e db 31 b7 81 0f 33 9b 47 72 db a9 e2 b6 53 c6 ed 1f c2 66 e7 30 9b 9d a7 6a 71 b7 8a c5 6e 19 8b cf cb 5b f7 30 6f dd e7 50 d8 5e 15 7f bd 32 fe 9e 89 b1 de 61 c6 7a cf a1 9b fd 2a c6 fa 65 8c 3d 95 a3 fe 61 8e fa 4f 55 c3 41 15 37 83 32 6e 1e cd c6 e0 30 1b 83 e7 d0 b8 61 15 2b c3 32 56 4e e7 61 78 98 87 e1 73 28 d7 65 15 0f a7 93 7b 79 98 dc cb 53 35 27 33 e0 95 3b 4a b9 05 da a3 7c ae 93 d1 76 8f 72 8c 64 b4 05 8c 98 c0 b7 d2 f8 1e 50 6e 43 e0 64 ba 4f ac e0 64 0e da 47 09 a6 7f 2a dd c7 a1 1d 9c 4c ed 89 e2 38 9d ee 13 2b 38 99 83 ce 51 82 b9 3c 95 ee e3 d0 b6 9a 27 93 7b a2 3c 4e 27 fc c4 0a 4e 67 a1 7b 9c 68 da a7 52 7e 24 de ce c9 f4 9e 2a 91 d3 29 3f b5 86 93 Data Ascii: 9k0U^Zd]t?an13GrSf0jqn[0oP^2aze=aOUA72n0a+2VNaxs(e{yS5'3;J\|vrdPnCdOdGL8+8Q<'{<N'Ng{hR~$*)?
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: d3 6b f5 23 79 e0 1f eb 0b f3 87 ca f0 f6 1c f9 fb 76 07 2e 4d 38 ba 0a ba 91 87 2e 7e 09 20 47 9c 40 2b b9 f8 e7 da a2 3b 24 8e c7 5c 73 1a 2b db c9 37 42 76 8f e6 08 6c bc 77 71 57 95 5a 2c ee 6e dd 6e 57 3c d7 51 38 73 a0 8f 5f 19 24 25 be 87 5a b3 a9 e2 e2 b8 a3 2b 16 7d fc 60 f5 04 e2 3a f0 63 b4 9a a7 57 74 a4 8f 5f ea bb 03 15 47 d4 c0 56 eb e8 3e e5 e1 98 12 37 60 39 b0 40 3d d8 b8 cc c0 57 df b6 8f e9 0c cb f4 ab c7 47 31 83 05 b6 19 99 b5 8e a9 06 7b d6 da 0a 40 37 b7 fe da 9a a3 e5 69 1c 23 8a 64 fb 14 77 2f 0c 7e fb d1 d2 71 ed 53 cd 64 82 47 1a 67 2b 30 f2 ce fb 04 9c fc 76 aa 47 91 99 1c 46 97 77 9e 0f ed 3b 17 4a b6 8f df f1 2e 94 ed 64 ca b6 06 27 15 ee ca 85 4f 2a d9 93 f7 f8 87 9d 93 ca f6 e5 b2 fd 93 28 b6 b6 f9 11 06 ec 0e 1a 86 53 5a Data Ascii: k#yv.M8.~ G@+;$\s+7BvlwqWZ,nnW<Q8s_$%Z+}`:cWt_GV>7`9@=WG1{@7i#dw/~qSdGg+0vGFw;J.d'O*(SZ
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: 2e 9e 84 43 65 d2 ea dd 8c 8e e2 95 42 18 06 f2 99 6d db 23 29 50 e0 51 9b c6 71 9c 29 1d f5 e6 27 bc 31 fe 27 7b c2 fb 78 5e a4 61 a4 93 9e eb 6f 4b db 34 e9 47 53 72 1b 48 83 e3 46 b8 58 e8 f2 c6 fd 91 23 49 cc 2b 69 53 c0 6e 1c 76 ab 9f 56 2a 60 2b d0 bc f2 48 02 b1 e9 26 7d 7b 46 5c cf 81 0d 94 33 38 a9 c2 04 6c cd ac 08 a4 2c 9e e4 bc 64 83 49 58 76 29 8b 44 3c c7 5e f0 38 be c5 59 f9 e3 7d a5 a2 14 b2 28 ca 65 52 1a 44 dc e6 41 c4 5d 1c 67 64 85 69 3f 70 db 09 6d f6 49 f7 4b 7c d6 ee b6 ed ce a1 bb 4b 40 d4 05 04 f9 e0 8b 6c ef eb 3d 56 91 64 23 40 b7 25 18 9b c0 55 5f 5c fc fd e2 85 f6 1c 4d 94 3a 9d 3f ae 99 57 fb ce f1 3e 28 fb 47 29 6f 05 a1 7f 3b 9d d0 52 3d 48 e8 fc 99 72 4f a6 d4 8a c3 46 7d 6f 1b db 41 a3 f6 b0 e5 29 d5 3f 39 f8 50 36 ac a9 Data Ascii: .CeBm#)PQq)'1'{x^aoK4GSrHFX#I+iSnvV*`+H&}{F\38l,dIXv)D<^8Y}(eRDA]gdi?pmIK\|K@l=Vd#@%U_\M:?W>(G)o;R=HrOF}oA)?9P6
2024-03-26 18:49:17 UTC	1252	IN	Data Raw: c4 1d e1 36 32 8c 02 16 cd 97 59 de c1 0d 8d 96 ef d8 da 0a 80 96 77 bc 36 92 47 8e c8 98 90 63 a9 8c 93 8e 20 33 4b 50 d1 3e 11 25 56 c0 2c 83 27 54 c2 c7 2d 9d 16 10 29 b9 13 86 c9 39 5a f2 95 c5 bc a1 45 83 7c 05 66 32 47 29 5a 7c cd 62 a9 2c 29 6c 50 5a 96 27 a0 7e d6 1a c9 71 f6 ec 68 4a 63 92 6d 85 4b 56 3a 28 c5 5d 3d 3b cd 42 fd 17 a6 62 c9 dc f5 7e 62 3b 81 a9 c0 0c 41 99 d6 a8 b2 c8 59 af ef 71 ed 81 2f df 45 4b b6 62 a6 22 96 f4 ea ad 46 13 01 39 50 ec d3 4b 37 c8 e3 50 27 70 06 91 fb 3c 38 c5 ad f4 8f 44 74 30 5c 81 fb 99 f8 21 7a 61 05 33 ae a6 48 ca 1d ef 8e 53 69 b1 18 9a ea 03 d7 8f 8c 4f da e8 95 df 7a c3 c7 06 be 7a 94 26 a4 6b 54 94 96 dd 15 a5 ca 6e a1 49 45 65 72 4a 8e 24 4a 43 9f 27 c3 cc 09 5b 55 25 5f 24 38 51 ea 34 ef de 56 0f 12 Data Ascii: 62Yw6Gc 3KP>%V,'T-)9ZE\|f2G)Z\|b,)lPZ'~qhJcmKV:(]=;Bb~b;AYq/EKb"F9PK7P'p<8Dt0\!za3HSiOzz&kTnIEerJ$JC'[U%_$8Q4V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	34.102.205.190	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:18 UTC	567	OUT	GET /js/bundle-app-production-8015-a4a05b611c31fdf0ac15.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:18 UTC	840	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoT-gJOyP2Azf97Wf5js_kW_lbyFjogX3OWdltR88JYMUnbrITP-hnwGJ5CXK25RGMcLVpC7f4gpA x-goog-generation: 1711473356968617 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 33086 Content-Encoding: gzip x-goog-hash: crc32c=eWcv2g== x-goog-hash: md5=tD71TN81DoV8NfbXE+budw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 33086 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Tue, 26 Mar 2024 17:58:51 GMT Last-Modified: Tue, 26 Mar 2024 17:15:57 GMT ETag: "b43ef54cdf350e857c35f6d713e6ee77" Content-Type: application/javascript Age: 3027 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-26 18:49:18 UTC	412	IN	Data Raw: 1f 8b 08 08 cc 02 03 66 02 ff 74 6d 70 63 74 64 76 6b 76 36 34 00 ec bd eb 76 db 46 96 30 fa ff 3c 05 85 ce b0 81 a8 48 91 92 25 3b 60 60 8e 2c c9 1d 77 7c 51 7c 89 93 30 1c 37 44 16 45 c4 24 40 e3 22 89 21 b9 d6 f7 02 e7 25 cf 93 9c bd 77 5d 50 b8 90 92 7b 7a ce fa 66 ce 97 15 8b 40 a1 ee b5 6b df 6b 97 9d f0 d9 a4 7d cb af 16 fe e8 f3 d9 34 0b 3f cf b8 3f be e6 61 c0 bd ed 9f d6 eb c1 d0 69 2f b2 64 6a 0f 06 4f 3a dd e3 21 5b 7d 77 72 74 74 e4 da 9c a5 2c 74 bc a7 2b 2b 4b 78 23 49 e3 60 94 5a bd 49 16 8e d2 20 0a 1b b1 cd 9d 55 cc d3 2c 0e 1b bc 6f f3 76 18 8d f9 6b 7f 0e 55 5a 96 d3 4e a3 97 d1 2d 8f cf fc 84 db 8e 1b 66 b3 d9 26 6c 8f ed 94 ad 7e 73 6d a8 35 de 38 1b f6 f8 e4 b0 73 fc f8 61 4d 05 13 1b 6b f1 3c ee c8 56 6f 83 70 1c dd f6 e0 83 35 88 Data Ascii: ftmpctdvkv64vF0<H%;``,w\|Q\|07DE$@"!%w]P{zf@kk}4??ai/djO:![}wrtt,t++Kx#I`ZI U,ovkUZN-f&l~sm58saMk<Vop5
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 30 08 f9 d8 f2 bc 74 b9 c0 02 ef a6 3e 4c e3 db 28 4a e5 9a ed 75 7b 95 5e e4 99 1e d4 89 3c fb 66 c3 9e 74 1f 3f 39 7c b4 6d 15 d4 0c 13 40 3b 2c 82 47 b1 6c c6 64 1b 33 c3 db d0 48 ca 7b 6f 08 96 da 9f f9 32 b1 d3 36 17 03 4e 9c f6 24 8a 2f fc d1 d4 56 65 55 c9 d0 4b a1 e4 72 c6 93 01 1f ae d7 ab 0d 0b 20 c5 4f a1 17 57 59 9a a7 fa 5e 5e 1b a4 f5 60 0e a2 f6 5b ee d8 be d3 6c aa 09 a1 67 d9 03 3f 49 82 eb d0 f6 45 ed 30 40 66 76 2d d8 de a3 d4 0b b0 81 bd ae 07 4b d1 f7 db 31 9f 47 37 fc 54 f5 08 b2 b9 50 29 4f 8d 14 b6 d7 a1 cc 96 e5 a6 ce c6 81 ff 4b 4b 5c 98 23 16 7a ab 45 b4 58 f0 d8 85 df 24 c0 6c 6e da 8e 16 f8 90 40 9e 18 32 5d 2f d9 8c 4f 52 d7 ea 58 2c 8d 16 f4 3b f7 e3 eb 20 c4 47 98 8f 38 8e 6e 8d f2 96 7f 95 44 33 e8 0d 7c 8b f9 84 c7 1c 56 Data Ascii: 0t>L(Ju{^<ft?9\|m@;,Gld3H{o26N$/VeUKr OWY^^`[lg?IE0@fv-K1G7TP)OKK\#zEX$ln@2]/ORX,; G8nD3\|V
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 8e 35 4d e7 33 10 17 f4 7a e0 96 86 7a 04 17 02 9b 68 16 21 fb 0f 38 0a 78 c1 f4 35 08 98 eb b5 d8 ff bf 7d 91 fb 7f 1a 25 29 89 97 b0 92 37 85 fd f6 26 6f 67 20 1a 62 62 fd 99 f5 17 85 09 ac 61 1b 90 04 bf 7b 33 b1 f3 2e 38 4f bd 4e 19 b3 b4 b1 a4 5b a0 62 d7 a2 b7 6f 6c 1c 90 d1 ee 99 60 c0 4a 24 14 c4 6c 02 fa 10 96 06 7b 06 7b 3c c6 81 0b 99 d6 0e cb b2 a9 d3 17 15 b8 21 35 2d f7 07 21 9a 18 37 46 d4 1f 04 c3 f6 28 0a 47 7e 0a ec 5a 91 92 a1 54 cf ae 21 63 3f 76 a1 61 37 86 7d 93 aa cc be a2 0f 8d a8 3f 72 47 2a f9 0c c6 81 50 9b 0f e4 c2 9c c0 14 f9 35 98 ba 74 8c 7f a6 5b 27 2e 2f 7e 59 40 91 f9 bc 59 93 e0 0e 84 44 d8 85 88 06 db 8a fd ef 2b f0 b9 a4 c5 16 2a 03 5d d9 db 1c de 0f 26 c0 11 4e a2 3b 93 85 41 25 c0 c1 fb 38 00 64 98 9a e9 25 c6 43 36 Data Ascii: 5M3zzh!8x5}%)7&og bba{3.8ON[bol`J$l{{<!5-!7F(G~ZT!c?va7}?rGP5t['./~Y@YD+]&N;A%8d%C6
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 23 af 66 49 c2 3e aa 33 d5 ee 75 c3 de 04 35 53 2a c1 ab 8c c1 cf 3f b2 11 e6 14 02 9a 24 e3 9e 31 06 53 11 71 86 3a 0c c2 b4 29 bf 53 0a 06 4c 2d 25 39 38 7f 72 e8 67 80 07 36 34 f5 0b ef 67 fb 57 db a0 32 79 1f da 7a 3a 81 37 57 0b 0a 5f 4b cb e2 2d 76 22 77 a9 6e dd d0 c8 4b 45 77 58 11 24 11 25 e1 44 4e 09 0a 96 42 3d 4b 2c 6c 75 be 63 45 db 62 5b af 19 29 80 53 a6 ac 38 6e a2 41 c8 80 ea d5 c6 05 da d3 cb 24 f9 cb 29 32 ec e9 0d 51 c6 a4 9d 2d 00 bd 02 7d d8 30 e8 f4 88 7f a0 57 d7 c8 88 44 76 a4 b4 b3 81 d6 bb 33 41 34 e4 ca d1 80 c4 22 e0 20 7e b1 71 57 08 35 f6 a8 b8 c4 a7 f0 e9 0f 00 2f 96 4b 0e 41 c5 ca e1 a8 05 bd 85 9c 1b 86 d5 00 90 22 d8 06 6d bd a3 8c 72 3a ed a1 8b a1 57 bd b0 b5 06 5c 92 b5 0a 08 73 45 84 7a 0a 17 c6 80 ed e2 ef 6b 9a 13 Data Ascii: #fI>3u5S*?$1Sq:)SL-%98rg64gW2yz:7W_K-v"wnKEwX$%DNB=K,lucEb[)S8nA$)2Q-}0WDv3A4" ~qW5/KA"mr:W\sEzk
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 9d f5 61 5b d5 c2 85 34 45 cc bd f7 04 1e ef 01 d2 26 4e 55 23 f4 99 d9 20 13 83 c4 31 38 1b 7a 77 7d ab 03 78 12 28 e8 e0 cd d0 bb d5 6f b9 c2 de eb 3e f5 ec 8b ba cd ea f4 85 5e 7e 86 dc 99 b5 3f df b7 16 77 ac 61 ed 5f e1 83 03 f5 e8 af 47 e3 ca 77 d6 e8 38 16 4a 25 6e 6d 07 d3 bc 83 94 9d 7a 95 8a 3e ce f3 04 a3 9b f8 ea 88 d9 e4 13 85 8e 8b 3e 35 35 e8 b8 a0 b6 bd 17 2b e7 32 62 58 c1 0d 91 17 e6 b8 21 80 97 02 6e 30 35 17 00 56 40 b5 0d 5d 04 47 f7 2c fd ea 30 8d 9d 5c a0 f3 85 2f 4a a7 50 66 15 59 8e ed ca a8 bf d4 cf 5c 20 05 64 1a 33 89 af dc 5c fc ab 3a b9 6d 7a 82 ce 96 c8 51 bb 40 eb d0 06 a8 7c ba c4 87 aa d8 56 ca c0 00 7f 57 f2 64 6c 25 d1 b1 bb b3 3d b6 cb 2b 4f ad 83 5b 64 c3 cd 15 71 fd 8d 83 26 ec fa a1 49 17 ba 7c 48 94 b0 63 44 f4 fd Data Ascii: a[4E&NU# 18zw}x(o>^~?wa_Gw8J%nmz>>55+2bX!n05V@]G,0\/JPfY\ d3\:mzQ@\|VWdl%=+O[dq&I\|HcD
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 70 96 97 99 92 67 d9 18 6d e8 55 1d d1 d2 83 69 b5 c2 6c 7e c5 63 00 7e c9 2b cf fb 80 f5 fe b0 e7 ec 33 6c d0 6b d2 1c 1b 42 de 55 ae 3c 4e 06 a2 3e d8 36 e3 66 73 dc 07 8a eb 7d e8 7f e3 7e 70 67 43 76 ea c1 8e d1 9b ed ca e9 5f b9 57 25 03 2e 79 99 56 4d 11 ba 93 a3 fe 33 a0 47 fa 35 e9 bf 70 13 3c 46 73 8b e8 36 2f a7 55 92 a8 87 2a 6a 2d 6f b5 96 f2 fa 1e c5 64 b0 41 6d 15 20 ae 0a 6c 5d b3 3b 98 87 33 4f 8c ee 0d d4 79 21 74 95 a7 08 d7 ad 33 42 d1 4b 82 71 09 be 67 6a 3b 9c ca 07 f8 2c 37 20 c1 f5 29 ed 0d 28 49 f8 7b 29 76 8a d8 02 67 72 87 9d 8a 5f f8 48 bf 1b 76 09 d3 5e e4 86 05 e3 84 94 95 7a d6 6c 5e 0a d4 f1 d6 bb 1c 04 c3 c2 c9 bb 8b 5d c7 db 06 2f d9 a7 b2 31 01 d5 45 88 9b df 55 3f 59 4b cb b5 ee ac de 05 b0 9c fb de 5b d8 3a df 22 5d 94 Data Ascii: pgmUil~c~+3lkBU<N>6fs}~pgCv_W%.yVM3G5p<Fs6/U*j-odAm l];3Oy!t3BKqgj;,7 )(I{)vgr_Hv^zl^]/1EU?YK[:"]
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 71 30 3f c1 0f 0c e5 17 dc f6 40 dd b0 8b bf c2 1f 87 fd cd bb a2 a1 1c 1c b6 3e b6 7e 69 fd d8 7a ab f7 a4 fb 43 29 81 fd 1d 32 b7 44 ee fd 8f fb bf ec ff b4 6f e4 fe b9 94 80 2e 6e d5 d0 0e 7f 54 c2 39 38 e8 fb c6 09 af d1 c2 70 43 a9 b5 5e 77 5c 6e aa b2 30 01 d0 bd 50 c8 ee 79 f6 6b a9 99 7d a5 f4 b0 af 60 0d 9d fe 6b cc e4 c3 4a fe ad c5 83 16 6c 76 9e c1 cb df e1 85 f1 11 ce c1 b8 1f d8 5f 20 8b e3 7e 61 df b0 71 3f b2 9f 43 1e c7 7d ee f4 10 0a 3c 3e 62 9f c5 6f eb 9b 8d 06 34 a0 01 40 1f 33 e9 c3 0a 23 9c 78 02 2b 0b 50 e3 0b fd 8a b0 c6 67 00 51 77 43 c6 c7 12 e8 ee aa 40 c7 a7 1e 9f 01 bc f1 09 e4 bb 81 67 00 39 be 80 e7 b9 27 ce 8f bd 63 e7 86 fa 0a e6 6a a9 86 8e b1 33 ca 63 bf 83 b1 73 dc 7d 1c d0 cf bc cf a7 2e d4 78 36 e0 e3 21 00 27 fe e5 Data Ascii: q0?@>~izC)2Do.nT98pC^w\n0Pyk}`kJlv_ ~aq?C}<>bo4@3#x+PgQwC@g9'cj3cs}.x6!'
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 0c 33 65 9d a9 61 0c b8 2c e5 8d 90 fc 54 4c 0b f3 6d cd 31 88 83 df 93 fd 03 47 69 da 9f 45 11 f4 3a 74 6a a3 9e e4 d6 d5 52 b8 12 ec 6b 0b 63 f6 f1 7c da d1 e0 2b 74 65 69 31 c6 88 d1 83 b2 7a 3f 2d 28 45 f3 aa c4 e9 ee da 00 1f db 0f 7d 5c 16 3a 4e ca 30 05 3f a5 f0 1c 35 6a 7b ee ec b4 19 68 89 07 fd b6 90 6b 20 1b 02 19 9c cb 86 cd 3f 6a 36 d5 28 e6 40 ca a4 61 ce b6 c6 c1 8d 65 94 78 67 1e 43 91 99 2c 66 3d 8f fd 6b 19 fa 65 1b 4d 16 3b c7 6c fd 93 31 3e fc 6a a1 53 07 9e b3 31 1b 7c 59 ce f4 2a 02 14 4c 47 72 cc 6c e7 c6 31 62 3a 47 cc db 9f 08 cd e4 4f 39 29 46 60 30 ca 1a aa 3a 1a 5f 1f a3 00 62 e7 fa b8 4c 6e 19 95 c0 4e ba b4 f5 74 15 18 b8 53 5a 41 a3 ea cf 02 fe ea 63 25 d0 29 65 e1 cc 29 7c 8a c9 b9 e1 3c 13 4e b3 1e 20 87 79 62 15 66 ec fd Data Ascii: 3ea,TLm1GiE:tjRkc\|+tei1z?-(E}\:N0?5j{hk ?j6(@aexgC,f=keM;l1>jS1\|Y*LGrl1b:GO9)F`0:_bLnNtSZAc%)e)\|<N ybf
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 71 87 c5 20 9d e0 2c 44 b3 14 1d 5b d2 29 47 95 93 c5 fe 7c 81 b2 82 fb 1d fc 07 12 cf 2f 85 90 d4 3f a1 1d c7 64 78 4a 7c 7e 1d ed fd 09 a3 4f 73 e1 98 93 63 bc bf 1b 31 6b d1 e3 90 96 41 c4 cd da ea 5b 1a 93 a7 15 29 ac 50 a9 ad 82 f5 fb b3 8c eb 68 86 24 40 44 43 cf 90 2a a2 61 1f ff b8 92 3d 8c bd 9f e0 0d a3 22 06 4e bd b3 91 e9 70 6d 0a 5c 9c 9b c2 ae 9d f6 cd d1 ff dd ae 89 84 b3 52 f0 85 5a 7f c7 fd 65 d7 e0 70 1e ae ab ec b0 50 3e 58 fb 14 de 4e a3 7a 62 00 75 1c 3e 11 86 45 69 35 50 c2 13 e1 8c e2 1e 9f 25 bc 91 c6 cb 15 bd ff fd dd 9b d7 e8 90 9e 90 98 0c c2 27 2c 15 06 4b a3 bc f9 71 ed 92 37 69 ba 53 80 4e 99 c6 9f d7 76 da 96 cf 0c 83 92 a3 6a ac 8c f5 30 f4 87 98 47 b5 e8 8e e1 70 8e f8 b8 da c4 4f 94 ce c4 67 47 fe 7a ab 12 9e 26 fd 05 7e Data Ascii: q ,D[)G\|/?dxJ\|~Osc1kA[)Ph$@DC*a="Npm\RZepP>XNzbu>Ei5P%',Kq7iSNvj0GpOgGz&~
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 0b 45 cc 86 ac 03 e2 8c 57 5a 12 3a 62 71 5e 55 18 ee 2d 69 20 88 be d9 97 c2 05 09 ac a6 1b 6a 16 8a 1a 17 31 62 f5 2d 67 33 14 e3 8a 1d a5 20 ae d8 cf 38 67 74 b1 f3 00 28 43 36 71 d8 7b f9 98 cf d1 06 e5 00 b1 59 de d8 7c c2 ce 45 ec 0d 0f 44 43 af bc 5f 88 f1 2c 85 2e a4 95 a4 49 a5 a5 a4 4d 56 ec 60 b3 49 1d e7 b0 b5 cc 20 74 f9 2c 11 b2 c6 99 c9 c1 22 14 95 91 67 42 3e 1f 4a 8b 06 a3 43 28 63 76 aa 3f 19 58 aa d9 0c 41 64 b9 a1 c8 f5 b1 12 4e 81 d9 c9 4f 45 83 d4 18 b2 41 3c 74 9c 9c ff fd 82 01 d9 0b 04 fa 4b 0d d8 50 2f df a0 e2 77 43 ba b6 f2 96 04 ca 6b 6e 32 b5 1f c3 da fd 18 d7 ed c7 a8 6e cf 75 2b 7b 0e 31 6e 88 58 d7 d8 4f 3f 90 eb ce 96 fd 84 1f 77 ec a7 2e ab ac 87 a4 fe c4 11 6c df 6c 39 f3 83 54 83 8f 09 e9 e2 bd 25 7a 0f 05 12 34 7d 2f Data Ascii: EWZ:bq^U-i j1b-g3 8gt(C6q{Y\|EDC_,.IMV`I t,"gB>JC(cv?XAdNOEA<tKP/wCkn2nu+{1nXO?w.ll9T%z4}/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	34.102.205.190	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:18 UTC	567	OUT	GET /js/bundle-app-production-7012-2a61c6ae5d188b6c9911.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:18 UTC	833	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpbLkRHii7ScWE3hXaeLPOWB-4BYjurMsbBThADEaGc2C5A-bwyiBPsEBqcByYWSfrvrL4 x-goog-generation: 1711473360046031 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 35650 Content-Encoding: gzip x-goog-hash: crc32c=ntRkug== x-goog-hash: md5=OkC4ZT+3di9adE07MrNpyA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 35650 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Tue, 26 Mar 2024 17:50:20 GMT Last-Modified: Tue, 26 Mar 2024 17:16:00 GMT ETag: "3a40b8653fb7762f5a744d3b32b369c8" Content-Type: application/javascript Age: 3538 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-26 18:49:18 UTC	419	IN	Data Raw: 1f 8b 08 08 cf 02 03 66 02 ff 74 6d 70 6e 61 6a 63 64 65 74 5f 00 ec bd 09 7b db 46 b2 28 fa 57 18 9e f7 26 d2 b9 24 07 fb 22 7d 9a 73 64 d9 8e 33 63 c7 8e b7 64 9c 93 97 0f 24 41 11 11 49 30 04 a9 c5 b2 ff fb ad ad 81 06 09 80 a4 b2 4c e6 1d c6 91 04 54 75 75 77 f5 52 4b 57 77 e3 28 8b 27 a3 de 4d dc 9f 47 83 ab 8b f1 6a 76 35 89 a3 e1 65 3c 4b e2 b3 7a d4 a7 4f 3f fc 78 dc 9b af b2 f1 d1 0f 3f f8 86 69 fd d8 b9 f7 02 df 0a cc 93 a3 b4 33 eb c4 c7 67 7f bb 6f af b2 b8 95 2d 17 c9 60 d9 3e 8d 7b 8b a3 d9 f1 e9 75 b4 68 4d ce e2 a3 c0 77 6d ff b8 b3 3c 8b 7b b3 a3 c9 71 27 02 58 68 d9 9e e3 1e 77 16 04 8c 8e 3b 03 4c e8 99 9e 07 29 13 02 0e 8e 3b f3 b3 59 7c d3 7a f7 fa f9 51 7c e4 85 96 65 85 c7 9d b8 d7 3f ee 9c 6b 88 c0 b6 1d c3 14 c4 e8 6c 71 74 7c b4 Data Ascii: ftmpnajcdet_{F(W&$"}sd3cd$AI0LTuuwRKWw('MGjv5e<KzO?x?i3go-`>{uhMwm<{q'Xhw;L);Y\|zQ\|e?klqt\|
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 5f 72 25 f2 e2 a8 b0 56 eb 26 19 2e c7 ea b5 99 fe 3f 4f 66 e9 f2 a8 37 03 54 94 0d a2 61 7c 2c 2d 9e 4c 26 27 ad c1 6a b1 88 67 cb 0b a4 52 59 fd 30 98 44 59 f6 ff 9d e9 dd d0 fd f2 c7 8e c2 fc e7 d9 97 ad 0d 54 7d 03 e6 bd 86 1c 53 ed 7f 5e 65 cb 64 74 07 69 67 4b 28 1c 6a 01 bf e3 05 e1 a2 49 72 39 eb 26 cb 78 9a 69 f0 a6 7a 9d f4 63 e8 d4 b8 a1 7a 92 a2 18 69 27 ad 19 0e 83 c9 da 1f cb 99 df fe d5 d4 89 b3 62 f0 65 c9 c7 f8 a4 95 cc c6 f1 22 59 12 78 92 cc e2 7c 20 14 08 44 2d e3 db 65 17 1a 76 08 b0 d9 e5 49 2b 5a 2d d3 d3 1c b1 5c 44 b3 0c 07 22 d6 63 16 0b 4d 17 04 c0 55 02 b3 80 4a 9b a6 e9 72 cc b4 b3 65 02 ad 12 65 f1 90 b2 e8 4e d3 8f dd 34 bb dd 48 78 b9 88 ee a0 87 27 f1 fa 98 a0 66 88 86 c3 ee 32 ed 62 57 4c 92 6c 59 6a 93 bc 23 be fc 9f ff Data Ascii: _r%V&.?Of7Ta\|,-L&'jgRY0DYT}S^edtigK(jIr9&xizczi'be"Yx\| D-evI+Z-\D"cMUJreeN4Hx'f2bWLlYj#
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 26 5c c6 8b 59 34 41 b7 bf c9 93 f1 2a a7 7a 7c 17 6f 5f 89 f3 06 75 a4 8d 2b 59 de b0 8e 6c 9b b1 eb 55 ce 6f ec 1a 5c fe 6b 22 ac 9c db c0 20 48 b3 49 93 44 f1 8d 5a c2 6d 2e a2 6f d6 92 a2 05 d4 44 69 d5 52 a2 63 db 44 69 d7 52 6e 75 eb 7c a7 86 16 c6 11 f4 4c d2 2c 3d 7d b7 9e ba 89 ac 72 de 8e 26 51 93 ff e1 57 ce d5 51 3a 81 2a 6e 5b 7d f6 83 06 da 2d 16 9a 1f d6 d3 36 91 55 ce cf cb a4 71 51 c6 af 9c 96 97 93 b4 df 24 0a fc ca 19 79 99 a6 97 34 60 17 e9 b4 91 7a d8 40 bd 25 c2 e6 c7 f5 b4 4d 64 95 13 f3 72 11 0d 57 14 76 05 3f a1 c9 ce 08 8c 6a f2 38 9e 81 cd dc a8 f4 02 b3 9a 34 d9 6a a8 07 56 1d 65 13 91 5d 4d 94 de 2c c7 db ac b1 c0 69 a0 6d b4 c3 82 ca 59 39 46 53 ea 26 ba 6e 5e a2 0a 2a a7 e6 18 5c b6 65 3f 8e 96 db d5 7a 50 39 4d c7 20 48 76 Data Ascii: &\Y4Az\|o_u+YlUo\k" HIDZm.oDiRcDiRnu\|L,=}r&QWQ:n[}-6UqQ$y4`z@%MdrWv?j84jVe]M,imY9FS&n^*\e?zP9M Hv
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: c6 a0 c7 00 4c f0 65 cc 07 24 9b 72 a8 9e c8 b8 81 26 9e ce 97 4d 3a 61 34 ac 25 dd 6a c8 8c e2 1a da 25 98 32 d1 60 99 5c 27 cd 65 57 4f 67 8a 27 6c d1 ef 96 61 d4 d1 de 44 8d 5b 61 ad ea 03 bb d9 6a 3e 6f dc e2 65 55 9f d7 c5 4d 8a bb 68 24 ab fa ac ee 12 37 56 d1 36 89 26 52 a7 9a f4 72 8b 90 b6 aa cf ea 2e 9b 1c 6e ab fa 88 2e 9f c4 4e 96 cd f5 ac 9c c5 cb f1 6a da cf b6 44 9a ad ea 43 ba 42 db 14 1b b2 aa 4f e7 2e a1 49 b3 26 aa a8 9a 6a 1a 67 3b 0c be 7e 2d 71 13 55 e5 2c 5d 2e a2 d1 08 24 fb a4 d9 18 b2 aa cf e2 02 75 d6 38 d8 e3 6a aa 18 9f 69 73 70 13 f1 a8 9a 38 9d 8f ef b6 4a 07 ab fa 14 ae 50 d3 94 69 22 36 eb 89 9b c8 2a e7 e8 f2 26 59 36 7a 3a 56 f5 01 dc d5 ac 79 3b 90 55 7d 06 77 35 e7 a3 86 74 74 ae 89 da ad a6 6e f6 ec ad ea f3 b6 28 09 Data Ascii: Le$r&M:a4%j%2`\'eWOg'laD[aj>oeUMh$7V6&Rr.n.NjDCBO.I&jg;~-qU,].$u8jisp8JPi"6*&Y6z:Vy;U}w5ttn(
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 54 fb 32 5d 4d b6 d5 f4 cc d1 af c8 40 71 b9 6f 16 fd 68 70 55 cf f5 2a e9 ce 17 c9 34 5a dc 55 93 54 b0 bd 4e c8 69 aa c9 ab b8 de 87 be 9a e9 72 87 39 7a 8f c9 19 c1 bd 5a 48 36 08 3e a0 7f f9 9a 95 07 f5 ac 1c c4 da ab 4f f9 32 31 ba a2 4a 6e b3 b2 ad f9 ed a9 4c 83 45 34 4c c0 a8 90 3c 74 58 d7 39 3e 9d 47 43 5a 0b 30 5a 26 d2 a8 bb be e8 aa 2f fd 2a 2f b9 c9 6b fd e6 2f 01 cb 04 af 9c 67 cc c3 16 16 8a be 5d cb 64 6d 94 1e 9f ea 97 76 99 3d f7 73 2e a1 4e 46 e9 00 f8 a4 cb d2 00 16 05 b3 c5 fc b8 10 5b 35 e8 1d 65 59 25 f5 bd 3a 0a 84 72 ad b2 22 fc 48 8a 0d fa b3 ba 36 1b 69 f6 af d2 5a 16 35 f5 6a e1 d3 d5 ed bb b7 8f 8b 7a e8 b0 1d cb 2d 48 ee 8b 7b d5 4c 07 06 0f bd de 70 d7 b8 86 51 ea 2a cb 80 04 a5 be 3b bd 19 a3 d2 cf e6 78 98 68 96 de 2c a2 Data Ascii: T2]M@qohpU4ZUTNir9zZH6>O21JnLE4L<tX9>GCZ0Z&//k/g]dmv=s.NF[5eY%:r"H6iZ5jz-H{LpQ*;xh,
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 2d f5 7a ed 2b d3 ff 6f 9f 1c d7 ee 87 f7 51 79 72 08 68 8f c9 41 14 bf c1 e4 38 8c d4 c3 48 d5 97 76 f6 31 45 b2 18 4a 1a ee ef ee 6a d2 b7 3c 33 fe f9 f2 ef 3f 8d ca 33 43 40 7b cc 0c a2 78 a8 89 b5 ff 26 d7 5d 4d b3 3f d1 fe d6 5f 6d 68 3d d8 ce f2 0e 76 d6 6f aa 4a 3e 3e 1e 5a 6f ca 13 46 40 7b 4c 18 a2 b8 d7 b7 27 96 a3 a6 8e 06 51 a1 e1 1d f6 d4 5a 55 75 ad da 7a 59 89 dc b7 fe d5 9b 31 f7 db c5 58 ca ac 62 69 7a 1d f7 90 3a f2 d2 b4 56 45 6f ad 8a ce fa 7e 51 a7 b6 8a 3b 6d 01 d9 9e fa 41 4d bd cb e6 27 ab be e6 3b 6d 7e 2a 92 6f dd a3 b7 63 ee 0f 62 75 a7 6d 2b 3b d4 f5 41 85 ef b2 8f 6f a3 9d 6f 2f de 5f 04 e5 fa 09 68 8f 3a 10 c5 bd 36 0a b7 da 97 65 b1 11 ac 8b 8d e0 41 62 83 aa b1 f3 68 df 9e 7a df 16 d8 79 b4 3b 95 bd b0 fb 68 2f 92 ef 34 da Data Ascii: -z+oQyrhA8Hv1EJj<3?3C@{x&]M?_mh=voJ>>ZoF@{L'QZUuzY1Xbiz:VEo~Q;mAM';m~*ocbum+;Aoo/_h:6eAbhzy;h/4
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 5f 24 24 3a 5a 53 4e 5f bf 58 dd 97 62 b3 e5 04 b7 b7 e9 f5 a2 ae 04 ba a0 f5 b8 4c f0 f3 63 ff 4d e9 a6 94 8d 32 e3 73 e3 9b 7f 34 85 8b 9d ba 70 71 9e c5 e2 f5 9d fd 4c 6a f5 1f a3 d1 a8 8c 1d 5e 7d f5 4d 50 51 e7 59 7c 49 27 c1 f1 6a ae 32 c5 f9 d7 df 7c 3d 6a ba 4e c8 a9 b8 4e a8 9c c5 93 e8 ea f1 cb aa a5 f1 3c 45 3f f9 c7 fc 27 2d 85 bd 91 c7 3f ad 37 81 55 6a bb 8d 24 b7 df 7d 4c 12 e1 2d 99 8d e3 45 b2 2c 27 18 f4 87 73 73 df 48 f7 69 d1 94 a7 a5 e8 9a bb 5e fe 6c 30 73 3e 94 23 70 9b 3d fc ed e0 e9 a3 bf 97 a2 47 15 a3 60 f4 e6 db 9f ef 1f 76 df 57 39 a7 e8 97 17 cb 37 15 dd bd b1 df 29 fd ee fb 47 ea a8 9e 7c ea 83 10 3f 3b e1 b3 ef 79 f9 68 87 6c 38 b5 3a f8 b7 91 9c b6 24 e1 97 1f 33 4e be 08 47 1f df c8 e1 60 10 04 f7 f4 91 8f a6 fc ef 8c e5 Data Ascii: _$$:ZSN_XbLcM2s4pqLj^}MPQY\|I'j2\|=jNN<E?'-?7Uj$}L-E,'ssHi^l0s>#p=G`vW97)G\|?;yhl8:$3NG`
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: d7 28 9a 26 93 3b 19 81 d9 5d 06 1e 7b 77 95 a8 95 26 1c 54 72 cf 6f 69 3a 0a 68 12 e3 97 67 e8 86 60 54 e9 0a 8a f3 b4 bf 88 a3 2b be 48 7c ed 9a ed 4a 05 c5 c0 6c 1c 0d d3 1b 0d 50 c8 0b 82 95 2f 24 a6 c2 6e a0 1b a5 30 1d b2 56 25 82 e1 05 c6 25 66 76 3f e1 70 aa 35 b8 5a b7 d8 a3 c5 e9 86 99 06 77 30 30 8e 5b 5f 24 53 fc 44 57 34 e3 45 a0 f7 3f 85 20 1e 36 ae 09 6a a2 3b 55 77 75 1b d5 99 a9 05 9a 64 46 ec 3d e8 5e f6 9d af 80 c7 46 9b 46 b7 5d b9 85 d3 53 8b 46 54 95 4e fe f4 b7 ff bc d7 3b 75 be 88 a9 9b 3e ff 37 ba 3b d1 51 91 43 8b b2 38 be 2f d8 29 70 20 1b 07 47 18 36 69 75 5b b8 9a 57 d3 98 95 8b 58 84 6a 41 2d f2 11 42 83 a9 8b ef 95 d9 fc 6d 98 5c 6b 65 53 b1 5a ba cf 5f ae cb ec 5c 2b f1 f2 3c 4a a8 f2 62 37 65 bb 2e 35 c3 c0 0a ff 08 a9 39 Data Ascii: (&;]{w&Troi:hg`T+H\|JlP/$n0V%%fv?p5Zw00[_$SDW4E? 6j;UwudF=^FF]SFTN;u>7;QC8/)p G6iu[WXjA-Bm\keSZ_\+<Jb7e.59
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 31 26 d7 0c 77 48 54 6a f2 72 ab ea d8 ba f6 85 34 da f0 da 64 31 b7 ed 14 fd da 08 d4 93 68 f5 5c b3 4a 8b 6d 42 9b bd a0 6d 52 da 1c 69 c5 02 ff e6 08 25 5c 32 03 dc 72 63 42 f6 a7 5d 13 db d4 32 0d 6d cc 03 d4 42 28 08 1b 27 d6 a1 36 b5 bf 33 0a 2c 1d ea 60 c7 1a de a8 ef e9 50 17 a1 61 68 6a 6a 0a a0 1e d6 2f 8c 82 b8 54 07 1f 39 1a 0e 4c 4d d5 00 34 c0 66 34 87 91 3e d4 a6 dd 10 3b 07 34 fb 48 9b de 14 ea d4 6f 6a 91 35 dc 32 b3 e4 55 96 fc c2 a1 17 1b 9a 79 51 4a 40 c2 3f b2 fb fd 91 5b 9d 80 55 b7 1b 06 23 a3 3a 01 bb 89 81 af 6b ea 52 02 f6 15 7d cf 1a da d5 09 58 a5 5b ce 30 aa a9 03 ab f6 a1 0d 85 54 27 60 15 1f 58 96 13 96 13 ac db e3 e0 71 0c cd ba 24 96 18 d6 be d7 af 4b 22 4e d6 20 b4 83 ba 24 62 9e f7 07 86 5b 97 84 1d 2e 18 36 86 51 97 84 Data Ascii: 1&wHTjr4d1h\JmBmRi%\2rcB]2mB('63,`Pahjj/T9LM4f4>;4Hoj52UyQJ@?[U#:kR}X[0T'`Xq$K"N $b[.6Q
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 23 d9 50 02 5f d0 a4 93 ed 80 34 c3 db 1d 1c 52 2f 20 cb e8 32 b6 78 ef 3f 4e c7 12 dc e4 fd e7 38 9f da 9d 51 9a 42 1e e5 0a d0 9c 68 77 b2 d5 e5 65 9c a1 ac 7a 16 17 c7 52 69 40 03 9d ac 3b bf 85 1e 7e 94 de 12 8a 06 65 bb 43 6b bb 52 16 c1 69 74 b4 3b b2 cc f4 68 c9 9b 13 a9 1f b5 f3 ac 0a 4e bd ba be fd 06 bc 50 c7 b0 b4 ed 37 6a ab 4d 10 da b6 1f d2 56 9b 23 2f f0 ad 00 6c 9a 36 6e cb 99 5d b6 cf ce f0 4e 9e 74 74 b4 3c 5b f6 7e fa 29 ce 5e a4 c3 d5 24 fe af a5 ca f9 64 79 fc 97 bf 00 f6 07 de 7c b3 c4 a1 f3 23 6f e3 89 ce ee 3f 9f 46 bd 64 96 c5 8b e5 59 1b 5b bd dd 89 7a 19 e4 3b 89 97 e9 ec ec 0b 93 d2 2d ce 26 47 cb 4e 74 7c 9a f6 e2 5b d4 22 19 94 c5 43 ef d3 a7 fb cf 9f 3b be e9 42 e5 b7 d4 dc 72 bc 20 74 ff 64 35 77 1d d3 b5 9c 2d 35 e7 23 b9 Data Ascii: #P_4R/ 2x?N8QBhwezRi@;~eCkRit;hNP7jMV#/l6n]Ntt<[~)^$dy\|#o?FdY[z;-&GNt\|["C;Br td5w-5#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	34.102.205.190	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:18 UTC	567	OUT	GET /js/bundle-app-production-8627-07fdd6b2e595c0888e76.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:18 UTC	831	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpFClFiqHfMHDodlikiU1iAnE-_sgy3lOpVE6e4sK0ZtTEvfCzlbwcVOx1KcyzfrHwCMSI x-goog-generation: 1711473354374448 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4951 Content-Encoding: gzip x-goog-hash: crc32c=FlzcjA== x-goog-hash: md5=bAzaDU1jvlC80sQfsE51yQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 4951 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Tue, 26 Mar 2024 17:50:20 GMT Last-Modified: Tue, 26 Mar 2024 17:15:54 GMT ETag: "6c0cda0d4d63be50bcd2c41fb04e75c9" Content-Type: application/javascript Age: 3538 Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-26 18:49:18 UTC	421	IN	Data Raw: 1f 8b 08 08 ca 02 03 66 02 ff 74 6d 70 34 33 61 77 79 69 65 6e 00 ad 5a 6d 73 da 48 b3 fd 7e 7f 05 e1 56 6d 41 3d 0a 2b 84 48 6c e7 b2 29 8c b0 ad ac 47 0a b6 b0 83 b7 52 5b 58 c8 b2 10 06 17 2f 06 c9 f1 7f bf e7 f4 08 1b 67 93 bd 5b 75 b7 76 2b d1 db cc f4 74 f7 39 7d 7a 48 79 b5 88 4a 8b e5 3c 09 97 e5 0f 95 45 34 b9 a9 ad a3 eb fb 61 98 76 6e 57 d3 74 12 0d 47 71 34 4d a2 d6 cf 5f 7d fb f6 c7 d7 6a ed 7e b5 b8 ad fc f1 c7 de 3b eb fd 57 e3 b1 6e f1 e2 a0 a2 0c cf 70 aa ad df 1e 9d da bc e2 55 0d a7 36 aa 78 c6 e3 28 ba 19 ae 26 cb 83 0a 5e f5 9f aa 1f 1e 86 f3 d2 b8 e5 54 de ef 35 f7 f6 1b 55 c3 c5 f5 bb 77 ef ad 7d bb 6a 04 7c fe fe 7d d3 7c 57 35 e2 56 79 34 5c 0e 0f 92 bb 61 1c fd ba 78 88 ff b3 b9 9b 7c b8 1e 2e a2 77 b6 f1 f9 c4 b3 ae b2 c3 c6 f0 Data Ascii: ftmp43awyienZmsH~VmA=+Hl)GR[X/g[uv+t9}zHyJ<E4avnWtGq4M_}j~;WnpU6x(&^T5Uw}j\|}\|W5Vy4\ax\|.w
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: 1c 55 3f 1d 0f 1a 2a 88 63 15 b4 cd d3 71 7b e3 a5 2a 57 e7 f6 da c3 73 d7 e9 ae bd 8e bd 56 c1 20 56 e3 70 85 37 b9 97 70 7c 7b a5 c6 71 8e 3d 36 4e c7 7c 3a 88 fd a0 bf f2 c6 a1 ad 52 95 79 99 8d 67 ca 72 9d 74 83 39 1b 2a 77 63 95 77 b1 e6 c0 f2 b2 b6 cd f7 5e a7 9d 7b e7 b6 e5 e5 5d db 75 62 ce 63 06 4e 5f db 10 a4 b1 ef 70 bd 33 f5 23 bb 2f 13 37 be ba 9b 2c ae e1 6b d7 ec 37 cf c6 9f 8e cf 12 f7 e1 73 3c db 0b 8f 8f cc 61 e7 f0 6e 78 b9 59 9c 7e f9 54 bf 3e ee c3 ef 17 d6 d5 65 f3 e1 ea b8 87 58 78 8b e1 97 f6 0f 7d 78 85 f9 82 e0 c5 06 15 f4 68 57 c3 eb af 77 6c ed 9a 62 7f 7e e1 ec ec 69 e3 89 bd 61 7d d7 27 18 9f c3 bf a6 4a da 3b 3e e9 e6 3e fc ab f2 91 f3 ca a7 79 6f e5 39 2a 73 1d 45 9f 59 f0 25 c6 ab 35 c6 37 b1 f7 dd f5 73 d5 b1 2d 3f 98 bc Data Ascii: U?cq{WsV Vp7p\|{q=6N\|:Rygrt9wcw^{]ubcN_p3#/7,k7s<anxY~T>eXx}xhWwlb~ia}'J;>>yo9sEY%57s-?
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: bf 96 3a 0f fc 21 b7 53 d8 d4 ce 7c e7 ca d1 3a 21 6c a2 ce a3 c6 d8 36 f2 c5 2c 74 02 e6 74 a1 3b b1 27 68 72 ea 00 8e d7 35 8f ba d3 45 7d 3b e2 78 93 e3 b1 66 93 d8 c0 f8 a6 8c ef 00 47 b0 d1 0f 88 d1 b4 41 9f 00 b3 c0 68 1f b8 85 5e 01 fe fd 2e f8 61 ec 52 d7 82 1f 62 e4 a8 5b d7 fc c0 fc 00 f7 a2 ee fa cc 67 e6 c9 18 b6 38 23 47 e7 93 b2 99 eb f4 83 9e 17 dc 00 1b 30 07 f6 d2 d3 71 1a 03 d3 ac 23 9a fb b3 02 17 98 c3 05 96 fb e2 23 dc 23 46 ee 46 63 79 d0 d0 f1 7d 7e 46 ce 00 06 a1 1a 83 2e de 87 19 78 a6 51 d4 1d f1 91 12 cc 82 ab 45 a7 ba 4d 8d 69 f0 c5 38 5e 09 f7 51 57 05 29 ec 1a 30 9f 1b 58 b7 c0 37 35 3a 34 28 6d cf 15 f7 8f f5 06 e4 36 d4 20 bb a9 f2 14 73 f4 a8 4f 2d f1 b3 7c 0b 7f 06 9a 47 3d d6 1d f2 d2 18 d8 18 f7 1b 3e d7 02 47 41 d3 e7 Data Ascii: :!S\|:!l6,tt;'hr5E};xfGAh^.aRb[g8#G0q###FFcy}~F.xQEMi8^QW)0X75:4(m6 sO-\|G=>GA
2024-03-26 18:49:18 UTC	1252	IN	Data Raw: b5 8e 18 ef 35 35 7f ba db 1e 96 18 37 e5 2c 41 63 5c fa 0e c1 38 74 7e c1 a5 0d a9 61 82 b1 34 13 ad 85 dc 86 8f 58 0f 1b a2 6b 84 6b 30 4e f8 84 da 27 dd 88 4e 91 6f 39 ce b5 35 9e bb a8 5b 5c 5f b1 1e 58 a2 8f a8 89 c6 b1 59 e0 39 a3 2e 27 1f b0 06 a8 ac c0 b3 9c 51 11 cf bd 3a f1 ae f1 8c 98 15 78 e6 d9 a7 8c e7 59 a2 d3 17 ed 81 1a 6b 6e b1 cb fa a2 b1 0b dd af f3 11 fb 8f f9 9e 7a a6 49 7f 14 fa 9c be 14 ec a2 be 5b 7a 7d c6 92 cf a8 3f c3 fa 56 0b f9 1a cf ec 87 36 85 16 c2 dc e1 77 df 31 ef a8 3f 88 fb 5e 03 7e e6 da 52 2b fc f3 d7 6b fb 5c 5b d6 69 cb 99 81 3e b3 10 0e ca b4 0e 0b 0b 2e ec 93 43 a8 cb 77 f7 5e 17 1d 48 de 21 27 53 6b 64 fa fc c1 a3 ce dd f5 27 fb b2 a0 57 f0 6b 1f f9 74 e6 e8 be 6d d0 28 f8 75 03 4c d4 5d dd d7 35 e4 4c 43 ce 5c Data Ascii: 557,Ac\8t~a4Xkk0N'No95[\_XY9.'Q:xYknzI[z}?V6w1?^~R+k\[i>.Cw^H!'Skd'Wktm(uL]5LC\
2024-03-26 18:49:18 UTC	774	IN	Data Raw: 7d 33 0d dc e5 bc 73 aa 18 88 4c 7a e3 d4 f8 cf 2a 92 69 8c 7d 56 d2 56 19 29 79 39 4c 96 e5 64 5a 72 aa 1f bb 95 ed 70 a7 56 bc 91 69 bc ea 41 80 f4 2b 2f e7 c3 64 82 c1 f2 f9 47 ce b6 7d 72 d0 ab 1a 83 5a 38 9c 86 d1 64 17 34 da f2 37 62 f9 f7 7b 66 76 8f 5b 3e c2 b2 8d d7 13 e6 b8 99 ac 16 b7 3f c0 dd 8b 0f 3e c6 07 e7 15 84 0a e0 1b 3c 61 16 a7 62 bd 7f d7 68 d6 e1 6a 5c ef bd af bf af e3 3a c5 75 dd 6a 02 99 55 98 ee d4 a6 70 be d1 df 81 5c f5 71 12 2d 1f c3 d9 f4 26 89 0f bc a7 16 13 c0 ab dd cc 67 77 dd 3b 6c 0a a4 e0 d5 96 33 7d fd 47 62 6c be d2 b7 6e 6d b5 88 ce 97 c0 7f b5 f2 06 ab 3c 8e 92 c5 fd 70 19 de 1e ac 9e f8 fe b4 76 54 ad 90 08 7c a4 ee 6f 8f aa 76 3f 8f 1e 90 41 8e fe 07 29 78 a5 6a 8b e5 ec fe f3 7c 76 3f 8c 87 7a 8b c6 a6 f2 c6 ac Data Ascii: }3sLz*i}VV)y9LdZrpViA+/dG}rZ8d47b{fv[>?><abhj\:ujUp\q-&gw;l3}Gblnm<pvT\|ov?A)xj\|v?z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49710	34.28.233.175	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:19 UTC	1129	OUT	GET /favicon.ico HTTP/1.1 Host: agattu.plix.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-CSRF-TOKEN=fcZtoND_CpTzUM1DY40SoF3I-HkfnqFAofsXMIwZ7vW9V3UvxaSKDEyYChry6sXRa7GJBcaPFVad_phs9nAQ2A; _leadgenie_session=TRUFgtWpIU75SU%2FoCHHs89PS81pXQcweoa%2F3Cc2FYMjybTkCZ67q9pba9vrnmBYSdv%2F%2FSvFnK1YUXVudHCNkMQ9WPD3BJF3ZExUlJ1d569gcZM1fOAG2HATlGJigbdL2xavLd9QodvZCj6na6232cve9UfNzqD7QLHS8uqHa241ezy1Q2%2BOBTFE3D%2BKvzfp2Zo8h2R2vOWY5cRymM%2Fu8a7vFplYR2lq%2FzL3lTBMLFrTmhPOnoIaw7QfZsfM3WmPSspEtLkrml5wFauEOjKEMCcKoIvG071wmb80%3D--%2Bw4stxH18yyMcNAR--BDp4AkvtU3DFBJZC5HwbEA%3D%3D; GCLB=CJ2F0dvQtYH3rAEQAw
2024-03-26 18:49:19 UTC	304	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Length: 1406 Content-Type: image/x-icon Date: Tue, 26 Mar 2024 18:49:19 GMT Etag: "66030166-57e" Last-Modified: Tue, 26 Mar 2024 17:09:58 GMT Server: nginx Via: 1.1 google Connection: close
2024-03-26 18:49:19 UTC	882	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1e 62 77 00 00 00 00 00 04 0d 10 00 08 1a 20 00 0c 27 30 00 3c c2 ee 00 40 cf fe 00 18 4e 60 00 1c 5b 70 00 20 68 80 00 02 07 08 00 0a 21 28 00 36 af d6 00 16 48 58 00 3e c9 f6 00 34 a8 cf 00 38 b5 df 00 3c c2 ef 00 32 a2 c7 00 36 af d7 00 20 68 7f 00 0a 20 28 00 34 a9 cf 00 1a 54 68 00 1e 61 78 00 22 6e 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( bw '0<@N`[p h!(6HX>48<26 h (4Thax"n
2024-03-26 18:49:19 UTC	524	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 0f 07 07 07 08 06 06 06 06 06 06 0c 07 0f 06 06 06 01 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	162.247.243.39	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:19 UTC	569	OUT	GET /nr-spa-1.253.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://agattu.plix.ai sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:20 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 101365 x-amz-id-2: jjfyNpfC+pQ23r/r6xEhW3fL0rfX4ezXnqJcjSaWn/EcGbH+7QPLqCRxELUnmWGReKY/6C9YhEg= x-amz-request-id: EJBYWJYSK9BJSVZW Last-Modified: Wed, 13 Mar 2024 21:07:25 GMT ETag: "4a6ecb6da3c4e819773b0e3331ff5e7a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: fCBpomkNr2k.mGTnq1v.Ze6YZpq.zil8 Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 26 Mar 2024 18:49:20 GMT Via: 1.1 varnish X-Served-By: cache-iad-kjyo7100075-IAD X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 35 33 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 33 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 33 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 31 5d 2c 7b 39 31 33 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 6c 65 74 20 73 3b 69 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 73 3d 65 7d 29 29 Data Ascii: /! For license information please see nr-spa-1.253.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.253.0.PROD"]=self["webpackChunk:NRBA-1.253.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>r});const n=new Promise((e=>{s=e}))
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 69 6f 6e 44 6f 6e 65 22 2c 28 28 65 2c 74 29 3d 3e 7b 76 5b 65 2e 69 64 5d 26 26 28 74 7c 7c 76 5b 65 2e 69 64 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 2e 70 75 73 68 28 65 29 7d 29 29 2c 64 65 6c 65 74 65 20 76 5b 65 2e 69 64 5d 29 7d 29 29 2c 28 30 2c 73 2e 58 29 28 22 72 65 74 75 72 6e 41 6a 61 78 22 2c 28 65 3d 3e 67 2e 70 75 73 68 28 65 29 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 74 68 69 73 2e 65 65 29 3b 63 6f 6e 73 74 20 4e 3d 6e 65 77 20 63 2e 6f 28 22 65 76 65 6e 74 73 22 2c 7b 6f 6e 46 69 6e 69 73 68 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 74 72 79 26 26 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 67 2e 75 6e 73 68 69 66 74 28 2e 2e 2e 62 29 2c 62 3d 5b 5d 29 7d 2c 67 65 74 50 61 79 6c Data Ascii: ionDone",((e,t)=>{v[e.id]&&(t\|\|v[e.id].forEach((function(e){g.push(e)})),delete v[e.id])})),(0,s.X)("returnAjax",(e=>g.push(e)),this.featureName,this.ee);const N=new c.o("events",{onFinished:function(e){e.retry&&b.length>0&&(g.unshift(...b),b=[])},getPayl
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 73 28 22 47 65 6e 65 72 69 63 2f 50 65 72 66 6f 72 6d 61 6e 63 65 2f 4d 61 72 6b 2f 53 65 65 6e 22 2c 72 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 50 65 72 66 6f 72 6d 61 6e 63 65 2f 4d 65 61 73 75 72 65 2f 53 65 65 6e 22 2c 61 2e 6c 65 6e 67 74 68 29 7d 7d 63 61 74 63 68 28 6f 29 7b 7d 7d 7d 7d 2c 31 38 33 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 41 67 67 72 65 67 61 74 65 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 73 3d 69 28 31 32 38 34 29 2c 6e 3d 69 28 34 33 35 31 29 2c 72 3d 69 28 34 33 32 32 29 2c 61 3d 69 28 32 35 37 33 29 2c 6f 3d 69 28 34 32 32 32 29 2c 63 3d 69 28 32 33 34 29 2c 68 3d 69 28 34 36 34 39 29 Data Ascii: s("Generic/Performance/Mark/Seen",r.length),this.storeSupportabilityMetrics("Generic/Performance/Measure/Seen",a.length)}}catch(o){}}}},1832:(e,t,i)=>{i.r(t),i.d(t,{Aggregate:()=>l});var s=i(1284),n=i(4351),r=i(4322),a=i(2573),o=i(4222),c=i(234),h=i(4649)
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 72 74 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 66 6f 72 28 28 30 2c 75 2e 5a 29 28 22 53 52 20 61 62 6f 72 74 65 64 20 2d 2d 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 29 29 2c 28 30 2c 66 2e 70 29 28 6c 2e 78 53 2c 5b 22 53 65 73 73 69 6f 6e 52 65 70 6c 61 79 2f 41 62 6f 72 74 2f 22 2e 63 6f 6e 63 61 74 28 65 2e 73 6d 29 5d 2c 76 6f 69 64 20 30 2c 70 2e 44 2e 6d 65 74 72 69 63 73 2c 74 68 69 73 2e 65 65 29 2c 74 68 69 73 2e 62 6c 6f 63 6b 65 64 3d 21 30 2c 74 68 69 73 2e 6d 6f 64 65 3d 76 2e 49 4b 2e 4f 46 46 2c 74 68 69 73 2e 72 65 63 6f 72 64 65 72 3f 2e 73 74 6f 70 52 65 63 6f 72 Data Ascii: rt(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};for((0,u.Z)("SR aborted -- ".concat(e.message)),(0,f.p)(l.xS,["SessionReplay/Abort/".concat(e.sm)],void 0,p.D.metrics,this.ee),this.blocked=!0,this.mode=v.IK.OFF,this.recorder?.stopRecor
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 61 63 74 69 6f 6e 73 54 6f 48 61 72 76 65 73 74 2e 70 75 73 68 28 74 68 69 73 2e 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 49 6e 74 65 72 61 63 74 69 6f 6e 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 49 6e 74 65 72 61 63 74 69 6f 6e 3d 6e 75 6c 6c 2c 28 30 2c 6e 2e 70 29 28 75 2e 78 53 2c 5b 22 53 6f 66 74 4e 61 76 2f 49 6e 74 65 72 61 63 74 69 6f 6e 2f 49 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2f 44 75 72 61 74 69 6f 6e 2f 4d 73 22 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 69 29 5d 2c 76 6f 69 64 20 30 2c 68 2e 44 2e 6d 65 74 72 69 63 73 2c 74 68 69 73 2e 65 65 29 7d 29 29 2c 74 68 69 73 2e 6c 61 74 65 73 74 52 6f 75 74 65 53 65 74 42 79 41 70 69 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 6e 50 72 6f 67 72 Data Ascii: actionsToHarvest.push(this.initialPageLoadInteraction),this.initialPageLoadInteraction=null,(0,n.p)(u.xS,["SoftNav/Interaction/InitialPageLoad/Duration/Ms",Math.round(i)],void 0,h.D.metrics,this.ee)})),this.latestRouteSetByApi=null,this.interactionInProgr
2024-03-26 18:49:20 UTC	16384	IN	Data Raw: 75 72 65 4e 61 6d 65 2c 6d 29 2c 28 30 2c 73 2e 58 29 28 55 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 28 28 74 68 69 73 2e 67 65 74 43 74 78 3f 74 68 69 73 2e 67 65 74 43 74 78 28 29 3a 74 68 69 73 29 5b 7a 5d 29 7d 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 6d 29 2c 28 30 2c 73 2e 58 29 28 48 2b 22 67 65 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3b 73 3d 74 68 69 73 2e 69 78 6e 3d 69 3f 2e 63 75 72 72 65 6e 74 4e 6f 64 65 3f 2e 5b 58 5d 3f 69 2e 63 75 72 72 65 6e 74 4e 6f 64 65 5b 58 5d 3a 6e 75 6c 6c 3d 3d 3d 69 3f 2e 70 72 65 76 4e 6f 64 65 3f 2e 65 6e 64 26 26 22 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 22 21 3d 3d 69 3f 2e 70 72 65 76 4e 6f 64 65 3f 2e 5b 58 5d 3f 2e 72 6f 6f 74 3f 2e 5b 58 5d 3f 2e 65 76 65 Data Ascii: ureName,m),(0,s.X)(U,(function(){ne((this.getCtx?this.getCtx():this)[z])}),this.featureName,m),(0,s.X)(H+"get",(function(t){var s;s=this.ixn=i?.currentNode?.[X]?i.currentNode[X]:null===i?.prevNode?.end&&"initialPageLoad"!==i?.prevNode?.[X]?.root?.[X]?.eve
2024-03-26 18:49:20 UTC	3061	IN	Data Raw: 29 7d 2c 44 3d 5b 31 30 30 2c 33 30 30 5d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 49 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 72 3d 4e 28 29 2c 6f 3d 6c 28 22 46 49 44 22 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 6f 2e 76 61 6c 75 65 3d 65 2e 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 2d 65 2e 73 74 61 72 74 54 69 6d 65 2c 6f 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 69 28 21 30 29 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 63 29 7d 2c 64 3d 66 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 2c 75 29 3b 69 3d 70 28 65 2c 6f 2c 44 2c 74 2e 72 65 70 6f 72 74 41 6c Data Ascii: )},D=[100,300],j=function(e,t){t=t\|\|{},I((function(){var i,r=N(),o=l("FID"),c=function(e){e.startTime<r.firstHiddenTime&&(o.value=e.processingStart-e.startTime,o.entries.push(e),i(!0))},u=function(e){e.forEach(c)},d=f("first-input",u);i=p(e,o,D,t.reportAl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-26 18:49:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=130525 Date: Tue, 26 Mar 2024 18:49:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	34.28.233.175	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:20 UTC	864	OUT	GET /favicon.ico HTTP/1.1 Host: agattu.plix.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-CSRF-TOKEN=fcZtoND_CpTzUM1DY40SoF3I-HkfnqFAofsXMIwZ7vW9V3UvxaSKDEyYChry6sXRa7GJBcaPFVad_phs9nAQ2A; _leadgenie_session=TRUFgtWpIU75SU%2FoCHHs89PS81pXQcweoa%2F3Cc2FYMjybTkCZ67q9pba9vrnmBYSdv%2F%2FSvFnK1YUXVudHCNkMQ9WPD3BJF3ZExUlJ1d569gcZM1fOAG2HATlGJigbdL2xavLd9QodvZCj6na6232cve9UfNzqD7QLHS8uqHa241ezy1Q2%2BOBTFE3D%2BKvzfp2Zo8h2R2vOWY5cRymM%2Fu8a7vFplYR2lq%2FzL3lTBMLFrTmhPOnoIaw7QfZsfM3WmPSspEtLkrml5wFauEOjKEMCcKoIvG071wmb80%3D--%2Bw4stxH18yyMcNAR--BDp4AkvtU3DFBJZC5HwbEA%3D%3D; GCLB=CJ2F0dvQtYH3rAEQAw
2024-03-26 18:49:20 UTC	304	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Length: 1406 Content-Type: image/x-icon Date: Tue, 26 Mar 2024 18:49:20 GMT Etag: "66030166-57e" Last-Modified: Tue, 26 Mar 2024 17:09:58 GMT Server: nginx Via: 1.1 google Connection: close
2024-03-26 18:49:20 UTC	882	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 1e 62 77 00 00 00 00 00 04 0d 10 00 08 1a 20 00 0c 27 30 00 3c c2 ee 00 40 cf fe 00 18 4e 60 00 1c 5b 70 00 20 68 80 00 02 07 08 00 0a 21 28 00 36 af d6 00 16 48 58 00 3e c9 f6 00 34 a8 cf 00 38 b5 df 00 3c c2 ef 00 32 a2 c7 00 36 af d7 00 20 68 7f 00 0a 20 28 00 34 a9 cf 00 1a 54 68 00 1e 61 78 00 22 6e 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( bw '0<@N`[p h!(6HX>48<26 h (4Thax"n
2024-03-26 18:49:20 UTC	524	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 06 0f 07 07 07 08 06 06 06 06 06 06 0c 07 0f 06 06 06 01 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	162.247.243.29	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:20 UTC	1142	OUT	POST /1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://agattu.plix.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:21 UTC	439	IN	HTTP/1.1 200 Connection: close Content-Length: 48 date: Tue, 26 Mar 2024 18:49:21 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://agattu.plix.ai access-control-expose-headers: Date timing-allow-origin: https://agattu.plix.ai x-served-by: cache-iad-kiad7000139-IAD
2024-03-26 18:49:21 UTC	48	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 30 2c 22 69 6e 73 22 3a 30 2c 22 73 70 61 22 3a 30 2c 22 73 72 22 3a 31 2c 22 73 72 65 22 3a 31 7d Data Ascii: {"stn":0,"err":0,"ins":0,"spa":0,"sr":1,"sre":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-26 18:49:20 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=130480 Date: Tue, 26 Mar 2024 18:49:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-26 18:49:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	162.247.243.29	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:22 UTC	894	OUT	GET /1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=4125&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0&af=err,xhr,stn,ins,spa&ap=11&be=909&fe=2284&dc=1223&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1711478954827,%22n%22:0,%22f%22:4,%22dn%22:325,%22dne%22:325,%22c%22:325,%22s%22:326,%22ce%22:616,%22rq%22:616,%22rp%22:910,%22rpe%22:1163,%22di%22:1183,%22ds%22:2132,%22de%22:2132,%22dc%22:3189,%22l%22:3189,%22le%22:3193%7D,%22navigation%22:%7B%7D%7D&fp=2245&fcp=3268 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:23 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Tue, 26 Mar 2024 18:49:23 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-iad-kcgs7200169-IAD
2024-03-26 18:49:23 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	162.247.243.29	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:32 UTC	792	OUT	POST /events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=15276&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 143 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://agattu.plix.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:32 UTC	143	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 63 70 2c 32 69 73 2c 33 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 34 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 32 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 35 3b 65 2c 27 66 70 2c 31 71 64 2c 33 3b 35 2c 31 2c 32 3b 36 2c 33 2c 32 30 30 2e 3b 36 2c 34 2c 31 2e 35 35 3b 65 2c 27 6c 6f 61 64 2c 32 67 70 2c 33 3b 35 2c 31 2c 32 3b 36 2c 33 2c 32 30 30 2e 3b 36 2c 34 2c 31 2e 35 35 Data Ascii: bel.6;e,'fcp,2is,3;5,'net-etype,'4g;6,'net-rtt,200.;6,'net-dlink,1.55;e,'fp,1qd,3;5,1,2;6,3,200.;6,4,1.55;e,'load,2gp,3;5,1,2;6,3,200.;6,4,1.55
2024-03-26 18:49:32 UTC	312	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Tue, 26 Mar 2024 18:49:32 GMT content-type: image/gif access-control-allow-origin: https://agattu.plix.ai access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-iad-kjyo7100021-IAD
2024-03-26 18:49:32 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49731	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:33 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1711478941023&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-03-26 18:49:33 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-03-26 18:49:33 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-03-26 18:49:33 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1600D16751A947D492B3539DC8EF4964 Ref B: SN4AA2022405051 Ref C: 2024-03-26T18:49:33Z Date: Tue, 26 Mar 2024 18:49:33 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1711478973.71da5d4c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	34.102.205.190	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:49:36 UTC	567	OUT	GET /js/bundle-app-production-7977-3598acce02a7abed456a.js HTTP/1.1 Host: assets.apollo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:49:36 UTC	838	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPq38V33r8KkFlkyxvJIunjO0hocbwG4uzjFelFCFJqoK5htVpRmuD7GO7wdXbKMXXRONAbWzSJldw x-goog-generation: 1711473358748066 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 9794 Content-Encoding: gzip x-goog-hash: crc32c=bYkIdA== x-goog-hash: md5=q3iAHvk+EGi8RqQNedBltQ== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 9794 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Date: Tue, 26 Mar 2024 18:28:08 GMT Age: 1288 Last-Modified: Tue, 26 Mar 2024 17:15:58 GMT ETag: "ab78801ef93e1068bc46a40d79d065b5" Content-Type: application/javascript Cache-Control: no-transform,public,immutable,max-age=1800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-26 18:49:36 UTC	414	IN	Data Raw: 1f 8b 08 08 ce 02 03 66 02 ff 74 6d 70 61 61 69 72 64 36 71 34 00 ad 7c 6b 73 e3 46 92 ed f7 fb 2b 34 da d8 1d 29 96 d2 e0 c9 87 14 ba 1b b4 c0 96 d1 db 00 4d 09 6c 9b 72 38 26 40 00 84 40 52 a4 cc 47 13 40 4f ff f7 cd 93 59 a4 40 91 f2 f4 ec 3a 34 b6 bb 2b ab 50 99 59 f9 38 99 55 9a b3 65 32 1d 5d 6e 92 e1 4b 18 4d 6e 9f d6 b3 c9 34 09 e3 34 99 65 c9 cd fb a4 7f fc e3 d7 df ce 2f 5f d6 cb a7 b3 5f 7f 6d b4 1a 8d df 6a 5f 5b 4d a3 65 b6 ae ce bc 9a 5f 73 ce 6f fe ff d7 d3 f5 32 39 59 ae 16 59 b4 3a bd 76 2e 17 67 fe f9 f5 97 70 71 32 be 71 ce 5a 5a 53 6b ea e7 35 f7 c6 b9 9c 9d 8d cf 6b 73 0c 1a 66 dd b2 cf 6b 25 0f ce cf cf ce cf dc b3 f3 f3 eb 52 ed e4 5d 66 71 ed af 4f ab e7 e9 af 71 b8 0a 2f c2 97 f9 74 3a cf e6 37 ab c5 3a f9 ad 76 b9 1c 5e 2c 9f e6 Data Ascii: ftmpaaird6q4\|ksF+4)Mlr8&@@RG@OY@:4+PY8Ue2]nKMn44e/__mj_[Me_so29YY:v.gpq2qZZSk5ksfk%R]fqOq/t:7:v^,
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: f9 ea 29 9b a5 57 d9 2c 5b d1 26 df fe ef ca 8a c0 d2 c5 cb 22 7b 0e 17 c5 85 ae 5d 9d fc 5b d2 1a 19 a3 d1 f5 5b 9a 01 5a d4 88 a3 51 74 40 33 41 6b 0e 87 8d 51 eb 80 66 81 66 69 cd d6 a8 79 40 b3 41 d3 ad 7a 32 aa 1f d0 ea a0 69 4d db 88 8c 03 5a 83 69 43 63 d4 30 0f 68 4d a6 99 7a dd ac d0 e6 4b 52 d8 97 44 09 d8 18 25 a3 23 44 91 b0 39 8a 13 e3 90 28 22 46 a3 30 3a b2 92 65 b4 47 49 1c d6 0f 89 2c a4 19 47 51 d3 3e 24 b2 94 7a 3c 34 ea cd 43 a2 12 b3 61 9a a3 43 a2 92 d3 34 f5 e1 8e 38 4b d2 f0 55 ce d1 28 69 26 cd 43 22 cb 39 8a a2 46 d4 38 24 9a b2 b2 49 3f 87 44 96 73 d4 b0 0d db 38 24 b2 9c 71 cb ac 9b f5 43 22 cb 39 34 f4 58 8f 0f 89 2c 67 c3 d4 86 da 11 51 9a a2 3e cd d4 5e 15 1f 85 eb 55 36 9f 6d c5 1c 19 49 eb 80 a6 a4 8c e3 8a 94 5b 9a 08 19 Data Ascii: )W,[&"{][[ZQt@3AkQffiy@Az2iMZiCc0hMzKRD%#D9("F0:eGI,GQ>$z<4CaC48KU(i&C"9F8$I?Ds8$qC"94X,gQ>^U6mI[
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: de 9f 23 25 8c d1 68 86 cd 77 e7 58 52 79 5b 51 73 f8 ee 1c 41 8b a1 11 36 de ff 8e 58 cb c8 d0 ed d1 bb 73 04 3b da 7a cb aa bf 3b 87 f5 63 0d 75 cd 38 d0 4f 05 47 26 46 6c 8d 1a c7 27 28 6b 69 99 49 74 7c 02 ab a5 d5 ac 37 12 eb f8 04 29 79 22 33 8e e3 e3 13 a4 e8 b1 75 2a 90 8f 4f a8 4b e3 4a 6f 54 02 f8 de 04 29 7c 42 6d 64 bf 23 45 53 55 46 91 75 e0 c3 15 35 34 09 c1 c4 47 e9 a2 85 66 14 b6 ea 47 e9 52 f5 e9 c3 66 c3 3a 4a b7 a4 2d 17 36 ec e3 fb db e2 4f cd 91 de 3a 4a 17 0d 44 f5 50 d7 8f d2 59 01 e6 c8 6e 6a c9 51 ba c8 1f 99 89 16 be a5 bf ac 2a 2a 18 e9 14 3a ac f7 a6 48 e9 6b b7 ec 78 f4 de 14 56 44 54 af 27 6f 73 c3 eb 14 29 33 1a 54 22 37 df 9b 22 55 7f ac 87 43 e3 bd 29 52 fc 27 ba d5 7c 97 17 89 a7 9a a6 35 b4 f7 a6 88 5e 46 5a d3 ac ff 09 Data Ascii: #%hwXRy[QsA6Xs;z;cu8OG&Fl'(kiIt\|7)y"3uOKJoT)\|Bmd#ESUFu54GfGRf:J-6O:JDPYnjQ*:HkxVDT'os)3T"7"UC)R'\|5^FZ
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: 5f bf 5d cf 2f b3 d9 32 59 ac 6e 4e a1 f5 d3 da fc 72 49 df 9d 26 ab f9 ec e6 2f 3a cf 2b 6f c6 67 6e 6d 7e 7e ed 5d 26 39 b2 c8 92 f6 12 d3 fb c7 3f be 7e fb 56 33 74 bc 20 fa e3 87 43 35 e7 32 3e f3 6b 5f b7 6c 9d d1 bc f4 db eb 7b a2 46 d3 26 39 45 48 d1 04 3f 29 ba 9c 9d b9 78 4f 74 0a c4 7b 45 ca 4d 93 bf 2d bf a4 ff 99 3f 4f af 87 e1 32 a9 5b b5 9f 7e f4 8d c7 e2 07 33 fc f9 5e 0b 1d 2d f3 cb 76 e6 de 3d 4d c3 9f e3 79 bc fd fb 8f 8f 2f 8f bf c4 b7 43 33 6d b9 e3 76 ea dd b6 4d f9 c7 4d 1f 9f a7 cb 21 cd 1b 3e b7 d6 8f 0f 6e 9a dc e9 cb e1 cc 6b b9 cf 4f 5a fc 63 bb fe a9 68 99 b1 19 ad e3 d2 5b 0f cd 8f b3 4f a5 bb f1 9c f6 97 c8 7c 9c b9 63 eb bf 7f ba 8b d2 81 91 bf 44 b7 fa 66 f0 cb fd fc a7 87 8f 7a f4 bc 99 bb 86 bf 0c 7f 69 6f 7e 29 7b 1b 2f Data Ascii: _]/2YnNrI&/:+ognm~~]&9?~V3t C52>k_l{F&9EH?)xOt{EM-?O2[~3^-v=My/C3mvMM!>nkOZch[O\|cDfzio~){/
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: 0c 70 e6 b4 0f e5 ae e0 23 e9 a8 83 5c 62 2a bd 6e c8 e6 95 6c c8 89 90 ad 0f 9b d1 a1 c3 2e 9f df 84 ce 02 67 45 f1 d0 f1 39 17 51 6c d5 a0 43 e8 b8 eb f4 0d 75 06 94 97 7a 62 d3 65 bf 60 9b be b5 6c c4 5f e1 8f ec 65 fc e8 b1 cf 04 9e 45 fb c3 26 37 a4 17 a5 bb 3e d9 34 c5 02 27 42 7c 2c fc 09 db 17 e5 95 01 e9 a9 0f 9f d4 7c a7 c7 74 8a e3 24 73 9f f2 1f e9 21 40 fc a0 98 5d b6 11 73 28 77 21 ce 47 05 c5 5c e2 a9 43 36 80 35 14 4b 82 c1 86 ec cb 20 9b a6 38 3d a1 6f f6 4a e6 89 74 4a b1 09 36 b9 f1 85 27 8d d6 20 f6 11 4f 9e c5 76 8c dc 31 6e db 81 33 20 3d 0d 4a f6 3d e8 81 be 43 e7 84 6f d2 9e 1e ec 93 f4 4c 39 b7 f4 38 a6 91 bf 5b 3e 6c 11 74 ca 09 ae f0 94 d3 19 d2 7a e4 11 d2 d3 c4 d3 7d f0 54 f6 55 4e a7 58 3a 1e b0 4c 9e 33 41 7e 46 ec 35 c8 9e Data Ascii: p#\b*nl.gE9QlCuzbe`l_eE&7>4'B\|,\|t$s!@]s(w!G\C65K 8=oJtJ6' Ov1n3 =J=CoL98[>ltz}TUNX:L3A~F5
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: 66 b8 dc ab 5a 9e ed 2f c3 e7 7e e6 fe f8 b4 1a de d9 25 b1 3b 8f 7f bc df 74 b3 e6 97 d8 8c cd 4f b3 a8 fc f4 dc 2a 1e 8b 66 81 23 f9 64 62 6f f7 cf 69 07 00 4a 8c 39 9c e5 e2 a2 3d 82 22 13 72 4b 82 80 62 46 70 51 b4 32 76 74 32 83 63 74 93 61 32 85 3e b8 10 b9 53 2e ed 13 b8 06 99 0b d6 c2 45 14 dc a5 f0 bb 9b 4f a9 1e d0 89 cc af 47 ff ed 19 db bf bf fe f7 ed 78 84 d2 91 52 56 4c 30 9c 61 6c f5 fb 1a bb 72 56 e5 77 3b 3f 7a e5 f7 f3 8b c8 1e f0 1a 2a 0f 00 3b 00 c3 26 05 a7 14 07 6e cd ee b8 61 d9 15 9d 64 07 9c b5 b9 44 7b a5 9b 5c 06 51 89 4b b2 6f e0 5a 1e 64 e7 94 c4 f0 c6 86 ac 04 09 55 09 42 6b 90 1a 5f f7 47 09 a2 d6 23 15 11 04 e7 12 72 c0 7b aa 52 c6 ec 12 5d a5 2a 82 99 1d 55 a2 a4 a0 57 f6 47 29 14 59 f8 3e 41 18 a4 63 b4 b3 74 2e af c6 29 Data Ascii: fZ/~%;tOf#dboiJ9="rKbFpQ2vt2cta2>S.EOGxRVL0alrVw;?z;&nadD{\QKoZdUBk_G#r{R]*UWG)Y>Act.)
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: b9 77 3e 77 8e eb 0c f1 16 2d 82 9e 94 e1 01 cb 8c 76 35 ae 2d 34 94 45 24 1f f0 45 ce ed 84 71 5f b5 18 db dc ba 93 96 31 4a e5 1e e9 09 fa 06 0e 73 0d b6 5d 94 93 e4 ab 58 2b 57 45 9e d8 2e d9 f2 16 c7 f9 dc 3a 46 c9 dc a7 58 8c bd d1 8e 9b 94 be 6a f1 78 63 29 fd 3c f0 81 fc 09 5f 0b fa 9a 9c 17 b0 ca 44 5d 2f 91 dd 06 53 c5 bb ca 2f 88 a5 ce 40 d6 e3 cf 88 d5 01 da eb ed ed 18 5f 33 f8 5c 6a f7 0a 8a b5 ea cc 80 09 a0 8f 09 b7 5c e9 9b c0 66 b0 11 8d cb 69 6e cd f0 79 53 0c 76 95 4c b4 76 fa 07 25 d1 be 7f 97 12 cf d0 b2 42 89 08 b9 71 76 6e a9 da 78 68 ef a0 d4 c4 bc 8d ec 81 bc c9 b1 2a 47 9b b1 2b 3a 47 2b 2d f7 65 7d c9 71 1e eb 39 06 21 7e 76 f8 9a 92 31 21 b7 0c 3c c1 84 25 5a 82 ec 63 86 b4 59 b6 fb 53 dc 94 f8 60 08 ee e8 a8 2b bc 88 5b c4 14 Data Ascii: w>w-v5-4E$Eq_1Js]X+WE.:FXjxc)<_D]/S/@_3\j\finySvLv%Bqvnxh*G+:G+-e}q9!~v1!<%ZcYS`+[
2024-03-26 18:49:36 UTC	1252	IN	Data Raw: d3 a0 da 06 39 86 c7 08 0b 66 d2 13 f1 d5 15 09 f7 fe 02 d5 d3 29 29 7e 21 8e e0 99 82 83 67 3e e8 69 d0 1c 3e 0f ce a1 a6 ea 89 00 9b 95 0a 9b e5 9c f7 a4 27 52 76 79 3d e2 39 9e 1b 61 7f ca f5 e5 16 07 e1 b9 03 f7 03 29 af 22 ef 77 90 63 4d e9 e9 e0 da 78 80 67 30 82 cd a4 a7 01 5b da 08 a6 c1 fa c1 16 37 98 e2 4f 8c ed d0 df 35 38 6f 76 d4 de fc ac 29 52 3d 85 2d ef e9 86 b1 0a f7 26 b6 fa d8 d3 db f7 d6 68 3a 5f 41 97 1c a7 50 fb 13 ae 90 9e 17 9d b1 3c 05 e0 7e 67 a4 ae de 3a 86 b7 bd 86 29 51 5b 62 ac 6f 4b ed 99 f2 55 2e e9 4c e7 a7 2c 25 6a 6e c4 7a f2 cf 72 20 d7 93 41 7b a3 9e 69 e0 89 09 fa 68 e8 23 9a db f5 3e e4 d2 3c 5c dd e1 9c d4 f3 19 e9 2d 31 46 2d f9 c9 1f f0 8b 5a 4b 3c f2 79 52 1c 26 1b 95 3d 06 38 17 d8 35 ae 57 0b e9 f5 49 9f d6 e3 Data Ascii: 9f))~!g>i>'Rvy=9a)"wcMxg0[7O58ov)R=-&h:_AP<~g:)Q[boKU.L,%jnzr A{ih#><\-1F-ZK<yR&=85WI
2024-03-26 18:49:36 UTC	616	IN	Data Raw: 63 36 6a 1f 0f cf a3 b1 9e eb e8 2e f6 86 ad f2 53 cc 0e 72 37 f7 01 bb fc 74 ad bf d5 4f 21 b1 11 32 6e fb db 78 2e e4 96 df 7b 87 2d fd f0 c1 66 d7 d3 2f 07 94 03 d9 be 2c 75 b6 c0 0a 85 ea 89 50 bc 93 67 eb fc 94 0c 39 14 fb 51 2d 2f f2 20 07 a3 e6 04 c6 e6 9e a8 f0 cd 3d a5 0e 3f 71 dd ca cd 7e 87 b1 4c ed 1b 20 f7 a2 06 05 66 1d 28 9b ea c3 07 e4 b9 bc f4 72 b8 d7 25 fd 14 e0 a7 89 d4 34 fc 0c dc 45 3f 45 e7 67 3a 12 ff f0 94 d1 e6 a7 a0 1c 1f fb 6a 8c fb dd 05 ff aa 82 f4 77 0a c6 2d e3 f8 fb fb 29 72 6e 86 ea f3 e7 5c 67 4b ae d5 c5 26 f8 de 5f f9 54 4f d9 89 bb 93 55 9e 8a b9 5c f3 c8 dd 07 9e 62 46 db 7b 91 5c ea 3c e4 4a e9 7f c9 99 46 9a aa 83 4a 9f 73 29 d7 f0 85 d4 22 9c 77 0b d5 a7 2f d5 53 b5 92 9f f8 a9 1e 8e 2f 77 0b fc fc 98 7b 61 1c d3 Data Ascii: c6j.Sr7tO!2nx.{-f/,uPg9Q-/ =?q~L f(r%4E?Eg:jw-)rn\gK&_TOU\bF{\<JFJs)"w/S/w{a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49735	162.247.243.29	443	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-26 18:50:01 UTC	792	OUT	POST /events/1/f318cdbaae?a=127348941&v=1.253.0&to=dwoPEBZaCQgDR01QQl1KF1VLUAgFD1kHQ21ZABIXBVIAOwNDB19GR0oTAQpRABY5UA9QW1g6FAoXQAcXBUcLU1c%3D&rst=45288&ck=0&s=b100e2003efc3156&ref=https://agattu.plix.ai/u&hr=0 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://agattu.plix.ai Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agattu.plix.ai/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-26 18:50:01 UTC	289	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 6c 63 70 2c 32 69 73 2c 37 3b 36 2c 27 73 69 7a 65 2c 31 31 38 34 30 30 2e 3b 35 2c 27 65 69 64 3b 35 2c 27 65 6c 55 72 6c 2c 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 5c 3b 62 61 73 65 36 34 5c 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 6a 41 77 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 49 77 4d 43 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 77 4d 43 41 79 4d 44 41 69 49 47 5a 70 62 47 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 34 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 32 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 35 3b 36 2c 27 63 6c 73 2c 30 2e 3b 65 2c 27 66 69 2c 66 36 71 2c 36 3b 35 2c 27 74 79 70 65 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 3b 36 2c 27 66 69 64 Data Ascii: bel.6;e,'lcp,2is,7;6,'size,118400.;5,'eid;5,'elUrl,'data:image/svg+xml\;base64\,PHN2ZyB3aWR0aD0iMjAwIiBoZWlnaHQ9IjIwMCIgdmlld0JveD0iMCAwIDIwMCAyMDAiIGZpbG;5,'net-etype,'4g;6,'net-rtt,200.;6,'net-dlink,1.55;6,'cls,0.;e,'fi,f6q,6;5,'type,'pointerdown;6,'fid
2024-03-26 18:50:01 UTC	312	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Tue, 26 Mar 2024 18:50:01 GMT content-type: image/gif access-control-allow-origin: https://agattu.plix.ai access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-iad-kiad7000126-IAD
2024-03-26 18:50:01 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Target ID:	0
Start time:	19:49:10
Start date:	26/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:49:12
Start date:	26/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2520 --field-trial-handle=2020,i,3268176836136726466,13000087644650507593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:49:14
Start date:	26/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Windows Analysis Report
https://agattu.plix.ai/u?mid=6601ae2964c7bd00071c13cd