Edit tour

Windows Analysis Report
https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com

Overview

General Information

Sample URL:	https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com
Analysis ID:	1513184
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

PE file contains more sections than normal

PE file contains sections with non-standard names

Suspicious form URL found

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2272,i,17334703872634533421,7170490073396937674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_82	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
4.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /report/v4?s=zpOYs1BlcQOfYge81L8Fsb9kHEemo4TtObyeiKaas68coBMqUbJ4MHOOH%2FUVltWT02jZMx6s%2B5SzzGH2W3mlhFjHTXpVG6QZfJdZjUrx2JiToSxHYdV5ZZM1vzjsy5%2FonAthhuV6 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 488Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: 505T3YZGG0FSW4YXx-amz-id-2: YbW8JIVa/EjKMNfRuco7+fNQCL/zqmFsZrLK/LBjT/hefAI7WH0KjRlnDjsHfhjiM88n0fUHzPeQdVAujKhH8w==Content-Type: application/xmlTransfer-Encoding: chunkedDate: Wed, 18 Sep 2024 13:35:52 GMTServer: AmazonS3Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: JP79RX5CYXRCJQREx-amz-id-2: eZ0hy3f/BQV03dIUUKh76S7BzNUkjgOy+eqNN2B1dzBMNL4qK1zX0QX6UU3MLwlY0r5jI7UYgfUn8FmsnxCE9Q==Content-Type: application/xmlTransfer-Encoding: chunkedDate: Wed, 18 Sep 2024 13:36:19 GMTServer: AmazonS3Connection: close

Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: chromecache_82.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: chromecache_82.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: chromecache_82.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.4.1.slim.min.js
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: chromecache_87.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_94.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Rubik&display=swap
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_88.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFU0U1Z4Y.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFUkU1Z4Y.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFV0U1.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFVUU1Z4Y.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFWUU1Z4Y.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFWkU1Z4Y.woff2)
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_86.2.dr, chromecache_79.2.dr, chromecache_85.2.dr, chromecache_91.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: chromecache_79.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_86.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_79.2.dr, chromecache_85.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: chromecache_82.2.dr	String found in binary or memory: https://i.imgur.com/6C3Pnkj.png
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: chromecache_82.2.dr	String found in binary or memory: https://ipfs.io/ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK?filename=modal.css
Source: chromecache_82.2.dr	String found in binary or memory: https://ipfs.io/ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh?filename=style.css
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: chromecache_82.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Source: chromecache_82.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: chromecache_82.2.dr	String found in binary or memory: https://tsukishimakika.com/drive/bato/mail2.php
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_5984_1978918308

Jump to behavior

Source: Google.Widevine.CDM.dll.0.dr

Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal52.phis.win@19/48@24/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2272,i,17334703872634533421,7170490073396937674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2272,i,17334703872634533421,7170490073396937674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com

LLM: Page contains button: 'DOWNLOAD ALL' Source: '0.0.pages.csv'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\LICENSE.txt

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://text.com	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://helpdesk.com	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://easylist.to/)	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://24.hu	0%	Avira URL Cloud	safe
https://joyreactor.cc	0%	Avira URL Cloud	safe
https://interia.pl	0%	Avira URL Cloud	safe
https://nlc.hu	0%	Avira URL Cloud	safe
https://cognitiveai.ru	0%	Avira URL Cloud	safe
https://p106.net	0%	Avira URL Cloud	safe
https://naukri.com	0%	Avira URL Cloud	safe
https://smpn106jkt.sch.id	0%	Avira URL Cloud	safe
https://cognitive-ai.ru	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://07c225f3.online	0%	Avira URL Cloud	safe
https://indiatodayne.in	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
s3-r-w.ap-southeast-1.amazonaws.com	3.5.149.122	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ipfs.io	209.94.90.1	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	unknown
dltxc.s3.ap-southeast-1.amazonaws.com	unknown	unknown	false	unknown
i.imgur.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	true		unknown
https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://easylist.to/)	LICENSE.txt.0.dr	false	Avira URL Cloud: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_79.2.dr, chromecache_85.2.dr, chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://p106.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://interia.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_86.2.dr, chromecache_85.2.dr	false	Avira URL Cloud: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
199.232.192.193	unknown	United States	54113	FASTLYUS	false
3.5.149.122	s3-r-w.ap-southeast-1.amazonaws.com	United States	16509	AMAZON-02US	false
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
209.94.90.1	ipfs.io	United States	40680	PROTOCOLUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1513184
Start date and time:	2024-09-18 15:34:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@19/48@24/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 66.102.1.84, 216.58.206.46, 34.104.35.123, 172.217.18.10, 142.250.186.170, 142.250.185.163, 142.250.186.106, 142.250.185.234, 172.217.16.202, 142.250.181.234, 216.58.206.74, 142.250.185.202, 142.250.186.42, 216.58.212.170, 216.58.206.42, 172.217.16.138, 142.250.74.202, 142.250.184.202, 142.250.184.234, 142.250.186.138, 4.175.87.197, 199.232.210.172, 13.85.23.206, 192.229.221.95, 13.95.31.18, 131.107.255.255, 142.250.186.163, 142.250.186.78
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Reputation:	low
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74272
Entropy (8bit):	5.535436646838848
Encrypted:	false
SSDEEP:	1536:GB9Cdg51kGLmOSe1pEQHdPr4l0TmmJ2I7CwguaRZrgMQUavJX5vwKf:Sok1RLtb1ptdPrYk1J2IPguangMQ3X5P
MD5:	B23DD5B6ECCB460003EA37BA0F5E3730
SHA1:	FD444553CB7699F84CE7E5664232771673DCF67D
SHA-256:	7F7F432C27D97DEE184DCD3EA20F731674C008BE849C0136F9C5358E359F3EA9
SHA-512:	7E47BD172C4BD4C65F063A8FA3FB33ED47F29156EB20E42D4E8EA73C6F02526A30FFE907BE5B7C1406D4EAA71FBEC7C0D557C376DCCD0A1A961E2F61B3431181
Malicious:	false
Reputation:	low
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana...........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Reputation:	low
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.990179229242317
Encrypted:	false
SSDEEP:	24:pZRj/flTHYe1DxxpTkYbKCCojeT31zkaoX63wMHF48I31RwCCyqoX6kyKlklyJqw:p/h4YDxxlbKlTlkakgPLI3hCyqkwnlKD
MD5:	2FF08C4B4128F634CBBFEA0C1C44AA2E
SHA1:	45D11E57DDF29E843AC8545C7D06CDDB5DF3E962
SHA-256:	33B6F2ECD5FB7F9FAF538F29808716EFA337A653809943A8E4B5E450B734DA09
SHA-512:	14BD9E921E1DB9AC8720C1177897DB624292865D29B976ED9CCCEE572726D7D123A8F39E470987DF796AE0552861FBAE056CDB395F0CB8B0E699C28F5E221999
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"ifBoq-woYhqxB78EqRoo2fPRIEfkuykYMlD9kWeeG2QS6-R5YvGNJ9n5OljLXGjvK5U3MDFRLi-UCguxuUaoFjU_QeSCiOLxvDS5JHdk8Bbba8fCW6ZKnH_fvocQD8W7Hj0reH3gOPmD7sIraz8IvG86GRuGPqsxbgc_BRtOCa5KRgqaxfjt7tKlOtaUoO3_qsNlf_8F8k0tNZh131RRIEaXw53z3ZzGpWtgYC0u6s0JKag8l

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8568101737886993
Encrypted:	false
SSDEEP:	3:SWcgK7GtszDAAnHT:SWc97GWzDlnHT
MD5:	6DBEDE254AF8A23D6CB2ABAEA8D2E38F
SHA1:	A827D46FA5D53CB7B134F143CC15A30BA015ED21
SHA-256:	376ED55CD5AB45C0F7BAA1AF0AC2637C33DEA6D1D4683B729AE7CE764F70DAA1
SHA-512:	0F28FD8AF582C18ECCCC1321B94902501D31C4B6C1D11684780DED6217C14E1B313F58A644516F37AE69232F1C2861915337A4D84185E18124F40C629A50B7F9
Malicious:	false
Reputation:	low
Preview:	1.3651711652892acf34795b2c7e4d401ed2274c20e952f65cf52deeeef5bbf9b5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1KPYn:F6VlMZWuMt5SKPS1eY
MD5:	3448D97DA638C7EF0FBCA9B6949FFC8F
SHA1:	36D8434F26F0316FAB4627F7856FCA7291FE8ADF
SHA-256:	1700A11FD1E58367B450A41B2AE5FD26ECB5CDB459869C796C7DDE18F1D30F73
SHA-512:	9BF9055B2EF82BD1D2A1E94009FED2D3481FE2DC336D306FA0DB786658EFA5B72C9A9A214A829B9FCC4222476051871FF012009C64F09B9109072ABDF3DEF8CC
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.51.0".}

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	2463
Entropy (8bit):	5.467462248764018
Encrypted:	false
SSDEEP:	48:dQOLX7b50Zz98D6F5Ez5cPPV+QOLX72wQOLX76FZSQOLX7BUQOLX7cTRVc+uJQOa:dQOLP50ZZ8DCK9cHoQOLKwQOLGFZSQO1
MD5:	7DE5D66D666D5AF11D791103793411A0
SHA1:	C99AB77CC42DA535830F6532F8DBAC353982A5F1
SHA-256:	9DA5021AF60AD21941DFA0BA57085436EF111383C7FF9ACA07F513EC487DB074
SHA-512:	B7E19536902537BB13833ADF03561BECF8D8857C43D3E39B0065D121B2DE1C4D8D61CAE99A076ACFA964EE1F6FC712F431D1AE0663CE561B83B04ACC0B88D70D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Rubik&display=swap
Preview:	/* arabic /.@font-face {. font-family: 'Rubik';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-B4iFUkU1Z4Y.woff2) format('woff2');. unicode-range: U+0600-06FF, U+0750-077F, U+0870-088E, U+0890-0891, U+0898-08E1, U+08E3-08FF, U+200C-200E, U+2010-2011, U+204F, U+2E41, U+FB50-FDFF, U+FE70-FE74, U+FE76-FEFC, U+102E0-102FB, U+10E60-10E7E, U+10EFD-10EFF, U+1EE00-1EE03, U+1EE05-1EE1F, U+1EE21-1EE22, U+1EE24, U+1EE27, U+1EE29-1EE32, U+1EE34-1EE37, U+1EE39, U+1EE3B, U+1EE42, U+1EE47, U+1EE49, U+1EE4B, U+1EE4D-1EE4F, U+1EE51-1EE52, U+1EE54, U+1EE57, U+1EE59, U+1EE5B, U+1EE5D, U+1EE5F, U+1EE61-1EE62, U+1EE64, U+1EE67-1EE6A, U+1EE6C-1EE72, U+1EE74-1EE77, U+1EE79-1EE7C, U+1EE7E, U+1EE80-1EE89, U+1EE8B-1EE9B, U+1EEA1-1EEA3, U+1EEA5-1EEA9, U+1EEAB-1EEBB, U+1EEF0-1EEF1;.}./ cyrillic-ext */.@font-face {. font-family: 'Rubik';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDn

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30967
Entropy (8bit):	7.872813790784786
Encrypted:	false
SSDEEP:	768:n6Aoj2E4uf+5S6hvFGc6o72kTsnJC3H+iKYV1xVQK2h2C:6Jj2E4u25phvo5DkIJeeSLVQK2gC
MD5:	46EE88A645807EFD8FE76C7689608259
SHA1:	67CEDB9D8967292D65AF12B784809AD97E39D7E3
SHA-256:	CD37633DFD1865F74712BC5F4AEEE91BF0EED51F095F6381647F498D33508ED6
SHA-512:	91473B907C59A7CEDBC4CF31DC923E8B67B08240D93F6A4FB431233062D3DD68322D4BE0F16578FAF207677F0736F8866B45E3CBB3E177238A15CE104FCB15D7
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/6C3Pnkj.png
Preview:	.PNG........IHDR................#....bKGD............x.IDATx...yx\u....}f....).E......d..E..Eq....7\"....U\>....&i23I1n....,..Ev....L2s......ls.....~.......7g.=gy..........................................................................................................................................................................l.u@Td....=.....b.........g.T.Ad.T.{........."........"w..g..'..c```.z;..fY".SEu.D.]....;....y..Bd.Tg..y.....'..."....T...y....u.p..W.^..z....ii.M...R..W.=..2~\...y....9.......xR...l..A....~...Tw8cc.W..l..F....U..fg.../..#....!...P[..V!r...M.p..k......,I...J.HW.0.....W..w...!r.....]...w....h...ll..."r.......p..9U.......7...Pq..zzz..{....8.....g...#@3T..p8.....X.............dI[.n....E.....t..3....S.......o.."z1....W]u.#..`..#Q.ao....W..E...X..:......-[.h.rMM..K.....i.\...........Yg.D...fkG6nl..Y.@..n.M.t...p....g.5..U..(.....p.n9.....i.n......#.....Z...p...lS..R}.Ru.B$...W.(.....c......k.C.....\..U.S.y.T...e.M.. T.....,.......f..'

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (63244)
Category:	downloaded
Size (bytes):	186578
Entropy (8bit):	6.071402155363339
Encrypted:	false
SSDEEP:	3072:TL4lw2ONKUQJcbcvQJ5C4kcI2cy5ggTo5wy6jaHmJKMS3DFzuyqXY+b:TL462xJctC4klVgTo5w/jdDSzF14
MD5:	11A8EB27B3CDB137086668623B68B70E
SHA1:	16A47CB18644FE54F31E9ED41ED093D7D82AC005
SHA-256:	F03EF2E6C3C8518FE2A296940E3E7D3A4C60642FFDDDE663E2651B563DEB42D4
SHA-512:	FE8A1662F612ABE830309B68E0848E508D3578C79D5652FF1379DB60A5BDB15DE4199693C5A2135AEDD51962E968D9513CD956C563FD41357FCA068E85F654DB
Malicious:	false
Reputation:	low
URL:	https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com
Preview:	..<!DOCTYPE html>.<html lang="en">..<head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>MyDrive</title>.. Bootstrap core CSS -->. <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" rel="stylesheet">. <link href="https://ipfs.io/ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh?filename=style.css" rel="stylesheet" type="text/css" media="all" />. <link href="https://ipfs.io/ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK?filename=modal.css" rel="stylesheet" type="text/css" media="all" />..<style> ...col-auto {. -ms-flex: 0 0 auto;. flex: 0 0 auto;. width: 110% !important; . max-width: 120%; .}..modal-dialog {. margin: 0.8rem auto !important;.}...btn.btn-primary {. background: #005da6;.}..btn {. color: white !important;. border: none;. padding: 0.5rem 1rem !imp

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.322573883611435
Encrypted:	false
SSDEEP:	3:0KtsNsds7wCYYn:csa5
MD5:	330B51F8649E2C6398234829020B24D8
SHA1:	6955832329821BFEFA6026117E5EB5B0E04E186F
SHA-256:	68AC73AE8B94F4DD11FDE14BB752DE42016032E79DE992523B1EE7FD4DB1DBBA
SHA-512:	610A63BE139E2E834DB93A1588D9F672BA567150B682FD88BF69E973FC168011EE6D313A34804050003E9156FCDB64C6817632653EA15BFEAA5E960B60DFE012
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkVfgE5bhRbMhIFDeD89BcSBQ3Fk8Qk?alt=proto
Preview:	ChoKCw3g/PQXGgQIVhgCCgsNxZPEJBoECEsYAg==

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	80698
Entropy (8bit):	5.261991229446371
Encrypted:	false
SSDEEP:	768:D09+zjWNHVGCcWTb7zTucV4NtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PK5:Da+mykSs2Q5CXnFOpD6RvAvVvGjT
MD5:	E8310757A9E092E59B932587D22B4104
SHA1:	9645B0BE897022691CE18E8AD3E744E97859ED9B
SHA-256:	CF17AFCF630E169A8A7F70FD79E35DFE01345FAEFD01E83A59186E6DE480F557
SHA-512:	B96F9C8BB2C5664097187E668E9BBCD7F96FC373E0E5888EEC404DB08C055A08958DD633E8261CB6869EC367E74A82B1A8F6BE2E9658A4BA886FF18462F26B76
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.4.0 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],t):t((e=e\|\|self).bootstrap={},e.jQuery)}(this,function(e,p){"use strict";function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function s(e,t,n){return t&&i(e.prototype,t),n&&i(e,n),e}function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),n.push.apply(n,i)}return n}function l(o){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?argumen

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	4.897658007748816
Encrypted:	false
SSDEEP:	48:mpVUBuGBQCZWKcCZMCZiSaGS8FdeCZsqCZdZWEYoGw4f:uzGBQCZcCZMCZiSJSMeCZsqCZdZDJGw2
MD5:	C4A8393E4A795862775CFE62EDE6944C
SHA1:	8D4C0ECCFFA6EEDB5952834B5B375AAADF9F63DB
SHA-256:	802410A357EEE04C6189C001B372A3C786EE4457CDCD4C83F735896D0297F0C2
SHA-512:	D6FCDCBD5DD1C10CFB5864643C7CB833521934407ABF9153E6F87A555594F2EEB1279D6055235967B793C027DB92A9D1E3B8ECC156CB5A27D7C1ADDBA5CBA48C
Malicious:	false
Reputation:	low
URL:	https://ipfs.io/ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh?filename=style.css
Preview:	@import url("https://fonts.googleapis.com/css?family=Roboto:400,500,700,900&display=swap");..body{.../overflow: hidden !important;/.. padding: 0;.. margin: 0;.. font-size: 14px;.. font-family: "Roboto", sans-serif;.. color: #5e6566;...}.....bg-white, .bg-white2 {.. background-color: #fff!important;.. color: black;..align-items: center;.. padding: 10px;.. border-bottom: 1px solid #dddddd;.. display: flex;.. -webkit-box-pack: justify;.. -ms-flex-pack: justify;.. justify-content: space-between;.. -webkit-box-align: center; ..}.....bg-white .drivelogo {.. display: -webkit-box;.. display: -ms-flexbox;.. display: flex;.. -webkit-box-align: center;.. -ms-flex-align: center;.. align-items: center;.. margin: 0 10px;..}.....bg-white .right-bar {.. margin: 0 20px;..}.....bg-white .right-bar .menubar {.. display: -webkit-box;.. display: -ms-flexbox;.. display: flex;.. background: #ebecec;.. padding: 8px;.. border-r

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8732
Entropy (8bit):	5.391225597451507
Encrypted:	false
SSDEEP:	192:ANPQNNNiNk3XNPN8qNYrNm7NCNRNS3sNEN8NNtNF1NHNUN13eN/N5TNGNnnN7N0R:uPeD4CdFFwmBYHAaCijF7tyF0VbsnNB0
MD5:	5550EC8177284D2ECE8C0030B9B043C2
SHA1:	1FD7B0C3BF99B36AA004D8F5CB7BD85FBC8460F3
SHA-256:	0F08E16BC5D419D5DB9ADE0B4DF6D9D2BC4CD89206409C95622AB82917F6134E
SHA-512:	DBACDF9C8C3B4A0B8B9A2D39640D6EBC301ACBBE1EC150EA838BEE774E9E4895E4B571015B76E6E9F74ECE20553E2C464265C55F3494E4438EEEE0A1B4E20045
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,500,700,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65247)
Category:	dropped
Size (bytes):	71037
Entropy (8bit):	5.292422300680798
Encrypted:	false
SSDEEP:	1536:7DFXT6kYFbzDoyZxg6V4BMWzIVzvxuOczHdpc3RvVE+hWtfBPfH2r+rxQ47GKi:BT6gOczHdUC/fHlxQ47GKi
MD5:	D9B11CA4D877C327889805B73BB79EDD
SHA1:	DD15958A3F0F1F3601461F927C4703A56ED59011
SHA-256:	A5AB2A00A0439854F8787A0DDA775DEA5377EF4905886505C938941D6854EE4F
SHA-512:	787598A2BB567B6372C4722263FC18F369CAE1194F2030C3483E59BD31EB4E48AAF6D01EFBE0C186AE6B0DC0B4DB1A87C61D1CB4618C6C72A8B6AB5871881764
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],v=g.document,r=Object.getPrototypeOf,s=t.slice,y=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,m=n.hasOwnProperty,a=m.toString,l=a.call(Object),b={},x=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},w=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(n=n\|\|v).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	5.655543834632809
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjJ18MZAf/nc1GZ7PyvsYQ2Qm0ptUan:TMHd9BZKtWRs/njZ7PCsoQmiUa
MD5:	A02FCF04EAFAF8D1376B957D0631115E
SHA1:	8DA644690712E3C439B8D1770F6C29A645AFE4EC
SHA-256:	6311EA0A7EE0A3073C35F84659DDAEEE39F69A0CA04616F37BD638B814FF835B
SHA-512:	5168A007ADF6B58362583C4C3D91B6A4B1459ED188F3A5CC87FEC1D35E06223F07E518A378467496569AC8E7F495779AD074183DE333E5511748BF0DC915D917
Malicious:	false
Reputation:	low
URL:	https://dltxc.s3.ap-southeast-1.amazonaws.com/favicon.ico
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>JP79RX5CYXRCJQRE</RequestId><HostId>eZ0hy3f/BQV03dIUUKh76S7BzNUkjgOy+eqNN2B1dzBMNL4qK1zX0QX6UU3MLwlY0r5jI7UYgfUn8FmsnxCE9Q==</HostId></Error>

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	dropped
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1778
Entropy (8bit):	4.888506333021343
Encrypted:	false
SSDEEP:	24:ijdYU6Ym5y8eV1vrVkWyrryRyUz0vUUUc96hzMYM71bvbswPvqC5F1b:eYehME7up5tbswn5/b
MD5:	7BBA667EADA32470BB88FD8D38F80291
SHA1:	C310DFB58F782AAD4C05CA90DB5A62164A415904
SHA-256:	6BA4056D46D3780703CDFA807BD9FEDFA5C96555558E3BB4D6B87359DA088A96
SHA-512:	2BEDDD205A557F1564A1B343B1DF752F383F7477601175443656E970A5079B10FAA1BAAFF2B7B5626B3DBE6BF05771F09C62D8D70581E5F1420298BF0EF874CC
Malicious:	false
Reputation:	low
URL:	https://ipfs.io/ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK?filename=modal.css
Preview:	@import url('https://fonts.googleapis.com/css?family=Rubik&display=swap');..../* body {.. min-height: 81vh;.. background: linear-gradient(0deg, #fff, 50%, #DEEEFE);.. font-family: 'Rubik', sans-serif.. }../../ .container {.. margin-top: 180px !important.. }/.... p {.. font-size: 14px !important.. }.... .card {.. border-radius: 0px !important.. }.... .card-body {.. border-radius: 9px !important.. }.... small {.. font-size: 15px !important;.. display: flex;.. justify-content: center !important.. }.... button {.. font-size: calc(12px + (13 - 12) ((100vw - 360px) / (1600 - 320))) !important;.. ;.. padding: calc(6px + 5 * ((100vw - 320px) / 780)) !important;.. color: #000 !important.. }.... button:focus {.. -moz-box-shadow: none !important;.. -webkit-box-shadow: none !important;.. box-shadow: none !important;.. outline-width: 0.. }.... .btn-icon {.. border: 1px solid #ccc;.. background-color: transpare

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65247)
Category:	downloaded
Size (bytes):	71037
Entropy (8bit):	5.292422300680798
Encrypted:	false
SSDEEP:	1536:7DFXT6kYFbzDoyZxg6V4BMWzIVzvxuOczHdpc3RvVE+hWtfBPfH2r+rxQ47GKi:BT6gOczHdUC/fHlxQ47GKi
MD5:	D9B11CA4D877C327889805B73BB79EDD
SHA1:	DD15958A3F0F1F3601461F927C4703A56ED59011
SHA-256:	A5AB2A00A0439854F8787A0DDA775DEA5377EF4905886505C938941D6854EE4F
SHA-512:	787598A2BB567B6372C4722263FC18F369CAE1194F2030C3483E59BD31EB4E48AAF6D01EFBE0C186AE6B0DC0B4DB1A87C61D1CB4618C6C72A8B6AB5871881764
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.4.1.slim.min.js
Preview:	/! jQuery v3.4.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],v=g.document,r=Object.getPrototypeOf,s=t.slice,y=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,m=n.hasOwnProperty,a=m.toString,l=a.call(Object),b={},x=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},w=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(n=n\|\|v).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30967
Entropy (8bit):	7.872813790784786
Encrypted:	false
SSDEEP:	768:n6Aoj2E4uf+5S6hvFGc6o72kTsnJC3H+iKYV1xVQK2h2C:6Jj2E4u25phvo5DkIJeeSLVQK2gC
MD5:	46EE88A645807EFD8FE76C7689608259
SHA1:	67CEDB9D8967292D65AF12B784809AD97E39D7E3
SHA-256:	CD37633DFD1865F74712BC5F4AEEE91BF0EED51F095F6381647F498D33508ED6
SHA-512:	91473B907C59A7CEDBC4CF31DC923E8B67B08240D93F6A4FB431233062D3DD68322D4BE0F16578FAF207677F0736F8866B45E3CBB3E177238A15CE104FCB15D7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................#....bKGD............x.IDATx...yx\u....}f....).E......d..E..Eq....7\"....U\>....&i23I1n....,..Ev....L2s......ls.....~.......7g.=gy..........................................................................................................................................................................l.u@Td....=.....b.........g.T.Ad.T.{........."........"w..g..'..c```.z;..fY".SEu.D.]....;....y..Bd.Tg..y.....'..."....T...y....u.p..W.^..z....ii.M...R..W.=..2~\...y....9.......xR...l..A....~...Tw8cc.W..l..F....U..fg.../..#....!...P[..V!r...M.p..k......,I...J.HW.0.....W..w...!r.....]...w....h...ll..."r.......p..9U.......7...Pq..zzz..{....8.....g...#@3T..p8.....X.............dI[.n....E.....t..3....S.......o.."z1....W]u.#..`..#Q.ao....W..E...X..:......-[.h.rMM..K.....i.\...........Yg.D...fkG6nl..Y.@..n.M.t...p....g.5..U..(.....p.n9.....i.n......#.....Z...p...lS..R}.Ru.B$...W.(.....c......k.C.....\..U.S.y.T...e.M.. T.....,.......f..'

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 18, 2024 15:35:44.538347006 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 18, 2024 15:35:46.972726107 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.972826958 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:46.973031044 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.973294973 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.973301888 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.973326921 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:46.973387003 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:46.976027012 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.976187944 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:46.976216078 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.209259033 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.212430000 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.212477922 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.214065075 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.214149952 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.214167118 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.214219093 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.214716911 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.215481997 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.215513945 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.215715885 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.215816021 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.216089964 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.216103077 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.216968060 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.217042923 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.217051983 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.217093945 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.218987942 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.219067097 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.263350964 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.263358116 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.263359070 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.312325001 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.778158903 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.778520107 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.778590918 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.778636932 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.778810978 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.866528034 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.866544008 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.866590023 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.866605043 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.866621971 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.866652012 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:48.866682053 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.866682053 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:48.866709948 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.007210970 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.007246017 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.007292032 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.007293940 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.007318020 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.007344961 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.009643078 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.009671926 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.009706974 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.009720087 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.009742975 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.053343058 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.091147900 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.091203928 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.091264009 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.092370033 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.092391968 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.093913078 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.093934059 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.094069004 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.094422102 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.094512939 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.094577074 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.095352888 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.095412970 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.095846891 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.095874071 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.101438046 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.101464033 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.101521969 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.101536036 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.101552010 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.101568937 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.101596117 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.147233963 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.173156977 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.173194885 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.173273087 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.173707008 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.173736095 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.236062050 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.236078024 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.236102104 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.236143112 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.236198902 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.236227989 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.236268044 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.236282110 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.237397909 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.237422943 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.237457037 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.237469912 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.237497091 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.238420010 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.238467932 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.238487005 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.238502026 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.238527060 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.238564968 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.239476919 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.239500999 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.239551067 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.239550114 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.239564896 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.239573956 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.239593983 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.240933895 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.240957975 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.240988016 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.241002083 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.241029978 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.244714022 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.244724035 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.244793892 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.514905930 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.514940977 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.514988899 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515032053 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515028954 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.515100956 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515137911 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515158892 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.515158892 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.515185118 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515208006 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.515252113 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.515436888 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.530817986 CEST	49736	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:49.530853033 CEST	443	49736	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:49.762073994 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.769078016 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.769653082 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.811137915 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.811144114 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.811984062 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.827689886 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.867477894 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.897072077 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.897094011 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.900958061 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.901058912 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.939304113 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.939317942 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.939836979 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.939846039 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.940917015 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.940999985 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.940999031 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.941055059 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.942111969 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.942118883 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.943825960 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.943886995 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.947155952 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.947349072 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.947515965 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.947639942 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.947767973 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.947778940 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.947863102 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.947875023 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:49.948071957 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.948201895 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.948415995 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.948425055 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.948590040 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.948597908 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:49.997518063 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:49.997525930 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:49.997538090 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:49.997539997 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:49.997539997 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.045583963 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:35:50.054749012 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.054806948 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.054846048 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.054887056 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.054899931 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.054913998 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.054936886 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.055404902 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.056008101 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.056014061 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.056534052 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.056598902 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.056605101 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.057512045 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.057584047 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.057590008 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.059793949 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.059849024 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.059854984 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.060591936 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.060637951 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.060691118 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.060699940 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.060729980 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.060777903 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.075412035 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.075556993 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.075757980 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.075807095 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.101603985 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.129065990 CEST	49740	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.129087925 CEST	443	49740	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.142671108 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.142828941 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.142952919 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.142992973 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.143013000 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.143023014 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.143052101 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.143362999 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.143405914 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.143409967 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.143416882 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.143457890 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.143464088 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.144143105 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.144180059 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.144191980 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.144197941 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.144238949 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.144244909 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145106077 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145142078 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145152092 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.145158052 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145198107 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145237923 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145240068 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.145251989 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145283937 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.145292044 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.145332098 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.146250010 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.183808088 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.183868885 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.184020042 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.190220118 CEST	49741	443	192.168.2.4	209.94.90.1
Sep 18, 2024 15:35:50.190257072 CEST	443	49741	209.94.90.1	192.168.2.4
Sep 18, 2024 15:35:50.191824913 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.191862106 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.193886995 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.193917990 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.194089890 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.196048975 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.196079969 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.196137905 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.196381092 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.196394920 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.197078943 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.197125912 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.197187901 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.198575020 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.198590040 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.200201035 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.200217009 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.200835943 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.200844049 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231149912 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231200933 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231208086 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.231220961 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231260061 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.231266022 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231461048 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231508017 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.231513977 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231852055 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231863976 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.231906891 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.231913090 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232276917 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232315063 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232330084 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.232336044 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232379913 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.232827902 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232880116 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.232886076 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232912064 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.232960939 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.232968092 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.233779907 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.233844995 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.233875036 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.233884096 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.233902931 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.234576941 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.234651089 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.234657049 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.234697104 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.234735012 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.234772921 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.234790087 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.234797001 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.234867096 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.234867096 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.235675097 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.235769987 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.235847950 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.235896111 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.236537933 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.236610889 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.319941998 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320019960 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320063114 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320111990 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320153952 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320208073 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320247889 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320301056 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320425987 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320477962 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320530891 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320579052 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320640087 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320693970 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320743084 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320802927 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320813894 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320842028 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320859909 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320941925 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.320991039 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.320997953 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321034908 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.321041107 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321067095 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321093082 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.321180105 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321227074 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.321233034 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321269035 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.321274996 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321463108 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.321511984 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.337774038 CEST	49739	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.337789059 CEST	443	49739	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.409106970 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:50.409157038 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:50.409228086 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:50.412698030 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:50.412710905 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:50.644758940 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.645015955 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.645081043 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.645766020 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.646104097 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.646204948 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.646281004 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.660487890 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.660741091 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.660770893 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.661669016 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.661722898 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.687297106 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.687493086 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.687521935 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.689131975 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.689205885 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.691409111 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.742336035 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.742552996 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.742573977 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.743463993 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.743516922 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.783418894 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.783792019 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.783792973 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.786250114 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.786361933 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.786375999 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.786748886 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.786839962 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.786943913 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.786952972 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.787009001 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.796422958 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796485901 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796535015 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.796575069 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796655893 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796694040 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796698093 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.796720982 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796771049 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.796772957 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796792030 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.796838999 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.796852112 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.797363997 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.797413111 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.797414064 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.797429085 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.797481060 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.827414036 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.828099012 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.828115940 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.828459024 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.828485966 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:50.828525066 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.828556061 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.873548031 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.874377012 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:50.876064062 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.881089926 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881599903 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881649971 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.881673098 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881849051 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881879091 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881894112 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.881899118 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.881933928 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.881937027 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.883323908 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.883342028 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883352041 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.883369923 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.883374929 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.883418083 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.883421898 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.883435011 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883469105 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883481979 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.883505106 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883546114 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.883559942 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883619070 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883658886 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.883661032 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883676052 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883718014 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.883881092 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.883963108 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884004116 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.884008884 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884023905 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884063005 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.884076118 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884773970 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884809017 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884823084 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.884843111 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.884907961 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.884918928 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885108948 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.885622978 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885668993 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885672092 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.885683060 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885731936 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.885740042 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885751009 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.885788918 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.885983944 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.886034966 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.886066914 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.886145115 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.886188030 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.886195898 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.886408091 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.886585951 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.886627913 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.886639118 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.887013912 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.887057066 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.887068987 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.887149096 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.887197971 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.887203932 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.895081997 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.895136118 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.895143032 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.903467894 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.903527021 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.903558016 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.935036898 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.935044050 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.935061932 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.951458931 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.967663050 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.968103886 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.968142986 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.968151093 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.968163013 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.968380928 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.968384981 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969165087 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969193935 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969208002 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.969212055 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969238043 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969252110 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.969255924 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969281912 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969297886 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.969301939 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969329119 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.969331980 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969333887 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.969347000 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969379902 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.969408989 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.969420910 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969475031 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969526052 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.969540119 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969789028 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969837904 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.969841957 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969856024 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.969877005 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.969964027 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.970010042 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.972006083 CEST	49743	443	192.168.2.4	104.18.11.207
Sep 18, 2024 15:35:50.972040892 CEST	443	49743	104.18.11.207	192.168.2.4
Sep 18, 2024 15:35:50.976820946 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977001905 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977055073 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.977087975 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977165937 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977210999 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.977220058 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977437019 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977489948 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.977495909 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977591038 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.977637053 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.977643013 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.978020906 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.978072882 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.978079081 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.978657007 CEST	49744	443	192.168.2.4	199.232.196.193
Sep 18, 2024 15:35:50.978674889 CEST	443	49744	199.232.196.193	192.168.2.4
Sep 18, 2024 15:35:50.979758978 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.979782104 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.979830027 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.979835033 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.979859114 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:50.979882956 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:50.979918003 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.006812096 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.006859064 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.006926060 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.007570028 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.007590055 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.013293982 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.013313055 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.013372898 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.014137030 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.014153957 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.069308043 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.069374084 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.069405079 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.069442034 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.069468975 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.069480896 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.071283102 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.071352005 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.071360111 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.071512938 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.071567059 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.081757069 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.081886053 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.081937075 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.081965923 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082057953 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082099915 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.082109928 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082184076 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082215071 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082221985 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.082237959 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082278967 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082278967 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.082294941 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.082340956 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.083440065 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.083506107 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.087910891 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.087974072 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.088020086 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.088057041 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.100987911 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.101001978 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.101547003 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.116350889 CEST	49746	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.116388083 CEST	443	49746	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.139302015 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.154181957 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.168725967 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.168823957 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.168864012 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.168884039 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.168910980 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.168956041 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.169090033 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.169325113 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.169362068 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.169368029 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.169375896 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.169415951 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.170917988 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.170989990 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171032906 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.171041012 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171133041 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171174049 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.171186924 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171823978 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171868086 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.171875954 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.171988010 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.172034025 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.172040939 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.172795057 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.172837973 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.172846079 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.172935963 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.172980070 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.172986984 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.173608065 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.173655987 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.173662901 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.216464996 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.216492891 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255012989 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255090952 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.255120039 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255151033 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255197048 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.255228043 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255429029 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255449057 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255482912 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.255522966 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255554914 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.255582094 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255631924 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.255646944 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.255695105 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.256074905 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.256175995 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.256242037 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.256261110 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.256294012 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.256315947 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.256331921 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.256360054 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.257147074 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.257219076 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.257229090 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.257253885 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.257285118 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.257479906 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.257599115 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.287898064 CEST	49747	443	192.168.2.4	104.17.25.14
Sep 18, 2024 15:35:51.287935019 CEST	443	49747	104.17.25.14	192.168.2.4
Sep 18, 2024 15:35:51.482958078 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.485321999 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.485352993 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.486782074 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.486838102 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.487706900 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.487787962 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.487870932 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.487881899 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.528907061 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.561891079 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.561964035 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.562171936 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.562186956 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.563103914 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.563172102 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.564429045 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.564486027 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.564903975 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.564910889 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.590995073 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.591033936 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.591146946 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.591589928 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:51.591613054 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:51.593189001 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:51.593208075 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:51.593271971 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:51.595072985 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:51.595091105 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:51.603411913 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.609842062 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.619117975 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619180918 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619219065 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619230986 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.619252920 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619293928 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.619299889 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619338036 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619375944 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619417906 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.619422913 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619488001 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.619493008 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619784117 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619822025 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.619859934 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.619865894 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.620058060 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.664951086 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.665013075 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.665041924 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.665064096 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.665098906 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.665147066 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.666631937 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669291973 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669322014 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669337988 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.669343948 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669363022 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669384003 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.669388056 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669398069 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669436932 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.669441938 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.669527054 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.671283960 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.708220959 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.708298922 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.708338976 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.708348036 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.708372116 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.708405972 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.708411932 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.709897041 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.709954977 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.709968090 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710031033 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710067987 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.710073948 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710336924 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710376978 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710378885 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.710390091 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710438967 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.710882902 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710958958 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710995913 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.710995913 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.711007118 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.711036921 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.711755991 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.711838007 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.711878061 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.711882114 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.711894035 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.712454081 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.712462902 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.713126898 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.713164091 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.713171005 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.713180065 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.713211060 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.716461897 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.752046108 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752091885 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752119064 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752146006 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.752150059 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752160072 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752194881 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.752202988 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752240896 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.752247095 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752275944 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752489090 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.752494097 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.752778053 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.752882957 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.752933025 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.752971888 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.753009081 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.753015041 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.753042936 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.753082991 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.753808022 CEST	49752	443	192.168.2.4	199.232.192.193
Sep 18, 2024 15:35:51.753825903 CEST	443	49752	199.232.192.193	192.168.2.4
Sep 18, 2024 15:35:51.755162001 CEST	49750	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.755167007 CEST	443	49750	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.799204111 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.799273968 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.799307108 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.799324989 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.799338102 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.799390078 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.799401045 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.800945997 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.800987959 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.800991058 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.801003933 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.801067114 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.801071882 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.801124096 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.801225901 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.805732965 CEST	49751	443	192.168.2.4	104.18.10.207
Sep 18, 2024 15:35:51.805759907 CEST	443	49751	104.18.10.207	192.168.2.4
Sep 18, 2024 15:35:51.834314108 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.834352970 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:51.834691048 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.835027933 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:51.835043907 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.071199894 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.071636915 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.071652889 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.074748039 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.074822903 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.075567961 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.075567961 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.075653076 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.083061934 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.083272934 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.083287001 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.086795092 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.086971998 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.087413073 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.087573051 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.087583065 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.115575075 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.115588903 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.131490946 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.131546021 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.131560087 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.156721115 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.180408001 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.464612007 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:52.507441998 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:52.542048931 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.542807102 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.542882919 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.542937040 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.542982101 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.542994976 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543016911 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543080091 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543119907 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543119907 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543132067 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543174028 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543268919 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543297052 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543313026 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543359995 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543359995 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543380022 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.543747902 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.543756008 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.550744057 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550762892 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550776958 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550816059 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550833941 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550837994 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.550853968 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550859928 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.550870895 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.550894022 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.550894022 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.550894022 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.550956964 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.550976038 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.550987005 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551053047 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.551069021 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551146030 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551191092 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551218033 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.551225901 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551275015 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551305056 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.551314116 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551361084 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.551834106 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551913023 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.551961899 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.552006960 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.552041054 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.552051067 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.552051067 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.552056074 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.552061081 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.552076101 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.552095890 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.552095890 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.552125931 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.552656889 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.552822113 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.552869081 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.553203106 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.553211927 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.553292036 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.553354979 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.553426981 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:52.553587914 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.553687096 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.553920031 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.553930044 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.554852962 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.554878950 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.554953098 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.554953098 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.554960966 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.554970026 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:52.554989100 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.555362940 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.556390047 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:52.556830883 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.556936979 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.556946039 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.557169914 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.557228088 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.557236910 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.557832956 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.557955980 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.557965994 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.557975054 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.558063984 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.558176994 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.558609009 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.558691025 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.558698893 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.558794975 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.558821917 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.558861971 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.558866978 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.559174061 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.562470913 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.562525988 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.562534094 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.562557936 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.562591076 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.562593937 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.562602043 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.562644958 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.562644958 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.562654972 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.562665939 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.562793016 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.563296080 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.563407898 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.563416004 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.563472033 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.563543081 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.563679934 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.563687086 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.563735008 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.563739061 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.563911915 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.578413963 CEST	49756	443	192.168.2.4	151.101.66.137
Sep 18, 2024 15:35:52.578449965 CEST	443	49756	151.101.66.137	192.168.2.4
Sep 18, 2024 15:35:52.578762054 CEST	49757	443	192.168.2.4	104.17.24.14
Sep 18, 2024 15:35:52.578769922 CEST	443	49757	104.17.24.14	192.168.2.4
Sep 18, 2024 15:35:52.589159012 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:52.589217901 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:52.589411974 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:52.589627028 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:52.589648008 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:52.603406906 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.833813906 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.833998919 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.834069967 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:52.869072914 CEST	49759	443	192.168.2.4	184.28.90.27
Sep 18, 2024 15:35:52.869096041 CEST	443	49759	184.28.90.27	192.168.2.4
Sep 18, 2024 15:35:52.885273933 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:52.885405064 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:52.885445118 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:52.885900021 CEST	49735	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:35:52.885921001 CEST	443	49735	3.5.149.122	192.168.2.4
Sep 18, 2024 15:35:53.058523893 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.059474945 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.059530020 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.060986996 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.061050892 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.061959028 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.062048912 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.062216997 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.062233925 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.108395100 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.326747894 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.326848984 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.326900959 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.330629110 CEST	49760	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.330657959 CEST	443	49760	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.331870079 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.331917048 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.331980944 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.332192898 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.332204103 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.811557055 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.811948061 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.811984062 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.812460899 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.813138962 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.813294888 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.813333988 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.858378887 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.858392000 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.947341919 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.947452068 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.947582960 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.947730064 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.947756052 CEST	443	49761	35.190.80.1	192.168.2.4
Sep 18, 2024 15:35:53.947765112 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:53.947802067 CEST	49761	443	192.168.2.4	35.190.80.1
Sep 18, 2024 15:35:59.970247030 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:59.970325947 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:35:59.970369101 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:01.619141102 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 18, 2024 15:36:01.621352911 CEST	49742	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:01.621419907 CEST	443	49742	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:01.624479055 CEST	80	49723	199.232.214.172	192.168.2.4
Sep 18, 2024 15:36:01.624536037 CEST	49723	80	192.168.2.4	199.232.214.172
Sep 18, 2024 15:36:02.615194082 CEST	53305	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:02.620134115 CEST	53	53305	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:02.620199919 CEST	53305	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:02.620253086 CEST	53305	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:02.626332045 CEST	53	53305	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:03.094563007 CEST	53	53305	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:03.095292091 CEST	53305	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:03.100774050 CEST	53	53305	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:03.100853920 CEST	53305	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:18.008536100 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:18.008641005 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:18.008728981 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:18.011540890 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:18.011571884 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.041208029 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.041476965 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.041511059 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.042013884 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.042521000 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.042622089 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.042637110 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.042650938 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.091916084 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.625267029 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.625405073 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:19.625534058 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.627022982 CEST	53307	443	192.168.2.4	3.5.149.122
Sep 18, 2024 15:36:19.627047062 CEST	443	53307	3.5.149.122	192.168.2.4
Sep 18, 2024 15:36:46.630366087 CEST	63399	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:46.635270119 CEST	53	63399	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:46.635334015 CEST	63399	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:46.635365009 CEST	63399	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:46.640914917 CEST	53	63399	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:47.098920107 CEST	53	63399	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:47.099212885 CEST	63399	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:47.104851961 CEST	53	63399	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:47.104926109 CEST	63399	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:36:49.187877893 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:49.187931061 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.188203096 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:49.188437939 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:49.188457966 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.823168993 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.823568106 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:49.823633909 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.824115992 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.825095892 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:49.825191975 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:49.873074055 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:36:50.203583956 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 18, 2024 15:36:50.209112883 CEST	80	49724	199.232.214.172	192.168.2.4
Sep 18, 2024 15:36:50.209184885 CEST	49724	80	192.168.2.4	199.232.214.172
Sep 18, 2024 15:36:59.731964111 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:59.732110023 CEST	443	63401	142.250.186.36	192.168.2.4
Sep 18, 2024 15:36:59.732170105 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:37:01.360728979 CEST	63401	443	192.168.2.4	142.250.186.36
Sep 18, 2024 15:37:01.360766888 CEST	443	63401	142.250.186.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 18, 2024 15:35:45.105372906 CEST	53	52653	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:45.113998890 CEST	53	62596	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:46.126610994 CEST	53	58994	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:46.943768978 CEST	59727	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:46.943998098 CEST	53654	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:46.955264091 CEST	53	53654	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:46.971750021 CEST	53	59727	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.081717968 CEST	51044	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.082139969 CEST	56727	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.082766056 CEST	55357	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.085728884 CEST	56987	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.089134932 CEST	53	51044	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.089441061 CEST	53	56727	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.089534998 CEST	53	55357	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.093240023 CEST	53	56987	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.149377108 CEST	53185	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.149666071 CEST	61145	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:49.156281948 CEST	53	53185	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:49.156459093 CEST	53	61145	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.182171106 CEST	58649	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.182393074 CEST	56669	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.184137106 CEST	58624	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.184261084 CEST	49152	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.185694933 CEST	62045	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.187769890 CEST	50058	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.189791918 CEST	53	56669	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.190006018 CEST	53	58649	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.190474987 CEST	53	52390	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.190992117 CEST	53	49152	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.191229105 CEST	53	58624	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.192449093 CEST	53	62045	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.195102930 CEST	53	50058	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.196537971 CEST	53	50746	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:50.997819901 CEST	54107	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:50.998506069 CEST	52373	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.004187107 CEST	57824	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.004729033 CEST	53	54107	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.004766941 CEST	65109	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.005916119 CEST	53	52373	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.011425972 CEST	53	57824	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.012259007 CEST	53	65109	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.152019978 CEST	53	53621	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.506505966 CEST	53	63943	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.583103895 CEST	57224	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.583710909 CEST	58532	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.584176064 CEST	61742	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.584635973 CEST	50228	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:51.589904070 CEST	53	57224	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.590470076 CEST	53	58532	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.590838909 CEST	53	61742	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.592586040 CEST	53	64643	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:51.592597008 CEST	53	50228	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:52.579952955 CEST	56208	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:52.580084085 CEST	59115	53	192.168.2.4	1.1.1.1
Sep 18, 2024 15:35:52.588372946 CEST	53	56208	1.1.1.1	192.168.2.4
Sep 18, 2024 15:35:52.588388920 CEST	53	59115	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:01.781696081 CEST	138	138	192.168.2.4	192.168.2.255
Sep 18, 2024 15:36:02.614851952 CEST	53	51189	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:03.553404093 CEST	53	53809	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:22.600626945 CEST	53	60365	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:44.617567062 CEST	53	55258	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:45.662817001 CEST	53	60607	1.1.1.1	192.168.2.4
Sep 18, 2024 15:36:46.630008936 CEST	53	62597	1.1.1.1	192.168.2.4
Sep 18, 2024 15:37:16.788203001 CEST	53	53147	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 18, 2024 15:35:46.943768978 CEST	192.168.2.4	1.1.1.1	0xa54d	Standard query (0)	dltxc.s3.ap-southeast-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.943998098 CEST	192.168.2.4	1.1.1.1	0x639e	Standard query (0)	dltxc.s3.ap-southeast-1.amazonaws.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:49.081717968 CEST	192.168.2.4	1.1.1.1	0x457a	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.082139969 CEST	192.168.2.4	1.1.1.1	0x4962	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:49.082766056 CEST	192.168.2.4	1.1.1.1	0xaf2f	Standard query (0)	ipfs.io	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.085728884 CEST	192.168.2.4	1.1.1.1	0xefe0	Standard query (0)	ipfs.io	65	IN (0x0001)	false
Sep 18, 2024 15:35:49.149377108 CEST	192.168.2.4	1.1.1.1	0xf76e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.149666071 CEST	192.168.2.4	1.1.1.1	0x2235	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:50.182171106 CEST	192.168.2.4	1.1.1.1	0x4547	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.182393074 CEST	192.168.2.4	1.1.1.1	0xd869	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:50.184137106 CEST	192.168.2.4	1.1.1.1	0x9de0	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.184261084 CEST	192.168.2.4	1.1.1.1	0x9e35	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:50.185694933 CEST	192.168.2.4	1.1.1.1	0x7c47	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.187769890 CEST	192.168.2.4	1.1.1.1	0xfd94	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:50.997819901 CEST	192.168.2.4	1.1.1.1	0x24a7	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.998506069 CEST	192.168.2.4	1.1.1.1	0xaa4d	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:51.004187107 CEST	192.168.2.4	1.1.1.1	0x5000	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.004766941 CEST	192.168.2.4	1.1.1.1	0xa1fd	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:51.583103895 CEST	192.168.2.4	1.1.1.1	0xd0be	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.583710909 CEST	192.168.2.4	1.1.1.1	0x53ea	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:51.584176064 CEST	192.168.2.4	1.1.1.1	0x9e43	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.584635973 CEST	192.168.2.4	1.1.1.1	0x1d7b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 18, 2024 15:35:52.579952955 CEST	192.168.2.4	1.1.1.1	0xd5d6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:52.580084085 CEST	192.168.2.4	1.1.1.1	0x7e89	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 18, 2024 15:35:46.955264091 CEST	1.1.1.1	192.168.2.4	0x639e	No error (0)	dltxc.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	dltxc.s3.ap-southeast-1.amazonaws.com	s3-r-w.ap-southeast-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.149.122	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.129.138	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.164.11	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		3.5.150.5	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.132.179	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.184.6	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.132.35	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:46.971750021 CEST	1.1.1.1	192.168.2.4	0xa54d	No error (0)	s3-r-w.ap-southeast-1.amazonaws.com		52.219.40.163	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.089134932 CEST	1.1.1.1	192.168.2.4	0x457a	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.089134932 CEST	1.1.1.1	192.168.2.4	0x457a	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.089441061 CEST	1.1.1.1	192.168.2.4	0x4962	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 18, 2024 15:35:49.089534998 CEST	1.1.1.1	192.168.2.4	0xaf2f	No error (0)	ipfs.io		209.94.90.1	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.093240023 CEST	1.1.1.1	192.168.2.4	0xefe0	No error (0)	ipfs.io			65	IN (0x0001)	false
Sep 18, 2024 15:35:49.156281948 CEST	1.1.1.1	192.168.2.4	0xf76e	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:49.156459093 CEST	1.1.1.1	192.168.2.4	0x2235	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 18, 2024 15:35:50.189791918 CEST	1.1.1.1	192.168.2.4	0xd869	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:50.190006018 CEST	1.1.1.1	192.168.2.4	0x4547	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:50.190006018 CEST	1.1.1.1	192.168.2.4	0x4547	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.190006018 CEST	1.1.1.1	192.168.2.4	0x4547	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.191229105 CEST	1.1.1.1	192.168.2.4	0x9de0	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.191229105 CEST	1.1.1.1	192.168.2.4	0x9de0	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.191229105 CEST	1.1.1.1	192.168.2.4	0x9de0	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.191229105 CEST	1.1.1.1	192.168.2.4	0x9de0	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.192449093 CEST	1.1.1.1	192.168.2.4	0x7c47	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.192449093 CEST	1.1.1.1	192.168.2.4	0x7c47	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:50.195102930 CEST	1.1.1.1	192.168.2.4	0xfd94	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 18, 2024 15:35:51.004729033 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.004729033 CEST	1.1.1.1	192.168.2.4	0x24a7	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.005916119 CEST	1.1.1.1	192.168.2.4	0xaa4d	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 18, 2024 15:35:51.011425972 CEST	1.1.1.1	192.168.2.4	0x5000	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:51.011425972 CEST	1.1.1.1	192.168.2.4	0x5000	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.011425972 CEST	1.1.1.1	192.168.2.4	0x5000	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.012259007 CEST	1.1.1.1	192.168.2.4	0xa1fd	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:35:51.589904070 CEST	1.1.1.1	192.168.2.4	0xd0be	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.589904070 CEST	1.1.1.1	192.168.2.4	0xd0be	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.589904070 CEST	1.1.1.1	192.168.2.4	0xd0be	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.589904070 CEST	1.1.1.1	192.168.2.4	0xd0be	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.590838909 CEST	1.1.1.1	192.168.2.4	0x9e43	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.590838909 CEST	1.1.1.1	192.168.2.4	0x9e43	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:51.592597008 CEST	1.1.1.1	192.168.2.4	0x1d7b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 18, 2024 15:35:52.588372946 CEST	1.1.1.1	192.168.2.4	0xd5d6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:58.614645004 CEST	1.1.1.1	192.168.2.4	0xc10c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:35:58.614645004 CEST	1.1.1.1	192.168.2.4	0xc10c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 18, 2024 15:36:00.356762886 CEST	1.1.1.1	192.168.2.4	0xc467	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 18, 2024 15:36:00.356762886 CEST	1.1.1.1	192.168.2.4	0xc467	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

dltxc.s3.ap-southeast-1.amazonaws.com

https:

stackpath.bootstrapcdn.com

ipfs.io

cdnjs.cloudflare.com

code.jquery.com

i.imgur.com

fs.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	3.5.149.122	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:48 UTC	709	OUT	GET /svs/wx.htm?eml=test@yahoo.com HTTP/1.1 Host: dltxc.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:48 UTC	428	IN	HTTP/1.1 200 OK x-amz-id-2: MXSXasE9JQ/jiVyVLj0aWzIzPRgpQ11uqQihr59aEUedZNFpmivWzZdCqcaOKyzvJNChX4+Gl4lJ+h/ATBpWwA== x-amz-request-id: D5YZGKFY33H3ENVR Date: Wed, 18 Sep 2024 13:35:49 GMT Last-Modified: Wed, 18 Sep 2024 03:52:16 GMT ETag: "11a8eb27b3cdb137086668623b68b70e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: text/html Server: AmazonS3 Content-Length: 186578 Connection: close
2024-09-18 13:35:48 UTC	3577	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 3c 74 69 74 6c 65 3e 4d 79 44 72 69 76 65 3c 2f 74 69 74 6c 65 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>MyDrive</title
2024-09-18 13:35:48 UTC	16384	IN	Data Raw: 49 6b 43 30 55 62 69 41 49 45 67 52 59 68 53 70 55 5a 69 7a 75 66 68 65 7a 30 58 4f 4f 6d 76 6d 4e 79 49 69 73 72 4a 71 58 65 65 68 41 56 53 45 57 58 36 37 62 56 56 4e 54 50 58 72 30 61 43 79 6c 68 42 42 4f 70 2f 4e 35 6d 74 64 31 44 66 2f 7a 36 33 39 2b 2f 66 2f 70 71 2b 75 36 33 54 6a 73 39 37 73 2b 35 33 78 37 39 2f 44 46 4c 37 2f 34 70 33 2f 36 32 56 64 66 2f 64 70 2b 62 41 2b 4b 4d 62 62 2f 36 68 74 39 32 57 50 36 76 6b 38 70 36 55 66 37 30 37 49 73 39 6d 4f 79 68 33 52 64 43 4f 76 64 37 65 33 62 32 39 74 31 6d 66 73 51 68 6c 68 32 4b 5a 52 31 79 55 74 5a 53 31 68 6a 4c 47 75 32 44 62 47 73 5a 59 32 68 68 46 68 69 4b 6e 77 5a 76 70 54 65 38 66 4c 6d 54 36 34 37 78 6e 63 2f 53 33 6e 78 55 7a 35 2b 64 48 7a 75 79 63 2b 38 78 33 75 2b 34 73 75 50 31 59 Data Ascii: IkC0UbiAIEgRYhSpUZizufhez0XOOmvmNyIisrJqXeehAVSEWX67bVVNTPXr0aCylhBBOp/N5mtd1Df/z639+/f/pq+u63Tjs97s+53x79/DFL7/4p3/62Vdf/dp+bA+KMbb/6ht92WP6vk8p6Uf707Is9mOyh3RdCOvd7e3b29t1mfsQhlh2KZR1yUtZS1hjLGu2DbGsZY2hhFhiKnwZvpTe8fLmT647xnc/S3nxUz5+dHzuyc+8x3u+4suP1Y
2024-09-18 13:35:48 UTC	1024	IN	Data Raw: 37 6e 50 50 42 4c 70 37 61 4c 4e 2f 77 54 68 33 55 73 48 37 4b 67 46 4b 44 67 4c 69 68 69 67 76 4f 34 5a 41 52 62 37 43 4f 4e 6a 61 4a 68 43 42 71 4c 54 44 31 4c 6c 53 34 49 54 36 55 59 71 73 66 61 6d 76 58 36 64 39 45 2b 42 47 45 67 45 46 43 61 58 49 32 4f 36 4c 65 67 58 55 65 2b 7a 45 68 37 30 6d 75 52 74 50 48 33 5a 58 46 70 71 4d 66 43 37 30 51 37 36 4a 61 51 79 41 33 57 58 6b 62 75 4e 67 4d 76 5a 74 61 6b 33 63 6b 4d 4c 61 59 62 44 4d 76 36 35 6e 52 41 30 49 58 6d 70 30 4b 4d 57 62 31 46 6f 44 61 57 63 54 59 62 4b 63 53 59 33 2b 6c 48 6c 4b 63 55 53 69 53 6d 56 2b 5a 7a 6c 46 78 62 63 34 6f 70 64 6f 6c 37 30 5a 30 61 37 6e 41 33 2b 59 45 51 63 41 6c 51 2b 79 6f 6a 78 36 65 71 4a 35 76 70 4f 35 62 77 32 72 79 32 37 53 52 72 42 4c 52 55 66 74 66 4e 4a Data Ascii: 7nPPBLp7aLN/wTh3UsH7KgFKDgLihigvO4ZARb7CONjaJhCBqLTD1LlS4IT6UYqsfamvX6d9E+BGEgEFCaXI2O6LegXUe+zEh70muRtPH3ZXFpqMfC70Q76JaQyA3WXkbuNgMvZtak3ckMLaYbDMv65nRA0IXmp0KMWb1FoDaWcTYbKcSY3+lHlKcUSiSmV+ZzlFxbc4opdol70Z0a7nA3+YEQcAlQ+yojx6eqJ5vpO5bw2ry27SRrBLRUftfNJ
2024-09-18 13:35:49 UTC	16384	IN	Data Raw: 42 65 65 46 65 35 55 30 5a 67 58 31 67 4d 39 43 62 6d 31 65 49 49 42 46 6c 64 4b 30 63 34 4e 62 47 7a 68 37 78 79 6f 67 70 4a 76 6c 73 4d 32 55 69 4a 6a 31 72 79 65 74 59 65 2f 62 6c 64 4f 30 31 6a 38 65 6a 4b 72 54 54 70 4f 71 4f 74 6e 34 64 46 55 65 73 51 4c 2f 45 39 4e 67 2b 78 53 71 4e 33 63 68 66 34 75 71 36 52 47 49 4e 69 52 53 74 6c 78 4a 53 72 64 50 4c 73 39 65 2b 6d 71 31 53 54 56 53 48 63 6f 71 75 4f 72 47 4e 67 43 55 72 38 57 68 2b 37 6b 59 69 47 42 2b 4b 58 69 6d 79 44 4c 4f 53 33 34 6c 73 4f 69 4e 42 53 63 56 74 43 39 34 61 66 70 33 51 38 70 72 32 65 2f 4c 43 6c 76 58 2b 37 6c 6a 57 58 41 73 75 67 55 32 71 30 4e 49 67 67 74 66 58 67 67 4b 79 57 2b 71 47 4a 78 54 38 59 63 33 72 75 45 63 4d 42 46 43 6f 72 43 67 2b 32 57 4f 49 7a 4b 69 34 76 33 Data Ascii: BeeFe5U0ZgX1gM9Cbm1eIIBFldK0c4NbGzh7xyogpJvlsM2UiJj1ryetYe/bldO01j8ejKrTTpOqOtn4dFUesQL/E9Ng+xSqN3chf4uq6RGINiRStlxJSrdPLs9e+mq1STVSHcoquOrGNgCUr8Wh+7kYiGB+KXimyDLOS34lsOiNBScVtC94afp3Q8pr2e/LClvX+7ljWXAsugU2q0NIggtfXggKyW+qGJxT8Yc3ruEcMBFCorCg+2WOIzKi4v3
2024-09-18 13:35:49 UTC	1024	IN	Data Raw: 64 6f 49 55 55 79 6b 37 53 37 49 6e 64 7a 50 6f 78 78 43 30 72 78 78 4e 6b 31 78 4f 72 39 53 69 64 62 4d 37 6c 73 53 7a 6b 37 75 37 4d 4e 6c 66 73 6b 39 4f 35 63 4e 49 6f 46 46 63 37 69 4c 34 45 6a 61 6b 6d 58 54 4a 69 51 4e 34 6f 6a 54 76 78 51 69 54 79 4b 6f 52 5a 4a 79 2f 4c 42 2f 50 4e 7a 62 56 79 2f 34 61 6a 4e 57 70 45 47 39 31 62 66 4b 78 4e 61 61 4d 78 39 66 58 54 6e 2f 37 30 76 2f 32 33 2f 2b 75 72 72 37 39 75 35 56 2f 35 6a 44 70 6f 49 4c 61 4e 57 4a 56 78 58 48 47 52 62 44 64 76 4e 70 63 44 46 69 65 64 4c 42 41 4b 76 58 66 55 74 43 6a 78 44 4c 52 7a 55 72 63 74 65 45 2b 59 6f 77 52 43 7a 50 58 31 6c 64 7a 71 54 4c 55 43 72 66 62 31 39 62 58 39 44 58 6c 46 48 55 42 73 66 6f 48 79 79 78 33 4c 6a 59 75 72 2f 53 76 50 36 36 42 52 65 66 2f 77 41 4c Data Ascii: doIUUyk7S7IndzPoxxC0rxxNk1xOr9SidbM7lsSzk7u7MNlfsk9O5cNIoFFc7iL4EjakmXTJiQN4ojTvxQiTyKoRZJy/LB/PNzbVy/4ajNWpEG91bfKxNaaMx9fXTn/70v/23/+urr79u5V/5jDpoILaNWJVxXHGRbDdvNpcDFiedLBAKvXfUtCjxDLRzUrcteE+YowRCzPX1ldzqTLUCrfb19bX9DXlFHUBsfoHyyx3LjYur/SvP66BRef/wAL
2024-09-18 13:35:49 UTC	16384	IN	Data Raw: 78 34 79 2b 2b 2f 42 4c 49 5a 5a 62 43 75 6b 34 47 65 67 54 31 52 61 46 67 74 6f 53 4e 37 47 74 54 57 54 51 7a 56 59 4d 6b 49 49 73 51 31 5a 32 69 46 6e 37 68 35 4f 5a 45 75 74 67 33 76 75 6c 38 78 6b 61 56 72 69 32 43 47 55 52 34 79 58 62 2b 62 67 2f 30 59 4b 45 2b 70 59 55 4b 59 34 49 4b 4e 75 41 58 46 41 73 35 58 34 61 68 6a 49 6a 4d 71 6b 56 62 2f 50 6e 71 39 57 73 64 6a 41 43 68 4d 61 6b 56 6b 36 6b 79 2b 32 7a 44 69 6b 6c 38 77 2b 48 4b 39 73 6d 4b 36 48 2b 75 72 66 5a 52 35 43 6c 4b 58 62 43 63 71 63 6e 7a 55 68 6f 4d 6d 76 6a 51 75 32 4b 53 6e 45 4a 70 6a 4a 5a 56 55 31 36 33 33 52 4e 67 6e 77 4c 76 51 43 52 7a 57 75 59 71 71 6f 57 74 30 62 76 59 47 42 4d 49 53 72 30 74 4b 6f 70 6a 61 64 52 47 55 43 53 66 6c 4d 78 4e 6d 69 32 2b 66 66 73 57 37 7a Data Ascii: x4y++/BLIZZbCuk4GegT1RaFgtoSN7GtTWTQzVYMkIIsQ1Z2iFn7h5OZEutg3vul8xkaVri2CGUR4yXb+bg/0YKE+pYUKY4IKNuAXFAs5X4ahjIjMqkVb/Pnq9WsdjAChMakVk6ky+2zDikl8w+HK9smK6H+urfZR5ClKXbCcqcnzUhoMmvjQu2KSnEJpjJZVU1633RNgnwLvQCRzWuYqqoWt0bvYGBMISr0tKopjadRGUCSflMxNmi2+ffsW7z
2024-09-18 13:35:49 UTC	1024	IN	Data Raw: 39 2f 63 6c 31 6d 4c 59 64 46 45 4b 5a 6d 71 4b 52 32 56 57 57 2f 55 33 74 56 55 6e 36 4b 2b 35 69 55 67 64 52 56 51 42 45 4c 73 65 4c 71 4f 57 71 32 74 43 62 48 47 4f 57 70 45 72 71 48 6f 76 44 6f 7a 53 7a 73 66 4a 66 6a 58 31 76 49 2f 4e 49 44 34 37 35 66 51 69 50 6f 35 65 33 73 34 64 48 75 54 43 71 73 44 48 2b 59 5a 36 38 79 32 49 6e 32 41 32 55 4b 76 6e 70 51 2b 43 51 2f 58 44 6f 34 42 64 4b 61 58 61 4a 33 42 54 6f 75 53 37 65 78 31 42 41 51 77 48 65 46 48 35 63 32 61 5a 61 74 6d 58 6f 50 6e 42 73 4d 51 56 71 36 48 46 4b 58 57 69 31 6d 6d 68 33 4c 59 49 6c 58 61 59 34 65 71 44 38 45 46 74 6d 75 63 6d 75 64 46 70 6b 61 73 2f 5a 72 33 69 34 51 30 4e 77 30 77 54 53 6a 34 4a 51 42 48 56 55 68 6b 52 6d 33 65 32 45 74 56 31 33 6d 32 38 49 2f 39 41 38 6a 63 Data Ascii: 9/cl1mLYdFEKZmqKR2VWW/U3tVUn6K+5iUgdRVQBELseLqOWq2tCbHGOWpErqHovDozSzsfJfjX1vI/NID475fQiPo5e3s4dHuTCqsDH+YZ68y2In2A2UKvnpQ+CQ/XDo4BdKaXaJ3BTouS7ex1BAQwHeFH5c2aZatmXoPnBsMQVq6HFKXWi1mmh3LYIlXaY4eqD8EFtmucmudFpkas/Zr3i4Q0Nw0wTSj4JQBHVUhkRm3e2EtV13m28I/9A8jc
2024-09-18 13:35:49 UTC	16384	IN	Data Raw: 4c 49 75 6d 32 4c 34 63 4a 6b 39 39 31 65 32 77 50 4f 37 55 64 49 5a 42 41 58 4e 78 64 33 49 61 5a 76 4f 59 55 30 4b 47 77 51 49 55 4d 72 4d 42 41 75 32 51 58 68 61 57 6c 35 59 41 2b 43 51 43 70 64 6d 49 6f 48 32 71 79 56 5a 67 6d 6b 44 34 75 76 45 47 42 4a 67 49 6d 44 55 42 56 45 36 6e 75 59 32 35 6d 5a 2f 66 6c 4d 51 32 54 77 46 2b 62 65 50 36 4d 72 39 46 42 54 4b 73 53 47 39 6b 55 75 71 70 46 7a 6a 2f 39 39 42 50 44 67 66 66 46 48 75 79 79 57 62 6c 35 66 58 2b 2f 50 44 33 52 34 63 35 4c 54 4f 58 6f 67 46 45 58 45 65 47 78 44 43 30 61 57 61 34 34 67 41 43 48 30 4d 36 42 61 76 48 4a 77 37 4b 79 2f 31 31 4f 70 7a 4d 6b 52 4e 55 56 61 57 4e 50 4e 72 39 57 69 4b 6e 6e 70 6c 72 48 67 37 6a 58 52 43 64 56 4a 4f 58 4f 68 74 71 64 67 41 71 52 50 6c 49 31 78 68 Data Ascii: LIum2L4cJk991e2wPO7UdIZBAXNxd3IaZvOYU0KGwQIUMrMBAu2QXhaWl5YA+CQCpdmIoH2qyVZgmkD4uvEGBJgImDUBVE6nuY25mZ/flMQ2TwF+beP6Mr9FBTKsSG9kUuqpFzj/99BPDgffFHuyyWbl5fX+/PD3R4c5LTOXogFEXEeGxDC0aWa44gACH0M6BavHJw7Ky/11OpzMkRNUVaWNPNr9WiKnnplrHg7jXRCdVJOXOhtqdgAqRPlI1xh
2024-09-18 13:35:49 UTC	1024	IN	Data Raw: 36 59 46 78 37 66 34 77 38 4f 72 72 71 37 71 4b 67 6d 42 76 56 76 66 75 77 31 71 42 66 5a 70 46 4f 68 68 32 34 30 41 45 76 75 55 72 55 64 45 4c 38 69 41 66 53 4a 4e 74 33 69 6b 63 4c 50 76 47 5a 33 43 64 59 73 4d 50 70 75 35 69 61 6f 46 6a 56 67 48 63 6b 59 54 4d 75 4a 39 4b 38 57 58 76 53 41 6d 76 6a 45 6b 7a 43 57 4f 46 52 55 45 30 52 6a 34 75 4e 67 64 56 46 36 49 50 63 72 37 6e 6f 79 38 64 76 72 6e 53 78 57 4d 58 6a 4f 6b 6c 57 35 79 49 6a 59 34 47 56 68 62 35 77 74 55 34 79 6e 6e 65 35 41 6b 74 36 55 70 73 4a 4b 42 50 77 58 56 4c 4c 7a 6b 71 31 4a 58 66 57 52 38 30 4c 5a 5a 4b 65 51 79 74 72 76 4c 33 48 45 7a 36 30 64 52 41 61 41 7a 72 47 39 71 53 41 46 6f 69 30 44 64 6a 54 4a 37 36 45 41 44 36 2b 43 39 75 70 58 57 48 38 41 57 51 5a 32 76 42 4a 4d 44 Data Ascii: 6YFx7f4w8Orrq7qKgmBvVvfuw1qBfZpFOhh240AEvuUrUdEL8iAfSJNt3ikcLPvGZ3CdYsMPpu5iaoFjVgHckYTMuJ9K8WXvSAmvjEkzCWOFRUE0Rj4uNgdVF6IPcr7noy8dvrnSxWMXjOklW5yIjY4GVhb5wtU4ynne5Akt6UpsJKBPwXVLLzkq1JXfWR80LZZKeQytrvL3HEz60dRAaAzrG9qSAFoi0DdjTJ76EAD6+C9upXWH8AWQZ2vBJMD
2024-09-18 13:35:49 UTC	16384	IN	Data Raw: 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 68 63 43 38 78 4c 6a 41 76 49 69 42 34 62 57 78 75 63 7a 70 34 62 58 42 4e 54 54 30 69 61 48 52 30 63 44 6f 76 4c 32 35 7a 4c 6d 46 6b 62 32 4a 6c 4c 6d 4e 76 62 53 39 34 59 58 41 76 4d 53 34 77 4c 32 31 74 4c 79 49 67 65 47 31 73 62 6e 4d 36 63 33 52 53 5a 57 59 39 49 6d 68 30 64 48 41 36 Data Ascii: G1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	104.18.11.207	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:49 UTC	598	OUT	GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	934	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:50 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"a15c2ac3234aa8f6064ef9c1f7383c37" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-CachedAt: 01/04/2023 11:35:40 CDN-ProxyVer: 1.03 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1078 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: c6eaf77136ac05b2e12d5eac40573c47 CDN-Cache: HIT CF-Cache-Status: HIT Age: 16308887 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c51b8b17c811821-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:50 UTC	435	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7c0c/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 Data Ascii: oration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{marg
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button]
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e Data Ascii: m;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a Data Ascii: :.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c Data Ascii: md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 34 7b 2d 6d 73 2d 66 Data Ascii: x:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;order:3}.order-4{-ms-f
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d Data Ascii: -sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;m
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 Data Ascii: .333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	209.94.90.1	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:49 UTC	612	OUT	GET /ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh?filename=style.css HTTP/1.1 Host: ipfs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	1211	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 2461 Connection: close access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output Cache-Control: public, max-age=29030400, immutable content-disposition: inline; filename="style.css"; filename*=UTF-8''style.css etag: "QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh" x-ipfs-path: /ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh x-ipfs-roots: QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh x-ipfs-pop: rainbow-dc13-09 CF-Cache-Status: HIT Age: 2278035 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8c51b8b17d4a43e3-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:50 UTC	158	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 35 30 30 2c 37 30 30 2c 39 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 29 3b 0d 0a 62 6f 64 79 7b 0d 0a 09 2f 2a 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2a 2f 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6d 61 Data Ascii: @import url("https://fonts.googleapis.com/css?family=Roboto:400,500,700,900&display=swap");body{/overflow: hidden !important;/ padding: 0; ma
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 52 6f 62 6f 74 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 65 36 35 36 36 3b 09 0d 0a 7d 0d 0a 0d 0a 2e 62 67 2d 77 68 69 74 65 2c 20 2e 62 67 2d 77 68 69 74 65 32 20 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 64 64 64 Data Ascii: rgin: 0; font-size: 14px; font-family: "Roboto", sans-serif; color: #5e6566;}.bg-white, .bg-white2 { background-color: #fff!important; color: black;align-items: center; padding: 10px; border-bottom: 1px solid #dddddd
2024-09-18 13:35:50 UTC	934	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 0d 0a 7d 0d 0a 23 69 6d 61 67 65 72 6f 77 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 Data Ascii: display: -webkit-box; display: -ms-flexbox; display: flex; justify-content: space-between; padding: 0 100px; font}#imagerow{ padding-top: 18px; display: -webkit-box; display: -ms-flexbox; display: flex;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	209.94.90.1	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:49 UTC	612	OUT	GET /ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK?filename=modal.css HTTP/1.1 Host: ipfs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	1212	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:50 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1778 Connection: close access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output Cache-Control: public, max-age=29030400, immutable content-disposition: inline; filename="modal.css"; filename*=UTF-8''modal.css etag: "QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK" x-ipfs-path: /ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK x-ipfs-roots: QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK x-ipfs-pop: rainbow-dc13-05 CF-Cache-Status: HIT Age: 10826795 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8c51b8b1795f423d-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:50 UTC	157	IN	Data Raw: 20 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 75 62 69 6b 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2f 2a 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 31 76 68 3b 0d 0a 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 20 Data Ascii: @import url('https://fonts.googleapis.com/css?family=Rubik&display=swap');/* body { min-height: 81vh; background: linear-gradient(0deg,
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 23 66 66 66 2c 20 35 30 25 2c 20 23 44 45 45 45 46 45 29 3b 0d 0a 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 75 62 69 6b 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 0d 0a 20 7d 0d 0a 2a 2f 0d 0a 2f 2a 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 7d 2a 2f 0d 0a 0d 0a 20 70 20 7b 0d 0a 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 7d 0d 0a 0d 0a 20 2e 63 61 72 64 20 7b 0d 0a 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 7d 0d 0a 0d 0a 20 2e 63 61 72 64 2d 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 Data Ascii: #fff, 50%, #DEEEFE); font-family: 'Rubik', sans-serif }// .container { margin-top: 180px !important }*/ p { font-size: 14px !important } .card { border-radius: 0px !important } .card-body { border-ra
2024-09-18 13:35:50 UTC	252	IN	Data Raw: 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 34 30 30 70 78 20 2b 20 31 30 20 2a 20 28 28 31 30 30 76 77 20 2d 20 33 32 30 70 78 29 20 2f 20 36 38 30 29 29 0d 0a 20 7d 0d 0a 0d 0a 20 2e 63 72 6f 73 73 20 7b 0d 0a 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 0d 0a 20 7d 0d 0a 0d 0a 20 2e 6d 6f 64 61 6c 20 7b 0d 0a 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 72 67 62 61 28 30 2c 20 31 37 31 2c 20 32 32 36 2c 20 30 2e 39 29 20 31 2e 32 25 3b 0d 0a 20 7d 0d 0a 0d 0a 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 7d Data Ascii: .modal-content { width: calc(400px + 10 * ((100vw - 320px) / 680)) } .cross { cursor: pointer } .modal { background-image: rgba(0, 171, 226, 0.9) 1.2%; } .modal-content { background: transparent !important }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	104.18.11.207	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:50 UTC	582	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 08/20/2022 02:35:31 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 864 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a6bc14db3a88cabcd6b3bc56a77879ef CDN-Cache: HIT CF-Cache-Status: HIT Age: 16318389 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c51b8b61c2e7d18-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:50 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c00/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 Data Ascii: ry","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"i
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 Data Ascii: n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 Data Ascii: N_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: ent).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._elem
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 Data Ascii: n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("di
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 Data Ascii: keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 Data Ascii: d(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 Data Ascii: [e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEv
2024-09-18 13:35:50 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 Data Ascii: {return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	104.17.25.14	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:50 UTC	601	OUT	GET /ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:51 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-13b3a" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 08 Sep 2025 13:35:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yAwmRPu7uy9CKrTZbeJEaP4L8m1xcZkuUG6oSz4%2FdR3V%2FZCF1SRr7IJK%2B%2BXdp2OmlFKKqmR90ZpWDXYtC%2B8hb2p4jASfNsQhfGjWGdx9YCkmM5bRLZzMmdhkkgKxV%2FamQbcziYWW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c51b8b6ba6b7c94-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:51 UTC	416	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 34 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bf7/! Bootstrap v4.4.0 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 65 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 65 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 70 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e Data Ascii: e\|\|self).bootstrap={},e.jQuery)}(this,function(e,p){"use strict";function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function s(e,t,n){return
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 29 3b 69 66 28 21 74 7c 7c 22 23 22 3d 3d 3d 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 74 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3f 74 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 74 3d 70 28 65 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 70 28 65 29 2e 63 73 73 28 22 74 72 61 6e 73 69 Data Ascii: );if(!t\|\|"#"===t){var n=e.getAttribute("href");t=n&&"#"!==n?n.trim():""}try{return document.querySelector(t)?t:null}catch(e){return null}},getTransitionDurationFromElement:function(e){if(!e)return 0;var t=p(e).css("transition-duration"),n=p(e).css("transi
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 65 5b 30 5d 3c 32 26 26 65 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 31 5d 26 26 65 5b 32 5d 3c 31 7c 7c 34 3c 3d 65 5b 30 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 29 7d 7d 3b 6d 2e 6a 51 75 65 72 79 44 65 74 65 63 74 69 6f 6e 28 29 2c 70 2e 66 6e 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 6f 2c 70 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6d 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d Data Ascii: it(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1===e[0]&&9===e[1]&&e[2]<1\|\|4<=e[0])throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}};m.jQueryDetection(),p.fn.emulateTransitionEnd=o,p.event.special[m.TRANSITION_END]
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 70 28 74 68 69 73 29 2c 74 3d 65 2e 64 61 74 61 28 61 29 3b 74 7c 7c 28 74 3d 6e 65 77 20 69 28 74 68 69 73 29 2c 65 2e 64 61 74 61 28 61 2c 74 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 74 5b 6e 5d 28 74 68 69 73 29 7d 29 7d 2c 69 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 73 28 69 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: unction(n){return this.each(function(){var e=p(this),t=e.data(a);t\|\|(t=new i(this),e.data(a,t)),"close"===n&&t[n](this)})},i._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.close(this)}},s(i,null,[{key:"VERSION",get:function(){return
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 74 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 54 29 29 2c 65 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 54 29 29 7d 2c 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 79 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c Data Ascii: ribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(t&&this._element.setAttribute("aria-pressed",!this._element.classList.contains(T)),e&&p(this._element).toggleClass(T))},e.dispose=function(){p.removeData(this._element,y),this._element=nul
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 61 63 65 2c 70 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 78 2c 70 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 66 6e 5b 76 5d 3d 77 2c 78 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 52 3d 22 2e 22 2b 48 2c 46 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 4d 3d 70 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 2c 74 6f 75 63 68 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e Data Ascii: ace,p.fn[v].Constructor=x,p.fn[v].noConflict=function(){return p.fn[v]=w,x._jQueryInterface};var j="carousel",H="bs.carousel",R="."+H,F=".data-api",M=p.fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0,touch:!0},U={interval:"(number\|boolean
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 73 65 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: ent.querySelector(se),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var e=r.prototype;return e.next=function(){th
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 6c 28 7b 7d 2c 57 2c 7b 7d 2c 65 29 2c 6d 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 65 2c 55 29 2c 65 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4d 61 74 68 2e 61 62 Data Ascii: =null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(e){return e=l({},W,{},e),m.typeCheckConfig(j,e,U),e},e._handleSwipe=function(){var e=Math.ab
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 65 29 29 3a 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 54 4f 55 43 48 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 54 4f 55 43 48 4d 4f Data Ascii: _pointerEvent?(p(this._element).on(V.POINTERDOWN,function(e){return n(e)}),p(this._element).on(V.POINTERUP,function(e){return i(e)}),this._element.classList.add(ee)):(p(this._element).on(V.TOUCHSTART,function(e){return n(e)}),p(this._element).on(V.TOUCHMO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	151.101.66.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:50 UTC	560	OUT	GET /jquery-3.4.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71037 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-1157d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1241506 Date: Wed, 18 Sep 2024 13:35:50 GMT X-Served-By: cache-lga21992-LGA, cache-ewr-kewr1740045-EWR X-Cache: HIT, HIT X-Cache-Hits: 185, 0 X-Timer: S1726666551.837761,VS0,VE1 Vary: Accept-Encoding
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.4.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 2c 64 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 54 28 65 29 3b 72 65 74 75 72 6e 21 78 28 65 29 26 26 21 77 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 30 3c 74 26 26 74 2d 31 20 69 6e 20 65 29 7d 45 Data Ascii: effects/Tween,-effects/animatedSelector",E=function(e,t){return new E.fn.init(e,t)},d=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g;function p(e){var t=!!e&&"length"in e&&e.length,n=T(e);return!x(e)&&!w(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}E
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 45 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 66 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 Data Ascii: void 0!==r&&(a[t]=r));return a},E.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"fu
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 70 2c 78 2c 6f 2c 69 2c 68 2c 66 2c 67 2c 77 2c 75 2c 6c 2c 43 2c 54 2c 61 2c 45 2c 76 2c 73 2c 63 2c 79 2c 4e 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 6d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2c 41 3d 30 2c 72 3d 30 2c 64 3d 75 65 28 29 2c 62 3d 75 65 28 29 2c 6b 3d 75 65 28 29 2c 53 3d 75 65 28 29 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 4c 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 6a 3d 74 2e 70 6f 70 2c 71 Data Ascii: nction(e,t){n["[object "+t+"]"]=t.toLowerCase()});var h=function(n){var e,p,x,o,i,h,f,g,w,u,l,C,T,a,E,v,s,c,y,N="sizzle"+1*new Date,m=n.document,A=0,r=0,d=ue(),b=ue(),k=ue(),S=ue(),D=function(e,t){return e===t&&(l=!0),0},L={}.hasOwnProperty,t=[],j=t.pop,q
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 59 3d 2f 48 54 4d 4c 24 2f 69 2c 47 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 4b 3d 2f 5e 68 5c 64 24 2f 69 2c 4a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 52 2b 22 Data Ascii: \|eq\|gt\|lt\|nth\|first\|last)(?:\$"+R+"((?:-\\d)?\\d)"+R+"\$\|)(?=[^-]\|$)","i")},Y=/HTML$/i,G=/^(?:input\|select\|textarea\|button)$/i,K=/^h\d$/i,J=/^[^{]+\{\s\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\([\\da-f]{1,6}"+R+"
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 26 26 70 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c 6e 7d 69 66 28 70 2e 71 73 61 26 26 21 53 5b 74 2b 22 20 22 5d 26 26 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 26 26 28 31 21 3d 3d 64 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 64 26 26 55 2e 74 65 73 74 28 74 29 29 7b 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c Data Ascii: &&p.getElementsByClassName&&e.getElementsByClassName)return O.apply(n,e.getElementsByClassName(i)),n}if(p.qsa&&!S[t+" "]&&(!v\|\|!v.test(t))&&(1!==d\|\|"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===d&&U.test(t)){(s=e.getAttribute("id"))?s=s.replace(re,
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 61 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 Data Ascii: Node.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 Data Ascii: nction(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},x.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 Data Ascii: nction(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=T.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.pus
2024-09-18 13:35:50 UTC	1378	IN	Data Raw: 6f 63 75 6d 65 6e 74 3d 3d 3d 6d 26 26 79 28 6d 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 6d 26 26 79 28 6d 2c 74 29 3f 31 3a 75 3f 48 28 75 2c 65 29 2d 48 28 75 2c 74 29 3a 30 3a 34 26 6e 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 2c 72 3d 30 2c 69 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6f 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 61 3d 5b 65 5d 2c 73 3d 5b 74 5d 3b 69 66 28 21 69 7c 7c 21 6f 29 72 65 74 75 72 6e 20 65 3d 3d 3d 54 3f 2d 31 3a 74 3d 3d 3d 54 3f 31 3a 69 3f 2d 31 3a 6f 3f 31 3a 75 3f 48 28 75 2c 65 29 2d 48 28 75 2c 74 29 3a 30 3b 69 66 28 69 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 Data Ascii: ocument===m&&y(m,e)?-1:t===T\|\|t.ownerDocument===m&&y(m,t)?1:u?H(u,e)-H(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i\|\|!o)return e===T?-1:t===T?1:i?-1:o?1:u?H(u,e)-H(u,t):0;if(i===o)return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	199.232.196.193	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:50 UTC	603	OUT	GET /6C3Pnkj.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:50 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30967 Content-Type: image/png Last-Modified: Mon, 05 Feb 2024 12:10:54 GMT ETag: "46ee88a645807efd8fe76c7689608259" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: HLfLfX3rbCDdnMRjgmK32Ek01x_B_xS7SL1LPeY7I8ctsZPG_khcAw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1065620 Date: Wed, 18 Sep 2024 13:35:50 GMT X-Served-By: cache-iad-kcgs7200038-IAD, cache-ewr-kewr1740072-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1726666551.838011,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 02 80 08 06 00 00 00 0c cd c9 23 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 78 ac 49 44 41 54 78 da ed dd 79 78 5c 75 f9 ff ff d7 7d 66 b2 14 da b4 c8 be 29 d0 94 45 d9 ab b2 b9 04 9a cc 64 d2 cc b4 45 07 14 45 71 01 17 c4 1d 37 5c 22 ee e2 0a b8 55 5c 3e b2 89 a3 d0 26 69 32 33 49 31 6e 14 84 b2 a9 2c a5 91 45 76 a8 b4 09 d0 4c 32 73 ee cf 1f 0d b2 d3 6c 73 ee b3 bc 1e d7 f5 b9 7e d7 f5 bd 2e e9 f3 e4 37 67 ce 3d 67 79 1f 80 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 Data Ascii: PNGIHDR#bKGDxIDATxyx\u}f)EdEEq7\"U\>&i23I1n,EvL2sls~.7g=gy
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 2d 14 0c 99 d6 d6 8c aa 76 00 38 cc ba c5 47 5c 00 2b 00 7c b1 ab 50 f8 97 75 4c 94 71 00 04 24 d3 da fa 66 55 fd 3a 80 46 eb 18 1f 7b 02 c0 f9 52 57 f7 35 de cf 11 4e 8b 9b 9b 0f 70 62 b1 2f 03 c8 5a b7 f8 5c b7 00 1f eb 2c 14 d6 5b 87 90 3f a5 5b 5b 5f 03 d7 3d 07 22 6f b4 6e f1 31 17 c0 1f 62 22 9f e2 a5 61 1b 91 1e 00 db 5a 5a 0e 8d 39 ce 79 e0 99 8e c9 b8 5f 81 cf 76 17 0a 17 62 cb e5 31 0a b8 a5 4d 4d f3 2a b5 b5 5f 86 c8 e9 88 ce 7d 49 d3 35 06 d5 9f 48 7d fd e7 f9 83 88 9e d2 d6 d6 b6 4b ac 52 f9 36 80 b7 23 e2 c7 d7 49 78 52 44 ce 19 1a 19 f9 26 df 66 e5 ad 48 7e 40 53 a9 54 43 8d eb 7e 5d 81 f7 83 07 bc a9 11 b9 52 80 0f 72 41 dd 40 93 f6 64 f2 14 01 be 0d 60 07 eb 98 20 12 e0 5e 05 3e da 55 28 fc c1 ba 85 ec 64 b3 d9 d8 c8 d0 d0 19 00 be 0c a0 Data Ascii: -v8G\+\|PuLq$fU:F{RW5Npb/Z\,[?[[_="on1b"aZZ9y_vb1MM*_}I5H}KR6#IxRD&fH~@STC~]RrA@d` ^>U(d
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 69 9e 8a fc 11 c0 02 eb 16 9a b6 ed 1d e0 e8 43 0e 3b ec d2 5b 6e b9 85 8b 45 7b 2c d3 d2 b2 9b 02 7f c4 96 37 4e 50 b0 ed 1e 17 39 f8 90 c3 0f ff dd 2d b7 dc c2 c5 a2 b7 22 50 67 00 97 b6 b6 ee a5 22 bf 07 4f d1 87 87 c8 57 32 89 c4 5b ac 33 82 24 9b cd c6 2a b5 b5 17 83 0b d3 86 87 ea 31 23 43 43 ff 87 80 df 97 1d 34 4d 4d 4d f5 ea 38 57 00 e0 65 f8 f0 68 1f 19 1e 3e c7 3a 22 08 02 33 00 66 32 99 39 e3 af 77 e3 a5 92 70 11 05 7e 99 6e 6d 7d 8d 75 48 50 6c 1e 1a fa 2e 44 da ac 3b 68 c6 65 d3 89 c4 a7 ad 23 22 44 e6 d4 d5 fd 02 c0 6b ad 43 68 86 a9 7e ac 3d 99 3c d5 3a c3 ef 02 33 00 62 74 f4 97 10 39 c8 3a 83 aa 40 64 16 54 ff c0 1b 78 b7 2e 93 48 bc 45 80 8f 58 77 50 95 88 7c 6d 71 6b 6b d2 3a 23 0a d2 89 c4 27 00 9c 64 dd 41 d5 21 c0 79 99 96 96 57 5b Data Ascii: iC;[nE{,7NP9-"Pg"OW2[3$*1#CC4MMM8Weh>:"3f29wp~nm}uHPl.D;he#"DkCh~=<:3bt9:@dTx.HEXwP\|mqkk:#'dA!yW[
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: a8 72 8d 26 9a 8a 83 db 93 c9 d7 5a 47 cc 14 57 e4 bd d6 0d 14 48 22 b1 18 1f 06 79 06 71 5d ee 4b 34 15 75 71 d7 0d df 95 a5 ad 30 1b 00 37 6f da 94 04 10 b9 89 9b 66 86 a8 86 62 67 6d 6a 6a aa 07 70 bc 75 07 05 94 ea db 3a 3a 3a cc ef e5 f6 83 f1 87 3f 12 d6 1d 14 4c 02 bc dd ba c1 6b 96 5f 1c 91 5e 80 91 a6 49 e4 ad 61 58 bf 69 76 6d ed 12 00 73 ad 3b 28 b0 f6 bc fe aa ab 5e 67 1d e1 07 65 c7 79 0b b8 f4 0b 4d 91 02 0b 97 a4 52 91 5a 91 c4 64 00 4c a7 d3 db 88 48 c6 7a e3 29 d0 76 9c 53 53 73 9c 75 c4 74 89 c8 5b ac 1b 28 d8 94 9f a1 2d 54 f9 77 a0 69 a9 54 2a 91 7a 3f b0 c9 00 a8 63 63 49 70 c1 5b 9a 2e c7 59 6a 9d 30 1d e3 6b ff f1 92 15 4d d7 b2 a8 5f 06 ce 2c 5a b4 33 80 23 ac 3b 28 d8 44 64 99 75 83 97 4c be 34 1c d5 a5 d6 1b 4e a1 b0 04 41 7e 8a Data Ascii: r&ZGWH"yq]K4uq07ofbgmjjpu:::?Lk_^IaXivms;(^geyMRZdLHz)vSSsut[(-TwiT*z?ccIp[.Yj0kM_,Z3#;(DduL4NA~
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 00 5d 80 fb 12 55 55 2c e4 fb 92 77 6f 02 71 dd 87 ad 37 96 42 ed 21 eb 80 89 50 11 ee 07 54 55 31 d5 07 ad 1b bc 20 00 f7 25 aa ae ba ba 40 1c 57 a6 ca bb 37 81 00 0f 58 6f 2c 85 da fd d6 01 13 51 11 e1 7e 40 d5 a4 1b 47 46 22 31 00 f2 98 42 55 b6 b1 ab ab eb 49 eb 88 6a f2 72 00 0c c4 01 9a 02 2a 20 67 3d b6 dd 76 db 07 00 a8 75 07 85 d6 63 03 03 03 23 d6 11 5e a8 38 0e 8f 29 54 4d 81 38 a6 4c 87 67 03 60 0c b8 cb 7a 63 29 bc d4 71 ee b2 6e 98 88 5c 2e 37 0a 9e b9 a0 ea b9 cb 3a c0 2b b3 67 cf 7e 00 5c 5e 8c aa e7 4e eb 80 6a f3 6c 00 2c d7 d4 ac b3 de 58 0a 2f c7 75 d7 5b 37 4c 98 ea 1d d6 09 14 5a 91 f9 6c e5 72 b9 0a 22 70 90 26 23 11 f8 9e f6 6c 00 5c b5 6a d5 63 00 36 58 6f 30 85 94 6a 60 06 40 15 e1 8f 21 aa 0a 89 c0 41 eb 39 a2 b6 bd e4 11 11 09 Data Ascii: ]UU,woq7B!PTU1 %@W7Xo,Q~@GF"1BUIjr* g=vuc#^8)TM8Lg`zc)qn\.7:+g~\^Njl,X/u[7LZlr"p&#l\jc6Xo0j`@!A9
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: ef 5f a2 17 37 34 0a fc c0 3a 22 08 54 f5 6c f0 2c 20 bd 08 01 ee 1d 8b c5 22 7d db 8d 2f 06 40 00 d8 f5 91 47 7e 0e 60 bd 75 07 f9 52 c5 75 dd cf 59 47 78 a1 ab 58 bc 13 22 91 7c 22 8d 26 40 f5 db 85 42 e1 bf d6 19 41 b0 aa 58 5c 0b de 0b 48 2f 46 f5 4b 51 3e fb 07 f8 68 00 5c be 76 ed 98 a8 7e c1 ba 83 7c 48 f5 d7 91 5a ef ac a6 e6 6c f0 89 60 7a be fb 4b 3c fb 37 39 aa 9f 01 10 e9 83 3c bd a0 db 86 46 47 7f 63 1d 61 cd 37 03 20 00 74 16 8b 97 01 b8 c6 ba 83 7c e5 71 ad ad fd 92 75 84 97 ba ba ba 1e 85 ea 37 ad 3b c8 5f 14 f8 7c b1 58 7c c2 ba 23 48 ba 8a c5 3b 01 fc c4 ba 83 fc 45 45 3e c1 57 28 fa 6c 00 04 a0 ae ea e9 e0 0b bd e9 69 5f 1d 5f d6 21 52 ea e7 ce fd 1e 80 db ad 3b c8 27 44 ae 7b f5 51 47 f1 01 a1 29 28 3b ce 97 00 3c 60 dd 41 fe a0 40 67 Data Ascii: _74:"Tl, "}/@G~`uRuYGxX"\|"&@BAX\H/FKQ>h\v~\|HZl`zK<79<FGca7 t\|qu7;_\|X\|#H;EE>W(li__!R;'D{QG)(;<`A@g
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 9e fd 1b 1b e7 00 38 ca ba 85 b6 ea da 51 20 b9 6a f5 ea c7 ac 43 c2 e6 f6 c1 c1 3b f6 6f 6c fc 1b b6 0c 81 bc 1c ec 6f 1b 55 24 d5 55 2c 5e 65 1d 42 cf b7 6e 70 f0 a6 7d e7 cf bf 5d 44 96 20 04 c7 c8 90 7b d0 89 c5 5a ba f2 f9 7f 5a 87 04 51 28 3e dc b7 0f 0e 16 f7 9f 3f 3f 0e 91 37 58 b7 d0 8b 10 b9 b2 be 54 4a 75 ae 5e cd 1b dd ab e4 f6 c1 c1 bb f6 db 77 df ab a0 7a 3c 80 3a eb 1e 7a 41 0f 8b e3 b4 74 e5 f3 d7 5a 87 d0 8b 5b 37 38 f8 af fd e6 cf ff 07 44 96 81 67 d5 fd ea 2e 01 8e ed cc e7 6f b3 0e 09 2a b1 0e 98 49 ed c9 e4 e9 02 fc 10 21 19 6c 43 e4 f2 e1 52 e9 6d 03 03 03 23 d6 21 51 b0 38 91 38 30 26 d2 ab c0 1e d6 2d f4 2c 77 56 62 b1 d6 9e 9e 9e 75 d6 21 34 31 ed ad ad 47 89 6a 17 80 ed ad 5b e8 59 fe 59 76 9c 54 6f 6f ef bd d6 21 41 16 aa 7b 1c Data Ascii: 8Q jC;oloU$U,^eBnp}]D {ZZQ(>??7XTJu^wz<:zAtZ[78Dg.o*I!lCRm#!Q880&-,wVbu!41Gj[YYvToo!A{
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 1b ab 54 de 0d e0 3d 08 ef fd b2 0f 02 f8 3f b7 52 59 be aa bf ff df d6 31 14 4e 4b 52 a9 57 ba ae fb 0e 6c 39 ae 84 f3 4a 93 ea 7d 10 b9 08 95 ca 8f b9 a4 8b 3f 71 00 9c 84 4c 4b cb 6e 70 9c b7 2a f0 36 00 87 59 f7 4c db 96 1d f4 b7 15 d7 bd a8 a7 af ef 46 eb 1c 0a 86 f1 05 70 33 0a bc 4d 80 56 04 7d d9 0b d5 cd 10 e9 54 d5 8b 77 db b0 21 cf 17 cd 93 57 b2 4d 4d b3 37 d7 d5 1d 2f 22 6f 83 ea 22 00 31 eb a6 69 1a 86 c8 e5 e2 ba 17 1f 7e f4 d1 ab b9 34 92 bf 71 00 9c a2 74 22 b1 3f 80 a5 10 59 0a e0 35 08 ca 4a f0 22 ff 06 b0 12 22 2b 17 1e 71 c4 5f b8 83 d2 74 24 93 c9 97 d5 a9 a6 01 2c 51 91 24 82 b3 9e e0 26 55 ed 05 b0 c2 a9 af ef e1 42 e6 64 ad ad ad 6d 97 78 b9 9c d1 2d c7 94 e3 00 d4 59 37 4d d0 06 88 74 2b b0 72 d6 9c 39 f9 5c 2e b7 d9 3a 88 26 86 Data Ascii: T=?RY1NKRWl9J}?qLKnp*6YLFp3MV}Tw!WMM7/"o"1i~4qt"?Y5J""+q_t$,Q$&UBdmx-Y7Mt+r9\.:&
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: 9c 48 1c e8 00 2d 00 9a 21 f2 06 00 b3 ad 9b 9e a1 0c d5 eb 04 e8 d7 58 ac 7f d7 87 1f be 6a f9 da b5 63 d6 51 14 3e cb 12 89 9d c6 80 16 11 69 16 a0 59 81 3d ac 9b 9e 45 e4 df 00 fa 05 e8 2f a9 ae 2e 14 0a ff b5 4e 22 7a 4a 26 93 99 a3 a5 d2 71 0a 34 0b b0 08 c0 01 d6 4d cf f1 10 80 d5 0a f4 57 1c a7 af b7 b7 f7 5e eb 20 9a 1e 0e 80 53 d0 d1 d1 e1 ac bd e6 9a d7 c3 75 97 02 58 02 60 6f eb a6 49 d8 08 a0 07 c0 ca 92 ea 2a 9e 1d a4 e9 58 9a 4a cd 77 5d f7 4d 2e b0 44 80 23 b1 f5 cb b7 7e 51 86 c8 9f 45 b5 53 54 2f e7 25 63 b2 90 59 b4 68 67 ad a9 59 0a d5 a5 00 8e 05 50 67 dd 34 41 2a c0 f5 00 56 56 54 af 58 55 2c fe d3 3a 88 26 8f 03 e0 24 2c 69 6b 3b 48 cb e5 93 21 f2 56 df 9d dd 98 9a c7 a1 ba c2 75 9c 8b 5e 73 e4 91 7d bc e7 83 26 22 9d 4e ef 80 52 e9 Data Ascii: H-!XjcQ>iY=E/.N"zJ&q4MW^ SuX`oIXJw]M.D#~QEST/%cYhgYPg4AVVTXU,:&$,ik;H!Vu^s}&"NR
2024-09-18 13:35:50 UTC	1371	IN	Data Raw: e7 d4 d6 fe 1c 22 6f b7 6e 89 32 01 d6 41 24 d3 99 cf df 6e dd 12 36 a1 1b 00 d3 ad ad ef 83 ea f9 00 e2 d6 2d 04 40 f5 a2 fa b9 73 df c3 9b e2 bd 95 69 6d 3d 18 aa ab 14 d8 c3 ba 85 00 00 b7 bb 95 4a db aa fe fe 7f 5b 87 d0 d6 b5 b5 b5 ed 12 af 54 ba 15 58 68 dd 42 00 80 0d 10 59 ca 35 03 67 56 98 06 40 c9 b4 b6 7e 49 55 bf 64 1d 42 cf 21 72 65 7d b9 7c 7c ae bf 7f 93 75 4a 14 8c df af 74 05 80 b9 d6 2d f4 2c 0f b9 aa 8b 57 15 8b 6b ad 43 e8 c5 2d 4d a5 e6 57 5c b7 17 c0 02 eb 16 7a 96 92 aa be 93 f7 d5 ce 9c 50 2c fe da d1 d1 e1 cc a9 ab 5b 0e e0 e3 d6 2d f4 82 f6 2e 3b 4e 72 fe be fb 5e be 7e fd fa 27 ad 63 c2 2c d3 da 7a fc f8 f0 c7 27 de fd 67 b6 88 9c b4 7f 63 e3 d5 b7 0f 0e de 65 1d 43 cf 97 4e 26 0f 57 d5 3f 81 6f 87 f2 a3 b8 88 2c db b7 b1 f1 81 Data Ascii: "on2A$n6-@sim=J[TXhBY5gV@~IUdB!re}\|\|uJt-,WkC-MW\zP,[-.;Nr^~'c,z'gceCN&W?o,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	104.18.10.207	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:51 UTC	385	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:51 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 08/20/2022 02:35:31 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 864 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a6bc14db3a88cabcd6b3bc56a77879ef CDN-Cache: HIT CF-Cache-Status: HIT Age: 16318390 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c51b8bb38b98c47-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:51 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c00/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 Data Ascii: ry","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"i
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 Data Ascii: n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 Data Ascii: N_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: ent).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._elem
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 Data Ascii: n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("di
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 Data Ascii: keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 Data Ascii: d(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 Data Ascii: [e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEv
2024-09-18 13:35:51 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 Data Ascii: {return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-18 13:35:51 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=25944 Date: Wed, 18 Sep 2024 13:35:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	199.232.192.193	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:51 UTC	346	OUT	GET /6C3Pnkj.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:51 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30967 Content-Type: image/png Last-Modified: Mon, 05 Feb 2024 12:10:54 GMT ETag: "46ee88a645807efd8fe76c7689608259" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: HLfLfX3rbCDdnMRjgmK32Ek01x_B_xS7SL1LPeY7I8ctsZPG_khcAw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Wed, 18 Sep 2024 13:35:51 GMT Age: 1065620 X-Served-By: cache-iad-kcgs7200038-IAD, cache-ewr-kewr1740031-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 9, 1 X-Timer: S1726666552.620900,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 02 80 08 06 00 00 00 0c cd c9 23 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 78 ac 49 44 41 54 78 da ed dd 79 78 5c 75 f9 ff ff d7 7d 66 b2 14 da b4 c8 be 29 d0 94 45 d9 ab b2 b9 04 9a cc 64 d2 cc b4 45 07 14 45 71 01 17 c4 1d 37 5c 22 ee e2 0a b8 55 5c 3e b2 89 a3 d0 26 69 32 33 49 31 6e 14 84 b2 a9 2c a5 91 45 76 a8 b4 09 d0 4c 32 73 ee cf 1f 0d b2 d3 6c 73 ee b3 bc 1e d7 f5 b9 7e d7 f5 bd 2e e9 f3 e4 37 67 ce 3d 67 79 1f 80 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 Data Ascii: PNGIHDR#bKGDxIDATxyx\u}f)EdEEq7\"U\>&i23I1n,EvL2sls~.7g=gy
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 2d 14 0c 99 d6 d6 8c aa 76 00 38 cc ba c5 47 5c 00 2b 00 7c b1 ab 50 f8 97 75 4c 94 71 00 04 24 d3 da fa 66 55 fd 3a 80 46 eb 18 1f 7b 02 c0 f9 52 57 f7 35 de cf 11 4e 8b 9b 9b 0f 70 62 b1 2f 03 c8 5a b7 f8 5c b7 00 1f eb 2c 14 d6 5b 87 90 3f a5 5b 5b 5f 03 d7 3d 07 22 6f b4 6e f1 31 17 c0 1f 62 22 9f e2 a5 61 1b 91 1e 00 db 5a 5a 0e 8d 39 ce 79 e0 99 8e c9 b8 5f 81 cf 76 17 0a 17 62 cb e5 31 0a b8 a5 4d 4d f3 2a b5 b5 5f 86 c8 e9 88 ce 7d 49 d3 35 06 d5 9f 48 7d fd e7 f9 83 88 9e d2 d6 d6 b6 4b ac 52 f9 36 80 b7 23 e2 c7 d7 49 78 52 44 ce 19 1a 19 f9 26 df 66 e5 ad 48 7e 40 53 a9 54 43 8d eb 7e 5d 81 f7 83 07 bc a9 11 b9 52 80 0f 72 41 dd 40 93 f6 64 f2 14 01 be 0d 60 07 eb 98 20 12 e0 5e 05 3e da 55 28 fc c1 ba 85 ec 64 b3 d9 d8 c8 d0 d0 19 00 be 0c a0 Data Ascii: -v8G\+\|PuLq$fU:F{RW5Npb/Z\,[?[[_="on1b"aZZ9y_vb1MM*_}I5H}KR6#IxRD&fH~@STC~]RrA@d` ^>U(d
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 69 9e 8a fc 11 c0 02 eb 16 9a b6 ed 1d e0 e8 43 0e 3b ec d2 5b 6e b9 85 8b 45 7b 2c d3 d2 b2 9b 02 7f c4 96 37 4e 50 b0 ed 1e 17 39 f8 90 c3 0f ff dd 2d b7 dc c2 c5 a2 b7 22 50 67 00 97 b6 b6 ee a5 22 bf 07 4f d1 87 87 c8 57 32 89 c4 5b ac 33 82 24 9b cd c6 2a b5 b5 17 83 0b d3 86 87 ea 31 23 43 43 ff 87 80 df 97 1d 34 4d 4d 4d f5 ea 38 57 00 e0 65 f8 f0 68 1f 19 1e 3e c7 3a 22 08 02 33 00 66 32 99 39 e3 af 77 e3 a5 92 70 11 05 7e 99 6e 6d 7d 8d 75 48 50 6c 1e 1a fa 2e 44 da ac 3b 68 c6 65 d3 89 c4 a7 ad 23 22 44 e6 d4 d5 fd 02 c0 6b ad 43 68 86 a9 7e ac 3d 99 3c d5 3a c3 ef 02 33 00 62 74 f4 97 10 39 c8 3a 83 aa 40 64 16 54 ff c0 1b 78 b7 2e 93 48 bc 45 80 8f 58 77 50 95 88 7c 6d 71 6b 6b d2 3a 23 0a d2 89 c4 27 00 9c 64 dd 41 d5 21 c0 79 99 96 96 57 5b Data Ascii: iC;[nE{,7NP9-"Pg"OW2[3$*1#CC4MMM8Weh>:"3f29wp~nm}uHPl.D;he#"DkCh~=<:3bt9:@dTx.HEXwP\|mqkk:#'dA!yW[
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: a8 72 8d 26 9a 8a 83 db 93 c9 d7 5a 47 cc 14 57 e4 bd d6 0d 14 48 22 b1 18 1f 06 79 06 71 5d ee 4b 34 15 75 71 d7 0d df 95 a5 ad 30 1b 00 37 6f da 94 04 10 b9 89 9b 66 86 a8 86 62 67 6d 6a 6a aa 07 70 bc 75 07 05 94 ea db 3a 3a 3a cc ef e5 f6 83 f1 87 3f 12 d6 1d 14 4c 02 bc dd ba c1 6b 96 5f 1c 91 5e 80 91 a6 49 e4 ad 61 58 bf 69 76 6d ed 12 00 73 ad 3b 28 b0 f6 bc fe aa ab 5e 67 1d e1 07 65 c7 79 0b b8 f4 0b 4d 91 02 0b 97 a4 52 91 5a 91 c4 64 00 4c a7 d3 db 88 48 c6 7a e3 29 d0 76 9c 53 53 73 9c 75 c4 74 89 c8 5b ac 1b 28 d8 94 9f a1 2d 54 f9 77 a0 69 a9 54 2a 91 7a 3f b0 c9 00 a8 63 63 49 70 c1 5b 9a 2e c7 59 6a 9d 30 1d e3 6b ff f1 92 15 4d d7 b2 a8 5f 06 ce 2c 5a b4 33 80 23 ac 3b 28 d8 44 64 99 75 83 97 4c be 34 1c d5 a5 d6 1b 4e a1 b0 04 41 7e 8a Data Ascii: r&ZGWH"yq]K4uq07ofbgmjjpu:::?Lk_^IaXivms;(^geyMRZdLHz)vSSsut[(-TwiT*z?ccIp[.Yj0kM_,Z3#;(DduL4NA~
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 00 5d 80 fb 12 55 55 2c e4 fb 92 77 6f 02 71 dd 87 ad 37 96 42 ed 21 eb 80 89 50 11 ee 07 54 55 31 d5 07 ad 1b bc 20 00 f7 25 aa ae ba ba 40 1c 57 a6 ca bb 37 81 00 0f 58 6f 2c 85 da fd d6 01 13 51 11 e1 7e 40 d5 a4 1b 47 46 22 31 00 f2 98 42 55 b6 b1 ab ab eb 49 eb 88 6a f2 72 00 0c c4 01 9a 02 2a 20 67 3d b6 dd 76 db 07 00 a8 75 07 85 d6 63 03 03 03 23 d6 11 5e a8 38 0e 8f 29 54 4d 81 38 a6 4c 87 67 03 60 0c b8 cb 7a 63 29 bc d4 71 ee b2 6e 98 88 5c 2e 37 0a 9e b9 a0 ea b9 cb 3a c0 2b b3 67 cf 7e 00 5c 5e 8c aa e7 4e eb 80 6a f3 6c 00 2c d7 d4 ac b3 de 58 0a 2f c7 75 d7 5b 37 4c 98 ea 1d d6 09 14 5a 91 f9 6c e5 72 b9 0a 22 70 90 26 23 11 f8 9e f6 6c 00 5c b5 6a d5 63 00 36 58 6f 30 85 94 6a 60 06 40 15 e1 8f 21 aa 0a 89 c0 41 eb 39 a2 b6 bd e4 11 11 09 Data Ascii: ]UU,woq7B!PTU1 %@W7Xo,Q~@GF"1BUIjr* g=vuc#^8)TM8Lg`zc)qn\.7:+g~\^Njl,X/u[7LZlr"p&#l\jc6Xo0j`@!A9
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: ef 5f a2 17 37 34 0a fc c0 3a 22 08 54 f5 6c f0 2c 20 bd 08 01 ee 1d 8b c5 22 7d db 8d 2f 06 40 00 d8 f5 91 47 7e 0e 60 bd 75 07 f9 52 c5 75 dd cf 59 47 78 a1 ab 58 bc 13 22 91 7c 22 8d 26 40 f5 db 85 42 e1 bf d6 19 41 b0 aa 58 5c 0b de 0b 48 2f 46 f5 4b 51 3e fb 07 f8 68 00 5c be 76 ed 98 a8 7e c1 ba 83 7c 48 f5 d7 91 5a ef ac a6 e6 6c f0 89 60 7a be fb 4b 3c fb 37 39 aa 9f 01 10 e9 83 3c bd a0 db 86 46 47 7f 63 1d 61 cd 37 03 20 00 74 16 8b 97 01 b8 c6 ba 83 7c e5 71 ad ad fd 92 75 84 97 ba ba ba 1e 85 ea 37 ad 3b c8 5f 14 f8 7c b1 58 7c c2 ba 23 48 ba 8a c5 3b 01 fc c4 ba 83 fc 45 45 3e c1 57 28 fa 6c 00 04 a0 ae ea e9 e0 0b bd e9 69 5f 1d 5f d6 21 52 ea e7 ce fd 1e 80 db ad 3b c8 27 44 ae 7b f5 51 47 f1 01 a1 29 28 3b ce 97 00 3c 60 dd 41 fe a0 40 67 Data Ascii: _74:"Tl, "}/@G~`uRuYGxX"\|"&@BAX\H/FKQ>h\v~\|HZl`zK<79<FGca7 t\|qu7;_\|X\|#H;EE>W(li__!R;'D{QG)(;<`A@g
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 9e fd 1b 1b e7 00 38 ca ba 85 b6 ea da 51 20 b9 6a f5 ea c7 ac 43 c2 e6 f6 c1 c1 3b f6 6f 6c fc 1b b6 0c 81 bc 1c ec 6f 1b 55 24 d5 55 2c 5e 65 1d 42 cf b7 6e 70 f0 a6 7d e7 cf bf 5d 44 96 20 04 c7 c8 90 7b d0 89 c5 5a ba f2 f9 7f 5a 87 04 51 28 3e dc b7 0f 0e 16 f7 9f 3f 3f 0e 91 37 58 b7 d0 8b 10 b9 b2 be 54 4a 75 ae 5e cd 1b dd ab e4 f6 c1 c1 bb f6 db 77 df ab a0 7a 3c 80 3a eb 1e 7a 41 0f 8b e3 b4 74 e5 f3 d7 5a 87 d0 8b 5b 37 38 f8 af fd e6 cf ff 07 44 96 81 67 d5 fd ea 2e 01 8e ed cc e7 6f b3 0e 09 2a b1 0e 98 49 ed c9 e4 e9 02 fc 10 21 19 6c 43 e4 f2 e1 52 e9 6d 03 03 03 23 d6 21 51 b0 38 91 38 30 26 d2 ab c0 1e d6 2d f4 2c 77 56 62 b1 d6 9e 9e 9e 75 d6 21 34 31 ed ad ad 47 89 6a 17 80 ed ad 5b e8 59 fe 59 76 9c 54 6f 6f ef bd d6 21 41 16 aa 7b 1c Data Ascii: 8Q jC;oloU$U,^eBnp}]D {ZZQ(>??7XTJu^wz<:zAtZ[78Dg.o*I!lCRm#!Q880&-,wVbu!41Gj[YYvToo!A{
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 1b ab 54 de 0d e0 3d 08 ef fd b2 0f 02 f8 3f b7 52 59 be aa bf ff df d6 31 14 4e 4b 52 a9 57 ba ae fb 0e 6c 39 ae 84 f3 4a 93 ea 7d 10 b9 08 95 ca 8f b9 a4 8b 3f 71 00 9c 84 4c 4b cb 6e 70 9c b7 2a f0 36 00 87 59 f7 4c db 96 1d f4 b7 15 d7 bd a8 a7 af ef 46 eb 1c 0a 86 f1 05 70 33 0a bc 4d 80 56 04 7d d9 0b d5 cd 10 e9 54 d5 8b 77 db b0 21 cf 17 cd 93 57 b2 4d 4d b3 37 d7 d5 1d 2f 22 6f 83 ea 22 00 31 eb a6 69 1a 86 c8 e5 e2 ba 17 1f 7e f4 d1 ab b9 34 92 bf 71 00 9c a2 74 22 b1 3f 80 a5 10 59 0a e0 35 08 ca 4a f0 22 ff 06 b0 12 22 2b 17 1e 71 c4 5f b8 83 d2 74 24 93 c9 97 d5 a9 a6 01 2c 51 91 24 82 b3 9e e0 26 55 ed 05 b0 c2 a9 af ef e1 42 e6 64 ad ad ad 6d 97 78 b9 9c d1 2d c7 94 e3 00 d4 59 37 4d d0 06 88 74 2b b0 72 d6 9c 39 f9 5c 2e b7 d9 3a 88 26 86 Data Ascii: T=?RY1NKRWl9J}?qLKnp*6YLFp3MV}Tw!WMM7/"o"1i~4qt"?Y5J""+q_t$,Q$&UBdmx-Y7Mt+r9\.:&
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: 9c 48 1c e8 00 2d 00 9a 21 f2 06 00 b3 ad 9b 9e a1 0c d5 eb 04 e8 d7 58 ac 7f d7 87 1f be 6a f9 da b5 63 d6 51 14 3e cb 12 89 9d c6 80 16 11 69 16 a0 59 81 3d ac 9b 9e 45 e4 df 00 fa 05 e8 2f a9 ae 2e 14 0a ff b5 4e 22 7a 4a 26 93 99 a3 a5 d2 71 0a 34 0b b0 08 c0 01 d6 4d cf f1 10 80 d5 0a f4 57 1c a7 af b7 b7 f7 5e eb 20 9a 1e 0e 80 53 d0 d1 d1 e1 ac bd e6 9a d7 c3 75 97 02 58 02 60 6f eb a6 49 d8 08 a0 07 c0 ca 92 ea 2a 9e 1d a4 e9 58 9a 4a cd 77 5d f7 4d 2e b0 44 80 23 b1 f5 cb b7 7e 51 86 c8 9f 45 b5 53 54 2f e7 25 63 b2 90 59 b4 68 67 ad a9 59 0a d5 a5 00 8e 05 50 67 dd 34 41 2a c0 f5 00 56 56 54 af 58 55 2c fe d3 3a 88 26 8f 03 e0 24 2c 69 6b 3b 48 cb e5 93 21 f2 56 df 9d dd 98 9a c7 a1 ba c2 75 9c 8b 5e 73 e4 91 7d bc e7 83 26 22 9d 4e ef 80 52 e9 Data Ascii: H-!XjcQ>iY=E/.N"zJ&q4MW^ SuX`oIXJw]M.D#~QEST/%cYhgYPg4AVVTXU,:&$,ik;H!Vu^s}&"NR
2024-09-18 13:35:51 UTC	1371	IN	Data Raw: e7 d4 d6 fe 1c 22 6f b7 6e 89 32 01 d6 41 24 d3 99 cf df 6e dd 12 36 a1 1b 00 d3 ad ad ef 83 ea f9 00 e2 d6 2d 04 40 f5 a2 fa b9 73 df c3 9b e2 bd 95 69 6d 3d 18 aa ab 14 d8 c3 ba 85 00 00 b7 bb 95 4a db aa fe fe 7f 5b 87 d0 d6 b5 b5 b5 ed 12 af 54 ba 15 58 68 dd 42 00 80 0d 10 59 ca 35 03 67 56 98 06 40 c9 b4 b6 7e 49 55 bf 64 1d 42 cf 21 72 65 7d b9 7c 7c ae bf 7f 93 75 4a 14 8c df af 74 05 80 b9 d6 2d f4 2c 0f b9 aa 8b 57 15 8b 6b ad 43 e8 c5 2d 4d a5 e6 57 5c b7 17 c0 02 eb 16 7a 96 92 aa be 93 f7 d5 ce 9c 50 2c fe da d1 d1 e1 cc a9 ab 5b 0e e0 e3 d6 2d f4 82 f6 2e 3b 4e 72 fe be fb 5e be 7e fd fa 27 ad 63 c2 2c d3 da 7a fc f8 f0 c7 27 de fd 67 b6 88 9c b4 7f 63 e3 d5 b7 0f 0e de 65 1d 43 cf 97 4e 26 0f 57 d5 3f 81 6f 87 f2 a3 b8 88 2c db b7 b1 f1 81 Data Ascii: "on2A$n6-@sim=J[TXhBY5gV@~IUdB!re}\|\|uJt-,WkC-MW\zP,[-.;Nr^~'c,z'gceCN&W?o,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49757	104.17.24.14	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:52 UTC	404	OUT	GET /ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:52 UTC	954	IN	HTTP/1.1 200 OK Date: Wed, 18 Sep 2024 13:35:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-13b3a" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1 Expires: Mon, 08 Sep 2025 13:35:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpOYs1BlcQOfYge81L8Fsb9kHEemo4TtObyeiKaas68coBMqUbJ4MHOOH%2FUVltWT02jZMx6s%2B5SzzGH2W3mlhFjHTXpVG6QZfJdZjUrx2JiToSxHYdV5ZZM1vzjsy5%2FonAthhuV6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c51b8bef92d8c65-EWR alt-svc: h3=":443"; ma=86400
2024-09-18 13:35:52 UTC	415	IN	Data Raw: 33 39 37 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 34 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 397c/! Bootstrap v4.4.0 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 3d 65 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 65 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 70 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 Data Ascii: =e\|\|self).bootstrap={},e.jQuery)}(this,function(e,p){"use strict";function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function s(e,t,n){retur
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 22 29 3b 69 66 28 21 74 7c 7c 22 23 22 3d 3d 3d 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 74 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3f 74 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 74 3d 70 28 65 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 70 28 65 29 2e 63 73 73 28 22 74 72 61 6e 73 Data Ascii: ");if(!t\|\|"#"===t){var n=e.getAttribute("href");t=n&&"#"!==n?n.trim():""}try{return document.querySelector(t)?t:null}catch(e){return null}},getTransitionDurationFromElement:function(e){if(!e)return 0;var t=p(e).css("transition-duration"),n=p(e).css("trans
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 65 5b 30 5d 3c 32 26 26 65 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 31 5d 26 26 65 5b 32 5d 3c 31 7c 7c 34 3c 3d 65 5b 30 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 62 75 74 20 6c 65 73 73 20 74 68 61 6e 20 76 34 2e 30 2e 30 22 29 7d 7d 3b 6d 2e 6a 51 75 65 72 79 44 65 74 65 63 74 69 6f 6e 28 29 2c 70 2e 66 6e 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 6f 2c 70 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6d 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 Data Ascii: lit(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1===e[0]&&9===e[1]&&e[2]<1\|\|4<=e[0])throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}};m.jQueryDetection(),p.fn.emulateTransitionEnd=o,p.event.special[m.TRANSITION_END
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 70 28 74 68 69 73 29 2c 74 3d 65 2e 64 61 74 61 28 61 29 3b 74 7c 7c 28 74 3d 6e 65 77 20 69 28 74 68 69 73 29 2c 65 2e 64 61 74 61 28 61 2c 74 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 6e 26 26 74 5b 6e 5d 28 74 68 69 73 29 7d 29 7d 2c 69 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 73 28 69 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: function(n){return this.each(function(){var e=p(this),t=e.data(a);t\|\|(t=new i(this),e.data(a,t)),"close"===n&&t[n](this)})},i._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.close(this)}},s(i,null,[{key:"VERSION",get:function(){retur
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 74 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 54 29 29 2c 65 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 54 29 29 7d 2c 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 79 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 Data Ascii: tribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(t&&this._element.setAttribute("aria-pressed",!this._element.classList.contains(T)),e&&p(this._element).toggleClass(T))},e.dispose=function(){p.removeData(this._element,y),this._element=nu
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 66 61 63 65 2c 70 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 78 2c 70 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 66 6e 5b 76 5d 3d 77 2c 78 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 52 3d 22 2e 22 2b 48 2c 46 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 4d 3d 70 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 2c 74 6f 75 63 68 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 Data Ascii: face,p.fn[v].Constructor=x,p.fn[v].noConflict=function(){return p.fn[v]=w,x._jQueryInterface};var j="carousel",H="bs.carousel",R="."+H,F=".data-api",M=p.fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0,touch:!0},U={interval:"(number\|boolea
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 73 65 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 Data Ascii: ment.querySelector(se),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var e=r.prototype;return e.next=function(){t
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 6c 28 7b 7d 2c 57 2c 7b 7d 2c 65 29 2c 6d 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 65 2c 55 29 2c 65 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4d 61 74 68 2e 61 Data Ascii: g=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(e){return e=l({},W,{},e),m.typeCheckConfig(j,e,U),e},e._handleSwipe=function(){var e=Math.a
2024-09-18 13:35:52 UTC	1369	IN	Data Raw: 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 65 29 29 3a 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 54 4f 55 43 48 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 56 2e 54 4f 55 43 48 4d Data Ascii: ._pointerEvent?(p(this._element).on(V.POINTERDOWN,function(e){return n(e)}),p(this._element).on(V.POINTERUP,function(e){return i(e)}),this._element.classList.add(ee)):(p(this._element).on(V.TOUCHSTART,function(e){return n(e)}),p(this._element).on(V.TOUCHM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	151.101.66.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:52 UTC	363	OUT	GET /jquery-3.4.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:52 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71037 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-1157d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 18 Sep 2024 13:35:52 GMT Age: 1241507 X-Served-By: cache-lga21992-LGA, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 185, 1 X-Timer: S1726666552.138799,VS0,VE1 Vary: Accept-Encoding
2024-09-18 13:35:52 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.4.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-18 13:35:52 UTC	16384	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 70 26 26 28 64 26 26 28 28 69 3d 28 6f 3d 61 5b 4e 5d 7c 7c 28 61 5b 4e 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 41 2c 70 5d 29 2c 61 3d 3d 3d 65 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 28 70 2d 3d 76 29 3d 3d 3d 67 7c 7c 70 25 67 3d 3d 30 26 26 30 3c 3d 70 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 2c 61 3d 78 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 78 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 73 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 Data Ascii: .toLowerCase()===f:1===a.nodeType)&&++p&&(d&&((i=(o=a[N]\|\|(a[N]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[A,p]),a===e))break;return(p-=v)===g\|\|p%g==0&&0<=p/g}}},PSEUDO:function(e,o){var t,a=x.pseudos[e]\|\|x.setFilters[e.toLowerCase()]\|\|se.error("unsupporte
2024-09-18 13:35:52 UTC	16384	IN	Data Raw: 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 51 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 74 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 58 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 58 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 Data Ascii: [this.expando];return t\|\|(t={},Q(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:fu
2024-09-18 13:35:52 UTC	16384	IN	Data Raw: 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 45 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 6e 2c 72 2c 74 2e 68 61 6e 64 6c 65 29 3b 6e 5b 47 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 6e 5b 4b 2e 65 78 70 61 6e 64 6f 5d 26 26 28 6e 5b 4b 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 45 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 42 65 28 74 68 69 73 2c 65 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 42 65 28 74 68 69 73 2c 65 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 7a 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d Data Ascii: ent.remove(n,r):E.removeEvent(n,r,t.handle);n[G.expando]=void 0}n[K.expando]&&(n[K.expando]=void 0)}}}),E.fn.extend({detach:function(e){return Be(this,e,!0)},remove:function(e){return Be(this,e)},text:function(e){return z(this,function(e){return void 0===
2024-09-18 13:35:52 UTC	5501	IN	Data Raw: 22 65 6c 65 6d 65 6e 74 73 22 29 3b 72 65 74 75 72 6e 20 65 3f 45 2e 6d 61 6b 65 41 72 72 61 79 28 65 29 3a 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 26 26 21 45 28 74 68 69 73 29 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 26 26 79 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 76 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 66 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 45 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 Data Ascii: "elements");return e?E.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!E(this).is(":disabled")&&yt.test(this.nodeName)&&!vt.test(e)&&(this.checked\|\|!fe.test(e))}).map(function(e,t){var n=E(this).val();return null==n?null:Array.isA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49735	3.5.149.122	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:52 UTC	659	OUT	GET /favicon.ico HTTP/1.1 Host: dltxc.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:52 UTC	297	IN	HTTP/1.1 403 Forbidden x-amz-request-id: 505T3YZGG0FSW4YX x-amz-id-2: YbW8JIVa/EjKMNfRuco7+fNQCL/zqmFsZrLK/LBjT/hefAI7WH0KjRlnDjsHfhjiM88n0fUHzPeQdVAujKhH8w== Content-Type: application/xml Transfer-Encoding: chunked Date: Wed, 18 Sep 2024 13:35:52 GMT Server: AmazonS3 Connection: close
2024-09-18 13:35:52 UTC	266	IN	Data Raw: 66 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 35 30 35 54 33 59 5a 47 47 30 46 53 57 34 59 58 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 59 62 57 38 4a 49 56 61 2f 45 6a 4b 4d 4e 66 52 75 63 6f 37 2b 66 4e 51 43 4c 2f 7a 71 6d 46 73 5a 72 4c 4b 2f 4c 42 6a 54 2f 68 65 66 41 49 37 57 48 30 4b 6a 52 6c 6e 44 6a 73 48 66 68 6a 69 4d 38 38 6e 30 66 55 48 7a 50 65 51 64 56 41 75 6a 4b 68 48 38 77 3d 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 Data Ascii: ff<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>505T3YZGG0FSW4YX</RequestId><HostId>YbW8JIVa/EjKMNfRuco7+fNQCL/zqmFsZrLK/LBjT/hefAI7WH0KjRlnDjsHfhjiM88n0fUHzPeQdVAujKhH8w==</HostId></Er

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-18 13:35:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26039 Date: Wed, 18 Sep 2024 13:35:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-18 13:35:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	35.190.80.1	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:53 UTC	543	OUT	OPTIONS /report/v4?s=zpOYs1BlcQOfYge81L8Fsb9kHEemo4TtObyeiKaas68coBMqUbJ4MHOOH%2FUVltWT02jZMx6s%2B5SzzGH2W3mlhFjHTXpVG6QZfJdZjUrx2JiToSxHYdV5ZZM1vzjsy5%2FonAthhuV6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:53 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 18 Sep 2024 13:35:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	35.190.80.1	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:35:53 UTC	480	OUT	POST /report/v4?s=zpOYs1BlcQOfYge81L8Fsb9kHEemo4TtObyeiKaas68coBMqUbJ4MHOOH%2FUVltWT02jZMx6s%2B5SzzGH2W3mlhFjHTXpVG6QZfJdZjUrx2JiToSxHYdV5ZZM1vzjsy5%2FonAthhuV6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 488 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:35:53 UTC	488	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 34 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 63 68 75 6e 6b 65 64 5f 65 6e 63 6f 64 69 6e 67 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d Data Ascii: [{"age":0,"body":{"elapsed_time":994,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.17.24.14","status_code":200,"type":"http.response.invalid.incomplete_chunked_encoding"},"type":"network-
2024-09-18 13:35:53 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 18 Sep 2024 13:35:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	53307	3.5.149.122	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-18 13:36:19 UTC	659	OUT	GET /favicon.ico HTTP/1.1 Host: dltxc.s3.ap-southeast-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-18 13:36:19 UTC	297	IN	HTTP/1.1 403 Forbidden x-amz-request-id: JP79RX5CYXRCJQRE x-amz-id-2: eZ0hy3f/BQV03dIUUKh76S7BzNUkjgOy+eqNN2B1dzBMNL4qK1zX0QX6UU3MLwlY0r5jI7UYgfUn8FmsnxCE9Q== Content-Type: application/xml Transfer-Encoding: chunked Date: Wed, 18 Sep 2024 13:36:19 GMT Server: AmazonS3 Connection: close
2024-09-18 13:36:19 UTC	266	IN	Data Raw: 66 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 4a 50 37 39 52 58 35 43 59 58 52 43 4a 51 52 45 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 65 5a 30 68 79 33 66 2f 42 51 56 30 33 64 49 55 55 4b 68 37 36 53 37 42 7a 4e 55 6b 6a 67 4f 79 2b 65 71 4e 4e 32 42 31 64 7a 42 4d 4e 4c 34 71 4b 31 7a 58 30 51 58 36 55 55 33 4d 4c 77 6c 59 30 72 35 6a 49 37 55 59 67 66 55 6e 38 46 6d 73 6e 78 43 45 39 51 3d 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 Data Ascii: ff<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>JP79RX5CYXRCJQRE</RequestId><HostId>eZ0hy3f/BQV03dIUUKh76S7BzNUkjgOy+eqNN2B1dzBMNL4qK1zX0QX6UU3MLwlY0r5jI7UYgfUn8FmsnxCE9Q==</HostId></Er

Target ID:	0
Start time:	09:35:40
Start date:	18/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:35:43
Start date:	18/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2272,i,17334703872634533421,7170490073396937674,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:35:45
Start date:	18/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 4.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_82, type: DROPPED

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: Form action: https://tsukishimakika.com/drive/bato/mail2.php amazonaws tsukishimakika
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: Form action: https://tsukishimakika.com/drive/bato/mail2.php amazonaws tsukishimakika

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: Number of links: 0
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: Number of links: 0

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: Total embedded image size: 176924
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: Total embedded image size: 176924

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: Title: MyDrive does not match URL
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: Title: MyDrive does not match URL

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: <input type="password" .../> found
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: <input type="password" .../> found

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: No favicon
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: No favicon

Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	HTTP Parser: No <meta name="copyright".. found
Source: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com#	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.4:63399 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:53305 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /svs/wx.htm?eml=test@yahoo.com HTTP/1.1Host: dltxc.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmWxxNbNWhMcoKQDr9xpkTAkQYXMze556hv46nSz11W6Fh?filename=style.css HTTP/1.1Host: ipfs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmW51WVXxQ8VsUWyJvpVnKo1ZdSmMLio66VXVzVx6stNjK?filename=modal.css HTTP/1.1Host: ipfs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.4.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6C3Pnkj.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6C3Pnkj.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.4.0/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.4.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dltxc.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dltxc.s3.ap-southeast-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: dltxc.s3.ap-southeast-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: ipfs.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1053870888\sets.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_1618428186\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5984_448595328\manifest.json

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com